Provenance for the box
you actually own.
You install software on your home boxes from six different package managers and have no idea what's actually running. Attestree gives you one inventory, real update rings, and signed provenance — free to run at home, early-access today.
- wingetMicrosoft.PowerToys0.81.1sig:9c4f…
- scoopmain/neovim0.10.0sig:1ab2…
- chocofirefox125.0.1sig:bd71…
- npm@anthropic-ai/sdk0.21.4sig:e45a…
- piprequests2.31.0sig:0fa9…
- dotnetaspirate0.10.0sig:7c33…
Three things homelabbers ask us about first.
One inventory, every manager
Winget and Chocolatey today, with Scoop, npm, pip, .NET tools, and PowerShell Gallery landing as their collectors ship — unified into a single attested view of what is on your boxes.
Real update rings at home
Canary, pilot, and broad rings for driver updates without an enterprise license. Roll back from a single signed policy file.
Apache-2.0 installer shim
A SYSTEM- and user-context shim that fronts every Windows package manager — per-user apps install impersonated in the actual user’s profile, and a shared family PC can converge them for every user. Apache-2.0 via GitHub release or build-from-source — the public repo lands M3–M6.
The products you'll actually run on your bench.
Inventory and Windows Updates are first up. Driver rings follow. Everything starts on a single node and federates when you add more.
Inventory
One attested inventory across your package managers — winget and Chocolatey today, more as they land.
Read productDrivers
Driver update rings with WHQL + provenance verification.
Read productWindows Updates
Approve, stage, and attest every KB before deployment.
Read productWinget Enterprise
Attested install gates in front of every Windows package channel.
Read productFree Community Edition.
A free Community Edition Docker image — closed-source (EULA), 50-endpoint cap, early-access / pre-GA. Plus an Apache-2.0 installer shim you build from source.
Or: Apache-2.0 winget-system-shim — GitHub release · build-from-source (public repo lands M3–M6)
"Design partner pipeline open. Be first to be quoted."