There is a single Windows build, and downloading it asks nothing of you — no account, no LinkedIn, no key. The two tiers separate at sign-in, not at download: without a beta key everything runs locally and no hosted DQC-OS is issued; a key is what adds it, and a key is issued automatically when a signed-in account verifies with LinkedIn. The public alelyon-os toolkit is separate again and needs none of it.
What the key changes.
Open beta
Local UI and open toolkit
This is the same build as the closed beta, and it downloads right here — no LinkedIn, no account, no key. The tier is decided at sign-in: with no beta key, everything runs locally and no hosted DQC-OS is issued. Separately, the publicalelyon-os toolkit needs nothing either.
What this tier includes, however you obtain the build:
Terminal UI, Lattice, the local calculator, and per-answer tool traces
A local model server, or a cloud provider key you configure
The separately published verifier, coordinate, compute-DAG, and API-client tools
No hosted DQC-OS backend or hosted receipt issuance
Packaged previews enter through local account sign-in. That local account lives on the user's machine; it is not remote identity or a hosted-service entitlement.
Closed beta
Hosted DQC-OS access
This is the hosted path for authorised requests against an Alelyon-operated deterministic backend, and that half is not part of the open beta. LinkedIn verification is live. A hosted DQC-OS key is issued automatically the moment a signed-in account completes verification — nobody reviews it, there is no queue, and it appears on your account page. An anonymous verification issues no key: the key needs an account to attach to, so sign in first and verify from the account page.
LinkedIn OpenID Connect establishes control of the LinkedIn account, not every profile claim
No LinkedIn scraping or public-profile lookup
A server-side issuance boundary: keys are minted only for signed-in, LinkedIn-verified accounts
A revocable bearer key for the account that redeems it, expiring on its own with self-serve renewal
On Windows: certutil -hashfile <file> SHA256. A digest that does not match is the protection working — do not run the file, and report it.
Open toolkit
Replay the evidence you actually have.
alelyon-os is published separately from the Terminal and the planned hosted service. Its verifier can replay supported receipts against supplied inputs and policy. An authenticated result still needs a public key obtained out of band: the receipt can detect revision of committed inputs, but it does not prove that a producer did not invent bad inputs at capture.
pip install alelyon-os
Installs the alelyon-verify command. Runalelyon-verify selftest to exercise the bundled conformance fixtures without a network connection.