Install the Companion Agent
Deploy the local trust broker on Windows, macOS, and Linux. Every release is code-signed, checksummed, and recorded in the public transparency log - verify exactly what you run before you run it.
- Signed installers with published SHA-256 checksums
- MDM deployment packages for Intune, Jamf, and Linux
- Hardware-backed device identity on first launch
Choose your platform
Download the installer for your OS, verify the SHA-256 checksum, then deploy directly or hand the package to your MDM.
Windows
Windows 10 / 11 · Server 2019+
macOS
Universal · macOS 12+
Linux
.deb · .rpm · x86_64
Installer binaries and checksums shown here are placeholders pending the first public release. See the deployment guide for packaging details.
Check the checksum
Confirm the installer you downloaded matches the published SHA-256 before deploying it across your fleet.
Code-signed installers
Every build is signed and recorded in the public transparency log.
Hardware-backed at install
Generates a TPM / Secure Enclave device key on first run.
MDM-ready packages
MSI/MSIX, notarized .pkg, and .deb/.rpm for Intune and Jamf.
# Windows (PowerShell)Get-FileHash .\osdf-companion-agent-0.4.2-x64.msi -Algorithm SHA256 # macOS / Linuxshasum -a 256 osdf-companion-agent-0.4.2-universal.pkg # Compare against the published checksum aboveVersion history & changelog
Synced automatically from GitHub releases - refreshed every hour.
- Faster local verification (0.2–0.6 ms typical)
- Improved offline trust-evidence handling
- Accessibility and rendering fixes
- Witness cosignature verification in the Viewer
- Expanded transparency-log checks
- Performance improvements on large documents
- Hardened constrained-ZIP parser
- Consistency-proof caching
- PDF/A rendition fidelity improvements
Roll out the Agent with your MDM
Package the Companion Agent for Intune, Jamf, or your Linux config management, and make every document access a verified, device-bound decision.