Skip to main content

​
From source (Rust)

cargo install --path .
Or build without installing: 
cargo build --release
# Binary at target/release/aivault

​
From release artifacts

Download the latest release from the GitHub releases page. Artifacts are available for macOS (arm64, x86_64) and Linux (x86_64). macOS releases are signed and notarized. Linux releases include cosign keyless signatures for CI-driven verification.

​
Verify downloads

Check checksums against the published .sha256 files: 
shasum -a 256 -c aivault-*.sha256
macOS signature inspection: 
codesign -dv --verbose=4 aivault
spctl --assess --verbose aivault
Linux cosign verification: 
cosign verify-blob \
  --certificate aivault-*.cert \
  --signature aivault-*.sig \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/<owner>/<repo>/.github/workflows/release.yml@refs/tags/cli-vX.Y.Z' \
  aivault-*.tar.gz

​
Verify installation

aivault status
This auto-initializes the vault with safe defaults (macOS Keychain on macOS) if no vault exists yet. Next: Getting started