Privatae · source

AI on your network,not your machines.

Because we need boundaries.

This is the source for the part of Privatae that runs on your machines: the bastion and the bastion agent. Both are free software under the GNU General Public License, version 3 or later. You can read them, build them, change them and redistribute them. The platform your Host runs on is separate, proprietary software and is not published here.

The bastion

privatae/privatae-bastion

One static binary, written in Go, that turns a Mac, Linux or Windows machine into a bastion on your Privatae network. It opens a tunnel out to your one Host and holds it; nothing dials in. The Host reaches the machine through that tunnel, and what it can ask for is a fixed list of operations with fixed arguments, never a shell.

GPL-3.0-or-laterGomacOS · Linux · Windows

git clone https://git.privatae.ai/privatae/privatae-bastion.git

Browse the source README LICENSE Download as zip

The bastion agent

privatae/bastion-agent

The small program, written in Python, that a bastion runs on your machine for one folder. It walks, extracts, sanitizes and indexes that folder where it sits. Your files never leave the machine; what crosses the tunnel is the index and what the grant you approved allows. It is deployed from a grant, never installed by a person.

GPL-3.0-or-laterPython 3.8+One folder per agent

git clone https://git.privatae.ai/privatae/bastion-agent.git

Browse the source README LICENSE Download as zip

Reading it without an account

Everything here works without signing in.

ClonePlain HTTPS, no credentials: git clone https://git.privatae.ai/privatae/privatae-bastion.git

Raw files by URLAny file, for a script or an AI agent that fetches URLs: /privatae/privatae-bastion/raw/branch/main/<path>

Whole tree as a zipOne request, no git: /privatae/privatae-bastion/archive/main.zip

What is not openSign-in, the API and every other repository on this forge are reachable only from inside the Privatae network. A request to them from the internet is dropped, not answered.

Installing the bastion

One command puts a bastion on a machine.

The installer verifies the binary against a published digest before it runs. It prints where the license lives. Pair the machine from your Host afterwards; the bastion does nothing until it is paired.

curl -fsSL https://privatae.ai/bastion/install.sh | sudo sh      # macOS / Linux
irm https://privatae.ai/bastion/install.ps1 | iex                # Windows

Current version and digests License served next to the binaries

What a Host is, on privatae.ai

Privatae Host privatae.ai How the boundaries are enforced Copyright Privatae LLC. The bastion and the bastion agent are GPL-3.0-or-later.