Download the CFA evaluation bundle.

Free, signed, compiled evaluation builds for macOS and Linux -- no account or approval required. This page is also the public trust-root reference: compare the public key in your zip with the key published here, then verify the Ed25519 signature over CHECKSUMS.sha256 before running the bundle.

Pinned DER/SPKI SHA-256 fingerprint 82c183ef1f56a6ed7bf0d6384d9e8f6d1a23d149dbe3ec8b6a3a449b1644a5c3

Download

macOS (Apple Silicon)

Signed, compiled evaluation bundle. Free to download and run locally, no account or approval required.

Download for macOS arm64

Download

Linux (x86_64)

Signed, compiled evaluation bundle. Free to download and run locally, no account or approval required.

Download for Linux amd64

All releases

Release history

Browse every published version, its notes, and its assets on the public releases repo.

View on GitHub

Public key

Out-of-band release key

Fetch this key from the official site and compare it with the copy inside the protected zip.

Download release-ed25519-public.pem

Manifest

Checksums

After extracting the bundle, run the checksum manifest against every packaged file.

Download CHECKSUMS.sha256

Signature

Ed25519 signature

The signature covers the checksum manifest, not a single binary path.

Download CHECKSUMS.sha256.sig

Verification sequence

Extract the protected evaluation zip into a fresh directory.
Compare the included release-ed25519-public.pem against this public key endpoint.
Check the public-key fingerprint against the pinned value on this page.
Verify CHECKSUMS.sha256.sig over CHECKSUMS.sha256.
Run shasum -a 256 -c CHECKSUMS.sha256 inside the extracted bundle.
Use the bundled VERIFY.md for the authoritative offline command transcript.

Boundary: These artifacts prove release integrity for protected evaluation bundles. They do not claim Apple notarization, marketplace certification, production appliance readiness, or legal compliance certification.