TrustRail Desktop

The operator console as a native app: approvals inbox, action ledger, kill switches, and delegation lineage for any TrustRail deployment you point it at. Version 0.9.0.

macOS

Apple silicon and Intel · macOS 12+

Download .dmg (Apple silicon)TrustRail-0.9.0-arm64.dmgIntel: TrustRail-0.9.0-x64.dmg

Windows

Windows 10 and 11 · x64

Download installerTrustRail-Setup-0.9.0.exe

Linux

AppImage and Debian package · x64

Download AppImageTrustRail-0.9.0.AppImageDebian/Ubuntu: trustrail-desktop_0.9.0_amd64.deb

Release binaries are produced by the packaging pipeline in apps/desktop (pnpm --filter @trustrail/desktop dist) and published alongside this site under /downloads/. If a link above returns 404, the artifact for that platform has not been uploaded for this version yet — you can always build from source with the same command. Verify downloads against the SHA-256 checksums published with each release.

Connecting the app

  1. Install and open TrustRail Desktop.
  2. Enter your deployment's web origin (for a local stack, http://127.0.0.1:3000).
  3. Sign in through your organization's identity provider — the app uses the same OIDC + PKCE flow, server-side sessions, and permission model as the web dashboard. The app keeps only your chosen deployment origins in its config; the session cookie is held in the OS keychain-backed browser session for that deployment, exactly as a browser would, and is cleared on sign-out.

Security posture

  • Renderer runs with context isolation; no Node integration in web content.
  • Navigation is restricted to the deployment origin you configured.
  • Provider credentials never reach the app — they live only in the TrustRail gateway.