Installation

🟡 Partial — The froga binary is published. The installer is served from GitHub (independent from the bucket), verifies the ECDSA-P256 signature of the binary (fail-closed) and downloads it from the native bucket. The vanity channel get.venturalitica.ai does not resolve yet (Edge Services TLS pending activation). Use the one-liner with FROGA_INSTALL_BASE shown below.

froga is Venturalítica’s engine for governing high-risk AI from git. Official binaries for Linux, macOS and Windows are planned (cargo-dist installers + GHCR image); you can also run it as a container or build it from source.

The froga 0.1.1 release is published — install it today

The froga binary is already published and installable today. The installer is served from GitHub (a channel independent from the binary bucket) to break the atomic-swap attack vector: if the sei-releases bucket were compromised, the attacker could not simultaneously swap the verifying script.

Recommended one-liner (Linux / macOS)

curl -fsSL \
  https://raw.githubusercontent.com/Venturalitica/seigarrena/main/scripts/install/install.sh \
  | FROGA_INSTALL_BASE=https://sei-releases.s3.fr-par.scw.cloud sh

The installer detects your OS and architecture, verifies the ECDSA-P256 signature of the binary (fail-closed), and places it at ~/.local/bin/froga. See Verify the signature to do it manually.

---

Quick install

The installer (install.sh) is served from GitHub (independent from the binary releases bucket). The binary is downloaded from the bucket and the installer verifies its ECDSA-P256 signature before executing it (fail-closed). This breaks the atomic-swap vector: even if the bucket were compromised, the attacker could not also swap the verification script.

Linux / macOS

Terminal

curl -fsSL \
  https://raw.githubusercontent.com/Venturalitica/seigarrena/main/scripts/install/install.sh \
  | FROGA_INSTALL_BASE=https://sei-releases.s3.fr-par.scw.cloud sh

The installer detects your OS and architecture (x86_64 or aarch64), verifies the ECDSA-P256 signature of the binary (fail-closed), and places it at ~/.local/bin/froga. If that directory is not on your PATH, the installer tells you so.

Once the vanity channel get.venturalitica.ai is active (Edge Services TLS pending activation), the FROGA_INSTALL_BASE parameter will no longer be needed.

Windows

PowerShell

irm https://raw.githubusercontent.com/Venturalitica/seigarrena/main/scripts/install/install.ps1 | iex

Installs froga.exe under %LOCALAPPDATA%\Programs\froga. Add that folder to your PATH to invoke it from any terminal.

Container

Terminal

docker run --rm -v "$PWD:/repo" -w /repo ghcr.io/venturalitica/froga:latest --help

The ghcr.io/venturalitica/froga image ships only the froga binary, git and the root certificates. Mount your repository at /repo to operate on it.

Verify the installation:

Terminal

froga --help

The output lists the 20 subcommands (plus the help entry that clap generates automatically). See the CLI reference for a full description of each one.

---

Prerequisites

Tool	Why
git	froga operates on git repositories
uv (Python ≥ 3.11)	Run the bundled example scenarios (loan, medical)
dvc ≥ 3	Reproduce the scenario pipelines

The froga binary itself only needs git. uv and dvc are only required to run the repository’s example scenarios.

---

Next step

Once froga --help shows the 20 subcommands, proceed to the Quickstart to run the quickstart-education example and see the ISO 23894 loop close.

---

For contributors: build from source

Source code not public yet

The engine’s source code will be open-sourced soon (open-core strategy); public distribution of the binary is in preparation. In the meantime, you can explore the platform without installing anything in the public demo.