No subscription·No cloud dependency·No kill switch·Your keys, your license
7Available to download today
2In design or active development
One-time purchase, no subscription
One stack, three layers
The components of an orchestration, not an app store. What's ready has a download command below it; what's still being built has a status label instead — and isn't for sale yet.
Turns a machine into your team's shared file workbench.
Self-hosted browser-based developer file tool — tree/viewer/editor, search, git-status badges, zip download, PDF export, running on your own infrastructure
BETA · freev0.1.0-betaIndependent System
RUNS AS
Native Linux binary, config.toml-driven
SERVES
Tree/viewer/editor, search, git-status badges, zip download, PDF export
Turns a machine into your organisation's design system.
Self-hosted design-system engine — token gallery, component docs, Writing/Paper content, and an on-prem MCP endpoint, running on your own infrastructure
BETA · freev0.1.0Independent System
RUNS AS
Bootable appliance image, aarch64 under QEMU
SERVES
Design token gallery, component docs, and an on-prem MCP endpoint
PERSISTENCE
Own EXT4 data disk — your tokens, your change history, your perimeter
Turns a machine into your fleet's command server — with a working AI broker built in.
Bootable seL4/Microkit appliance — invite-token pairing and fleet API hub for Totebox Orchestration, bundling a full GPU/model-brokering instance as its own managed child process
BETA · freev0.1.0Totebox Orchestration
RUNS AS
Bootable appliance image, aarch64 under QEMU
SERVES
Fleet invite-token pairing + archive API, plus a bundled GPU/model broker
Turns a machine into your own self-hosted software storefront.
Self-hosted software distribution stack — deploys app-privategit-software, app-privategit-release, and tool-wallet on your own hardware, so you can run your own storefront without routing source or payment through a third party
BETA · freev0.1.0Independent System
RUNS AS
Native Linux binary, systemd-managed service
SERVES
Your own storefront, on hardware you control — no third-party routing
STATUS
Early build — license-gate and activation flow live; full stack packaging in progress
Linux x86_64 · verifies SHA256 against the per-version MANIFEST
Also in this tier — not yet available
os-workplace
Staff Desktop Environment
Will turn a machine into the desktop staff use to work directly with an archive.
Native applications for day-to-day records, correspondence, and bookkeeping work, running on hardware the institution controls rather than a vendor's cloud desktop.
Not yet available
Planned — a committed direction, no engineering yet.
RUNS AS
Native desktop applications, not a browser tab
FOR
Staff working directly with an archive day to day
LICENSING INTENT
Not yet finalized; expected one-time purchase, no subscription
Nothing to download yet.
▬Infrastructure1 planned
What the whole thing stands on — the host layer that keeps a deployment on hardware you control.
os-infrastructure
Self-Hosted Infrastructure Substrate
Will turn hardware you own into somewhere a Totebox archive can run.
A host operating system that boots straight onto bare metal, a leased server, or a commodity cloud node, and anchors every workload to the formally-verified seL4 microkernel.
Not yet available
In design — the architecture is settled; engineering starts next.
REMOVES
Your dependency on infrastructure a vendor owns
JOINS
The institution's own private encrypted mesh
LICENSING INTENT
AGPL-3.0-or-later — source is freely available under copyleft; a purchase buys the signed binary and commercial redistribution rights, not access to the code