Code signing policy
How KALYPSO's releases are built and signed, who approves them, and what the app sends over the network.
Windows releases: free code signing provided by SignPath.io, certificate by SignPath Foundation (application in review).
What gets signed
Only KALYPSO's own release files, built from the source code in github.com/kalyppso/kalypso: the Windows installers (.exe and .msi) and the application inside them. Every release is built by the project's release workflow on GitHub-hosted runners, from a tagged commit on main. Nothing is signed from a developer's machine.
KALYPSO is open source under the MIT License. Third-party libraries in the installers are open source and are not signed with the project's certificate.
Team and roles
| Role | Who | What they do |
|---|---|---|
| Committers | @chxmxii | May merge changes to main. |
| Reviewers | @chxmxii | Review every change from someone who is not a committer before it is merged, including changes to build scripts and CI. |
| Approvers | @chxmxii | Approve each signing request by hand, after checking it comes from a release build. |
Everyone with access to the repository or to the signing service uses two-factor authentication.
Privacy
KALYPSO has no account, no analytics and no telemetry. It sends nothing over the network unless you ask it to, with one exception: the update check.
- Update check: once, a few seconds after it starts, KALYPSO downloads the release manifest from GitHub (
github.com/kalyppso/kalypso/releases) to see whether a newer version exists. GitHub sees your IP address, as with any download. Nothing about you or your work is sent. - Model calls: your agents' requests go to the model provider you choose (for example Anthropic, OpenAI, or a local Ollama), with your key, through KALYPSO's gateway on your machine.
- GitHub: only if you connect a GitHub account. KALYPSO then uses it for the repositories you link, and checks every hour that the connection still works.
- Sandbox images: when you create a sandbox, your container engine downloads the agent runner image from
ghcr.io. - Your agents: what an agent reaches on the network is up to you, and is checked against your Rules.
These services have their own privacy policies: GitHub, and the model provider you use.
Uninstalling
Windows: Settings, Apps, KALYPSO, Uninstall. macOS: move KALYPSO to the Trash. Linux: remove the AppImage, or sudo apt remove kalypso for the .deb.