Docker Compose
One container with SQLite on a volume. The simplest route for a single machine.
- Version
- 1.3.0 (Demo)
- Released
- 15 Nov 2026
- Size
- —
- File
- penweir-demo-1.3.0.zip
Download
Penweir runs on your own machine or cluster and is up in about ten minutes. No sign-up, no form, no calls home.
Install
All three run the same gateway. Each has its own step-by-step guide.
One container with SQLite on a volume. The simplest route for a single machine.
Already have your own setup? Run the image as it is, without Compose.
A hardened chart for a cluster: non-root, read-only filesystem, restricted Pod Security.
What's in it
An OpenAI-compatible endpoint with streaming and tool calls. Requests go to OpenAI-compatible or Anthropic providers, with fallback.
Structured identifiers such as IBANs and email addresses are redacted or blocked on the way out, and put back in the response.
Admins, applications, keys, pipelines, the audit log and system status.
No telemetry and no licence server. Penweir only contacts the providers you set up.
Penweir is still in development (Phase 1). Read what it does and doesn't guarantee before you send real data through it. What Penweir guarantees ·Threat model
Verify
Every file comes with a checksum and an SBOM, so you can verify it before you run it.
shasum -a 256 -c penweir-demo-1.3.0.zip.sha256Requirements
Questions
No. Download it and start. If you get stuck you're welcome to email us, but you don't have to.
It's the same gateway and dashboard. What you pay for later is the licence; deploying it works the same way.
Start with sample data. Read the guarantees and the threat model first, and keep the ports on 127.0.0.1 until TLS is in front.
Pull the new version and run docker compose up -d. Migrations run at startup, so back up the volume first. docker compose down -v removes everything, data included.
Flow, on your terms
A one-time licence, deployed inside your own network. Your data never needs to leave to be useful.