Veizik for Apple Silicon — 2026.10.02-r6.3

Activation without a browser, for a Mac you reach over SSH: create an enrolment key and a CLI password on your account page and give them to `veizik activate`. Adds `veizik deactivate`, and `veizik devices disable|enable` now work. The engines are byte-for-byte the r6.1 and r6.2 engines; only the `veizik` command changed, and browser activation works as before.

This page records the state as of 2026-10-09 and is not updated as the catalogue moves. For what runs now, see models.

This build has been superseded and is no longer distributed. The digest below still identifies it, so a copy you already hold can be checked against it. The current build is 2026.10.02-r10.

sha256 8dde57ab67145cd4e2aafd2aaec03a06ac076c9b3c5c3c537fe4f0ccbbe313c6

What this build does

• Activate without a browser (SSH, remote Macs, CI): create an activation key under “Browser-free activation” on your account page and a password under “CLI password”, then veizik activate --key KEY. A key is one-use by default and valid for 7 days; a reusable key works on as many machines as you choose, up to 25, for up to 90 days. Keys can be revoked on the account page at any time.
• The CLI password is asked for at a hidden prompt by default. For scripts: --password-stdin (recommended) or --password-file PATH. --password PW also works but is visible to ps and your shell history, and the command warns about it. A key created without a password is used with --no-password.
• veizik activate --email ADDR uses your account e-mail and CLI password instead of a key, if you turn that on under “CLI password”; it may e-mail you a 6-digit code.
• The machine still proves it holds its own key — the Secure Enclave on a Mac — exactly as in a browser activation; the key and password only stand in for the browser approval. When your account has an e-mail address on it, every machine activated this way is reported to that address, and the account page tells you if yours has none. A wrong key, password or code gets one answer that does not say which part was wrong; after 10 failed tries in a row a key is locked until you unlock it on the account page.

Models in this release

Platform

macOS on Apple Silicon (arm64)

Install size

16.4 MB, 124 files — no dependency to install first

Verification

The file name, size and SHA-256 are printed on this page and on the release page, and the two agree. The disk image is signed with a Developer ID and notarised, and carries SHA256SUMS covering its other 49 files, so `shasum -a 256 -c SHA256SUMS` checks the contents after you open it.

File

veizik-metal-2026.10.02-r6.3.dmg — no longer downloadable

Size

6,048,379 bytes

SHA-256

8dde57ab67145cd4e2aafd2aaec03a06ac076c9b3c5c3c537fe4f0ccbbe313c6

Verify, install, check

$ shasum -a 256 -c SHA256SUMS
$ ./install.sh
$ veizik doctor

Full steps are in the documentation.

Fixed issues

• New veizik deactivate: releases the machine it runs on from your account — its slot is freed — and removes its lease. --forget also deletes the machine's device key, for a pod or VM about to be discarded.
• veizik devices disable and veizik devices enable now work for the machine they run on (r6.2 answered “not wired yet”), and veizik devices lists them. Turning off a machine you no longer have is done on the account page; a machine cannot switch off any other.

Known issues in 2026.10.02-r6.3

• /v1/embeddings answers 501 in this release.
• The serve window is 4,096 tokens per request for every model in this release (prompt plus max_tokens); veizik run is not limited this way.
• Qwen3-1.7B returns its reasoning text inside the answer; add /no_think to the prompt for a direct reply.
• Offline use: the session key lasts 48 hours after an online start; restarting the Mac ends that window.
• Not supported: Intel Macs, Windows, Linux.
• A Mac activated in the browser does not store its licence id, so veizik devices and veizik deactivate ask for it once: copy it from the Devices section of your account page and run veizik config set license.id <licence id>. A Mac activated with --key or --email stores it and needs nothing. The browser activation itself is unaffected.
• veizik --help lists devices [enable|disable <tag>]; the command only switches the Mac it runs on and refuses a tag with an explanation (veizik devices --help is correct).