Security

Trust and transparency

What exists now, and what doesn’t yet, is written on the page it belongs to.

Settings, System: the KARMEN LOOP mark, build number, system check, security patch 2026-10-14, and online updates not set up — Screenshots: Settings → System puts the version, the security patch level, and the system check together. Settings → Privacy and data says sync stays on this computer.

The release notes list every version. Only the latest installers can be downloaded.
The download page gives the file name, the byte count, and the SHA-256.
Security patches shows the current level.
The public API accepts applications. A reference can’t be exchanged for a token.
Models: you connect your own in this version. ESVORIQ 1.0 is in training; weights and a hosted API are not available yet.
Working with other people is being finished and will open soon.
Send a security issue privately to info@karmenloop.com.

More details

The download page also says the installer is not code-signed, there is no Intel build, and the 64-bit installer has not been tested on a real Windows PC. No security patch has been published online, and the installer does not check the network for one.

In Settings → System, Check for updates says the update address is not online yet. The model list has no official model. The Team page in the workbench does not sync across computers. No examples have been published.