Download the air-gapped Docker drop-box.
The full KillSesh Enterprise pipeline as a tarball you can read, verify, and run inside your VPC. 840 KB. No installer. No telemetry. The model runs on your hardware via Ollama; source code never leaves your network.
killsesh-enterprise-v0.1.0.tar.gz
Backend (Python/FastAPI), static UI, Nginx reverse proxy, docker-compose, MANIFEST.txt, README. Pulls Ollama from your host. Designed to pass VRM review without exceptions.
905115f642e82ac4366160a47241449dfcf4d6a64ae530f12d46dcdfbe6af323killsesh-extension-v0.1.0.zip
The consumer KillSesh extension — breach scan, exposed-session killer, account deletion playbooks. Unzip, load unpacked in Chrome/Brave/Edge.
14a9b8707751ce1896e37a9f9db51cc3f9ccc7f6769564f277df9e2c6b051467The same checksum standard wire-transfer batches and core-banking packages have used for 30 years. If even one bit of the tarball is altered in transit, the hash will not match. Your IT-Sec team can verify the file is byte-identical to what we shipped — before it ever runs.
# Mac / Linux curl -sO https://killsesh.com/downloads/killsesh-enterprise-v0.1.0.tar.gz curl -s https://killsesh.com/downloads/SHA256SUMS | shasum -a 256 -c killsesh-enterprise-v0.1.0.tar.gz: OK # Windows PowerShell $expected = (Invoke-WebRequest https://killsesh.com/downloads/SHA256SUMS).Content Get-FileHash killsesh-enterprise-v0.1.0.tar.gz -Algorithm SHA256
Inside the tarball, MANIFEST.txt lists every shipped file with its individual SHA256 and byte size. This is how banks verify their nightly batch files: a top-level checksum that proves the bundle is intact, plus a per-file manifest that proves nothing was swapped, added, or removed inside. No compiled binaries, no obfuscation — every shipped artifact is a small text file you can read.
$ tar -xzf killsesh-enterprise-v0.1.0.tar.gz $ cd killsesh-enterprise-deploy $ cat MANIFEST.txt # every file · individual SHA256 · byte size $ sha256sum -c MANIFEST.txt # verify each file matches its manifest entry
✓ THIS CAN
- Read COBOL files you upload through the UI
- Talk to your local Ollama at host.docker.internal:11434
- Write generated TypeScript schemas to ./output (mounted)
✗ THIS CANNOT
- Reach the public internet (verifiable: docker network inspect)
- Write outside its mounted volumes
- Read your home directory, env vars, or credentials
- Phone home with telemetry — there is none
▸ Already past download?
Book the $15K Assessment Pilot — we run it on 5 of your worst copybooks. 5 business days. Net-15.