1 NOVEMBER 2026 · CONTROLLED EVALUATION
AgentSWAT 0.4.0-rc.4
Choose job roles, set responsibilities and effort, and retain human review. This release improves provider cancellation, Codex session handling, recovery and distribution checks. Production readiness remains open.
Download the Pilot service
The ZIP below is an operator-run single-workspace service/API. It requires Node.js 24 or later and the desktop Team workspace as its user interface. It is not the desktop application and has no browser GUI. The shared service excludes Codex.
Download Pilot server ZIPSHA-256 checksumsSize: 2,169,755 bytes. SHA-256:4ed9b158ab8ab96bba728e7b8139127e5d684f2b273ab005ca1a039fd150f7c3
Extract the ZIP. From its AgentSWAT-Pilot-Server folder, run npm run pilot:setup once, then npm run pilot:start. Windows operators may use Start-Pilot.cmd. Keep the printed administrator token private; configure the desktop client for http://127.0.0.1:4319. Remote access needs the documented TLS controls.
Setup guide · Backup and restore · Validation notes · Public evidence summary
Availability
| Package | Status |
|---|---|
| Pilot server ZIP | Available above for supervised evaluation. Extracted service and recovery checks passed on Windows with zero model calls. |
| Windows desktop x64 | Built for controlled local evaluation, unsigned. Native startup remains blocked on the build host. Public installer download is unavailable. |
| macOS desktop | No tested binary, signing or notarization evidence. No download offered. |
What was checked
- 186 automated application tests passed; the extracted source ZIP repeated all 186 using the same pinned dependencies. TypeScript and builds passed.
- The extracted Pilot passed eight service smoke checks and four additional backup/restore integration checks, including authentication, encrypted connection preservation and verified audit.
- 103 role profiles and 194 exact role assets were verified in the Windows archive. ZIP integrity, expected versions and bounded private-state/key-pattern scans passed.
- Independent reviews found and closed a nested-restore corruption path and malformed Codex notification crash path before final assembly.
What remains open
Ordinary-account desktop installation and native UI, signing, macOS, live provider/authenticated Codex workflows, independent security and operational evaluation remain open. Role profiles are instruction material: all 455 proposed competence cases remain unrun. One-host synthetic recovery does not establish disaster recovery targets. There is no n8n/Zapier parity, regulated-use or trained-specialist claim.
The earlier signed-out Codex handshake is historical evidence, not a live test of this final candidate. No model inference calls were made during this release validation. Use your own authorized model account and budget for any live work.