OpenSecura

Download OpenAIDR

Version 2026.11.12+6ec31af

Choose the installer for your computer.

OSS test build. The macOS app is Developer ID signed and notarized by Apple. Windows installers are unsigned. Updates are configured for macOS · Apple Silicon. Other installers require manual updates. DEB installations use the package manager.

On macOS, this build requires Apple Silicon. Intel Macs are not supported.

• macOS · Apple Silicon (DMG)116.9 MiB · SHA-256: 231b331247c83556590967945febce02a72d851ca1fc496c5a34fac34d8e1d3e
• Windows · x64 (EXE)51.4 MiB · SHA-256: 263760110669463313b7650dc28a978214e724072e1cfcd7021e1eb96fb00e88
• Linux · x64 (AppImage)165.0 MiB · SHA-256: 92da9c19f4d6b30cb3bb62645e1b4c5d78a593d6ad57f9b778333b150d959b78
• Linux · x64 (DEB)174.3 MiB · SHA-256: 667581960b87a89bf4e500130700665aa53be424c008427a6d546e23e60aac86

Fixed links to the current build: macOS · Apple Silicon (DMG) · Windows · x64 (EXE) · Linux · x64 (AppImage) · Linux · x64 (DEB). These links change with each publication; the versioned links above do not.

Release notes

## 2026.11.12+6ec31af - 2026-11-12

OSS test build: macOS Apple Silicon (ARM64) only, Developer ID signed and notarized by Apple. Windows installers are unsigned. Signed updates are configured for macOS · Apple Silicon; rollout promotion is separate. DEB installations use the package manager. The source notes below may describe production packages or channels that are not included in this test build.

Build commit: `6ec31af3cfb26945848bd6aeda5d581dc12ea167`.

### Source changelog

- Enable signed OSS update builds to check their own update feed. Existing builds without update support need one manual installation of an update-enabled release.
- Reduce background CPU use when maintaining large local usage histories and checking retained agent history.
- Connect a free installation to a Google account through the system browser. Sign-in preserves local history and shares the account's weekly credits across devices.
- Distinguish one-time starter credits from a Google account's weekly free allowance. Show the account and reset date when connected.
- Fix WorkBuddy on Windows blocking every prompt and tool call with `spawn pwsh ENOENT` when PowerShell 7 is not installed. WorkBuddy guardrails now run in Git Bash or Windows PowerShell. If WorkBuddy cannot start either shell, OpenAIDR leaves WorkBuddy without guardrails instead of blocking it. Restart WorkBuddy after OpenAIDR updates its guardrails.
- Add a Network proxy setting to the sensor status and Settings so the OpenAIDR sensor and app updates can reach your organization through an HTTP or HTTPS proxy.
- Add an enterprise desktop edition that requires organization enrollment and omits free, personal API-key, and local runtime setup. Existing personal data is kept when switching editions.
- Open fresh setup without an extra Reinstall click after uninstalling with all local data deleted on macOS.
- Remove the redundant "This device" label beside the Guardrails heading.
- Make all Posture pages more compact with shorter copy, tighter rows, inline asset metadata, and expandable collection details. Partial inventory counts remain visible.
- Offer only the Production Intelligence service in the bundled local dashboard connection settings.
- Select the release channel at build time with `OPENAIDR_RELEASE_CHANNEL`, so open-source builds can read their own signed update feed and key instead of the enterprise channel.