Krate Krate organisation policy, version 1. Krate Krate with organisation policy version 1 Which apps may open What apps may do Krate itself Krate Studio and AI builds Organisation name Your organisation's name. Every message Krate shows about the policy uses it, for example "Acme Labs does not allow this app". Optional. Registry: the value name in HKLM\SOFTWARE\Policies\Krate. Organisation on Krate The organisation on Krate's hub that these computers belong to: its short name, as in krate.tech/org/acme-labs. Krate shows that organisation's apps to the people signed in to it. Optional. Registry: the value slug in HKLM\SOFTWARE\Policies\Krate\org. Trusted signing roots The signing roots this computer trusts: each a name and the public half of an Ed25519 root key, as 64 hex characters. An app passes when its signature verifies and its root (the delegation's root, or the signing key itself) is listed. Empty or absent: no limit on roots. Enter each root on its own row: the name in the first column (Value name) and the 64 hex characters in the second (Value). Registry: one value per root in HKLM\SOFTWARE\Policies\Krate\trust\roots. Allow unsigned apps Whether an app with no signature may open. Default: allowed when there is no [trust] section, refused when roots are listed. A signature that is present but damaged never passes, whatever this says. Enabled sets it to true, Disabled to false, Not configured leaves Krate's default. Registry: the value allow_unsigned in HKLM\SOFTWARE\Policies\Krate\trust. Allow apps signed by other roots Whether an app signed by a root that is not listed may open. Default: allowed when no roots are listed, refused when they are. Enabled sets it to true, Disabled to false, Not configured leaves Krate's default. Registry: the value allow_other_signed in HKLM\SOFTWARE\Policies\Krate\trust. Blocked capabilities Capabilities no app may be given on this computer, spelled as an app's manifest spells them (camera.capture, audio.capture, location.read, ui.clipboard, fs.write ...). Matched on the name before ':', so fs.write blocks every fs.write grant. A blocked capability is shown as blocked by your organisation and cannot be granted. One capability per line. Registry: the value deny in HKLM\SOFTWARE\Policies\Krate\capabilities. Network ceiling The only hosts any app may connect to, whatever its manifest asks for. Same patterns as a manifest: host or *.host, then :port or :*. Absent: no ceiling. One host pattern per line. Registry: the value allow in HKLM\SOFTWARE\Policies\Krate\network. Proxy The proxy every connection Krate makes goes through, for http and https alike, as http://host:port (user:password@ allowed), or "direct" to use none. When set, it replaces the proxy variables (HTTPS_PROXY, HTTP_PROXY, ALL_PROXY, NO_PROXY) and the system's own proxy settings, so a person's shell cannot route around it; absent, the variables apply when set and the system's static proxy otherwise. This computer's own services (localhost) are always reached directly. Krate does not run a PAC script or WPAD; if your computers rely on one, set the proxy here. Registry: the value proxy in HKLM\SOFTWARE\Policies\Krate\network. Hosts reached without the proxy Used with proxy: hosts reached directly, separated by commas, as NO_PROXY is written: an entry covers the host and every name under it (acme.com covers git.acme.com), * covers every host. Address ranges such as 10.0.0.0/8 are not read; name the hosts. Registry: the value no_proxy in HKLM\SOFTWARE\Policies\Krate\network. Send usage counts Whether Krate sends its anonymous usage counts (install, make, open, publish) to Krate's hub. false: none are sent and the first-run question about them is not asked. Enabled sets it to true, Disabled to false, Not configured leaves Krate's default. Registry: the value counting in HKLM\SOFTWARE\Policies\Krate\usage. Hub The only Krate hub this computer talks to for private apps, publishing and sign-in. Any other hub, from a flag or an environment variable, is refused. Registry: the value url in HKLM\SOFTWARE\Policies\Krate\hub. Allow AI builds false: Krate Studio and krate create refuse to start an AI build, before any AI provider is contacted. Enabled sets it to true, Disabled to false, Not configured leaves Krate's default. Registry: the value ai in HKLM\SOFTWARE\Policies\Krate\studio. Allowed AI providers When present, only these AI providers may be used for a build. Provider ids: claude, codex, gemini, copilot, grok. One provider id per line. Registry: the value providers in HKLM\SOFTWARE\Policies\Krate\studio. Updates auto (the default): updates are offered as usual. notify: Krate checks for a new version and says so, and never installs one. off: Krate never checks. Registry: the value mode in HKLM\SOFTWARE\Policies\Krate\updates. auto notify off Open record location Where Krate appends its record of every app opened or refused on this computer, one JSON line each. Default: /var/log/krate/opens.jsonl on macOS and Linux, %ProgramData%\Krate\logs\opens.jsonl on Windows. Registry: the value path in HKLM\SOFTWARE\Policies\Krate\audit. Run apps on the interpreter true: every app runs on Krate's interpreter (Pulley) instead of compiled machine code, so Krate never makes executable memory. For endpoint protection that blocks code generated at run time, and Windows Arbitrary Code Guard. Apps may run slower this way. Enabled sets it to true, Disabled to false, Not configured leaves Krate's default. Registry: the value interpreter in HKLM\SOFTWARE\Policies\Krate\runtime. Trusted signing roots Blocked capabilities, one per line: Network ceiling, one per line: Allowed AI providers, one per line: Updates