PUBLIC UNSIGNED ENGINEERING RELEASE · WINDOWS X64 + LINUX AMD64

Decide before a command starts.
Keep evidence of what happened.

UEG is a local command decision and evidence layer for operators, CI systems, and AI agents. It applies a conservative policy gate, runs only an admitted command, and records signed, offline-verifiable evidence of the request and observed result.

Download Windows x64 Download Linux amd64 View source on GitHub

Unsigned engineering release. Verify SHA-256 before extraction. No code-signing or general-release claim.

WHAT UEG DOES

A command gateway with bounded evidence—not a sandbox.

Request

Receive the exact command, arguments, working context, and operator posture.

Decide

Apply conservative effect rules before an admitted child process starts.

Record

Capture exit status, complete output hashes and counts, bounded excerpts, and signed receipts.

Verify

Export evidence another party can check with independent identity and lifecycle inputs.

EVIDENCE BOUNDARY

The exact Windows and Linux packages passed their recorded engineering workflows.

Each recorded archive passed 50 packaged-artifact checks covering clean extraction, identity and recovery custody, admitted execution, receipts and export, pinned Go and independent packaged-Python verification, tamper refusal, restart, transfer, suspension/resumption, recovery, and revocation.

WINDOWS X64 ARCHIVE SHA-256 42daf24cabbef22c074516ca246d237866a2499340a19737ce854f37128bb179 LINUX AMD64 ARCHIVE SHA-256 d5bb3b251d1dc7035298a45e86cc869caf001114e5c4562c248709beea94c0c3 SOURCE ARCHIVE SHA-256 4df1ad857bde7954a0263b0ead7cf50d02c1228d1679b93e51d5b0520bc0be92

EXACT PUBLIC ASSETS

Download only what the evidence supports.

WINDOWS X64

Windows package

The natively qualified Windows command-line package, walkthrough, documentation, demo, SBOM, and notices.

Download .zip

LINUX AMD64

Linux package

The exact Linux amd64 archive passed the retained 50-check packaged workflow on Ubuntu 24.04.3 x86_64 under WSL2 with a persistent Linux temp root. WSL is not a qualified distribution target, and this is not separate native-Linux-host proof.

UEG 2.2.0-v3-candidate.2 provides separate Windows x64 and Linux amd64 downloads from one source state. The exact Windows archive passed the retained 50-check native Windows workflow. The exact Linux archive passed the retained WSL2-hosted Ubuntu workflow described above. Both archives are unsigned and checksum-bound. This is an engineering release, not a signed general release.

Download .tar.gz

SOURCE

Exact source snapshot

The source archive named by the candidate build provenance.

Download source

INDEPENDENT CHECK

Python verifier

A separately packaged implementation for checking exported evidence.

Download verifier

Download SHA256SUMS · Read prerelease notes and native proof assets

LIMITS STAY CLOSE TO THE CLAIM

Evidence is useful only when its boundary remains visible.

UEG is not process containment or an operating-system sandbox.
It does not prove the host, operator, environment, or clock was honest.
It does not observe every syscall, network action, filesystem effect, or side effect.
A B+ identity proves pseudonymous ledger continuity, not real-world identity.
Offline verification cannot prove that no newer lifecycle event exists.
Only Windows x64 and Linux amd64 are qualified distribution targets.
Linux arm64, macOS, ARM, and WSL are not qualified distribution targets.
The engineering release is unsigned and has not received an independent security review.

SUPPORT

Use the public issue tracker.

Report ordinary product questions and reproducible, non-sensitive defects through GitHub Issues. No response-time or service-level promise is made.

Open an issue

SECURITY

Report privately.

Use GitHub private vulnerability reporting. Never place credentials, private keys, sensitive evidence, or an undisclosed vulnerability in a public issue.

Report a vulnerability privately