Skip to content
Join Us
Vraelis Prompto

Lock AI to its exact bytes.

Open source. Records exactly which AI model files and coding-agent add-ons you approved, offline, and tells you the moment anything changes.

DownloadAll versions

Version 0.1.2 · October 21, 2026WindowsmacOS (Apple silicon)macOS (Intel)Linux

drone-vision-v39 files · 11.9 GB
Checking
  1. config.json1.2 KBsha256 4f1c09a2…
  2. generation_config.json184 Bsha256 9b77e1d0…
  3. tokenizer.json7.0 MBsha256 c3a85e4f…
  4. tokenizer_config.json51 KBsha256 e19d72b6…
  5. model-00001-of-00003.safetensors4.9 GBsha256 a3f927c1…
  6. model-00002-of-00003.safetensors4.9 GBsha256 7d4e0b85…
  7. model-00003-of-00003.safetensors2.1 GBsha256 5b8c3da7…
  8. model.safetensors.index.json24 KBsha256 0f6a94e3…
  9. special_tokens_map.json414 Bsha256 d82b17c0…
Download

One file. Nothing else to install.

Version 0.1.2. Each download includes everything it needs, so you do not need Python.

Windows

Rename the file to vraelis.exe and open a terminal in its folder. Windows may say “Windows protected your PC” the first time: choose More info, then Run anyway.

macOS

Double-click to unpack, then open Terminal in that folder. macOS blocks the first run of a download it does not know: right-click vraelis, choose Open, then Open again.

Linux

Unpack with tar -xzf, then run ./vraelis from that folder.

Then run vraelis --version. The downloads are not yet signed, which is why your system warns you. Check each file against SHA256SUMS-downloads: certutil -hashfile FILE SHA256 on Windows, shasum -a 256 FILE on macOS, sha256sum FILE on Linux.

Versions

Release history

  1. 0.1.2LatestOct 21, 2026Ignore rules now match git exactly, so a gitignored agent config is never treated as shared.Release notes
  2. 0.1.1Oct 21, 2026Privacy and reporting fixes for agent configs, and files checked for presence only are now listed in every result.Release notes
  3. 0.1.0Oct 20, 2026First public release (alpha): locks for AI model folders and coding-agent add-ons.Release notes
Two locks, one tool

Record exactly what you approved. Know the moment it changes.

Every result is one of Unchanged, Changed or Can't verify, and says what it shows and what it does not. It works offline (one optional check goes online), never loads a model and never launches anything.

vraelis models

AI model folders

Records every file of an AI model, byte for byte.

  • Checks the model is complete: no missing pieces, cut-off files or placeholders left where the real files should be.
  • Names exactly which file changed, went missing or was added.
  • Can also check who published it, against a publisher you name.
vraelis agents

Coding-agent add-onsPreview

Records what an AI coding agent is allowed to load and launch.

  • The tools and servers it can start.
  • Its settings, including what it is permitted to do.
  • The skills it uses, and the scripts its tools launch.
Use

Lock, then verify.

Lock a folder once you approve it. Verify it before you load, ship or share it.

0Unchanged
1Changed, with each change listed
2Can't verify
terminal
vraelis models lock   ./my-model    # writes modellock.json
vraelis models verify ./my-model    # Unchanged / Changed / Can't verify
vraelis models diff   approved.json new.json

vraelis agents lock   ./project     # writes addonlock.json
vraelis agents verify ./project
Scope

What a result does not show

  • That a model, add-on or server is safe, correct or behaves as intended.
  • Which model a device or server actually loads, or which tools a server exposes at run time. Nothing is launched.
  • Who published the files, unless you run the optional signature check against a signer you chose.
  • Changes inside packages fetched at launch (npx, uvx, docker). Floating or unpinned packages are flagged.
Questions

Questions about Vraelis Prompto

Is Vraelis Prompto free?

Yes. It is open source under the Apache-2.0 license.

Why is the command called vraelis?

Vraelis Prompto is the product name; the command you run is vraelis, as it was at the first release.

How does it relate to Vraelis Contour?

Vraelis Prompto records which files you approved, on your own machine. Vraelis Contour, in private development, compares an approved release with what a machine reports it is running.

Do I need Python?

No. The downloads include everything they need. Developers who prefer pip can install the Python package instead (Python 3.11 or newer); it is not on PyPI yet.

Why does my computer warn me?

The downloads are not code-signed yet, so Windows and macOS do not recognize the publisher. Check the file against SHA256SUMS-downloads, then allow it once.

How do I report a bug or ask a question?

Open an issue on GitHub, or write to us. Report a security issue privately, as the repository's SECURITY.md describes.

Using Vraelis Prompto across a team?

Tell us what you would need: shared approvals, a daily check of your agents' packages, a gate in CI. It shapes what we build next.

Tell usStar on GitHub