One binary for the machine. One skill for the agent.
Choose the direct shell path or hand the setup to an agent with the exported Sporo seed. Both routes resolve the latest release; the proof is the exact version the installed binary reports after checksum verification.
Direct shell install
One command. It resolves the latest GitHub release, downloads the platform binary with its checksums, and refuses to continue if they disagree.
Set up with an agent
Give your agent a self-contained, verified install seed. It detects an existing copy, installs or updates to latest, proves the binary runs, initializes the repository and links the embedded a2a skill.
Works with any agent that can call a CLI or stdio MCP
a2a init is the one-time wiring step: the embedded skill and the generated reference are installed, then linked into the agent surfaces the repository already exposes. After that, the agent action goes straight to the shared validator.
Vendor names above are examples of agent surfaces the binary can detect. They are not official integrations and imply no endorsement.
Verify before you trust the download
Release assets carry SHA256SUMS, per-asset keyless cosign bundles, provenance and SBOMs. The installer and updater fail closed on a mismatch or a missing checksum entry.
The three verification commands →Then wire the agents once
Routine exchange is agent-run from here. Open the dashboard when you need the explanation, the evidence or an exceptional approval.