Cross Platform Flow

PREHEAT · DOWNLOAD LOCKED

Public Beta status and download gates

As of August 24, 2026, CrossFlow is in preheat—not public Beta. There is no public installer and no hidden download route.

  1. 01 / Current status
  2. 02 / Download center
  3. 03 / Systems and permissions
  4. 04 / Known limitations
  5. 05 / Privacy and license
  6. 06 / Feedback and security
  7. 07 / Changelog

Four gates must close on the same candidate.

Current decision: preheat only

Candidate code, a passing automated test, or one private physical demo cannot open downloads. If the candidate bytes change, every build-sensitive check must be accepted again.

Scope locked

Launch systems

One Apple Silicon Mac on macOS 15+ paired with Windows 11 x64. Intel Mac, Windows ARM, and Linux are outside the first public-Beta scope.

Not passed

One-RC physical gate

Bidirectional input, first click, IME punctuation, scroll, Portals, clipboard, disconnect release, and emergency pause have not been consolidated on one immutable RC.

Not passed

Five working days

The final candidate has not completed five working days without replacing the binary or relying on undocumented workarounds.

Not passed

Trusted installation

There is no Developer ID signed, notarized, and stapled macOS image or trusted-signed Windows MSIX/App Installer yet.

The download center exists. The packages remain locked.

Apple Silicon · macOS 15+

Public release: Not released
Installer: Unavailable
Size: Unavailable
SHA-256: Unavailable
Signature: Release gate not passed

Windows 11 · x64

Public release: Not released
Installer: Unavailable
Size: Unavailable
SHA-256: Unavailable
Signature: Release gate not passed

Do not seek development packages from third parties

Private builds may be ad-hoc signed, span different protocol candidates, or lack release-grade permission recovery. They do not represent the future public Beta.

The planned public-Beta policy is direct download without mandatory registration; any optional update subscription must require separate consent. This is a release policy, not an announcement that download or subscription systems are live.

The permission guide must survive deny-and-recover tests.

Accessibility and local network

The release will explain why input Accessibility and local-network access are needed. Initial denial, recovery in Settings, later revocation, restart, and stale authorization must fail safely without swallowing local input.

Firewall and package identity

The MSIX/App Installer publisher, version, update URI, and capabilities must be frozen. Firewall denial, network loss, upgrade, and uninstall will be rerun on a clean Windows 11 x64 system.

  • Network loss, quit, or permission revocation must release every remote key and pointer button.
  • Emergency pause must return local control immediately and cannot be intercepted by the peer.
  • After reauthorization, the UI must distinguish actual input readiness from pairing alone.

These items block release or remain outside current product claims.

  • Keyboard mapping: per-peer profiles and Caps Lock/Shift IME actions still have an asymmetric physical observation.
  • Topology: free-form Portals have candidate evidence, but dual-visible editing and sustained physical crossing are not accepted.
  • Clipboard: private candidates have partial observations; Windows history selection, pause races, and one-RC acceptance remain open.
  • Files and drag: file transfer, clipboard history, and native drag-and-drop are not current CrossFlow features.
  • Stability and release: the five-day run, emergency pause, and disconnect release must be repeated on the release RC.

Collect less, and state the license plainly.

Currently proprietary

CrossFlow and its source are not open source. A public-Beta end-user license will be published before downloads open. This page makes no promise of permanent free access, a trial duration, or future pricing.

No client analytics SDK

The static product site contains no client analytics SDK, and domain rules disable Zaraz and RUM. The host may still create standard request logs; future download counts are planned as channel, platform, version, and aggregate count only.

There is no downloadable app today, so there is no public-Beta application telemetry. Any future app behavior collection, crash reporting, or update subscription must be enumerated in the privacy notice and separated from download consent.

Reproduce ordinary issues in public. Report security issues privately.

Use the public repository for compatibility reports, bugs, and feature requests. Include OS version, CrossFlow version, direction, input hardware, and minimal steps—never secrets, LAN addresses, or private clipboard data.

Open feedback

Do not open a public issue for a security, privacy, or abuse-enabling problem. Use GitHub private vulnerability reporting. The staffed security contact path will also be verified before downloads open.

The public page records only auditable changes.

  • 2026-08-24: added the preheat download center, locked launch systems, release gates, and known limitations. Downloads remain closed.
  • Next entry: only when gate state, public version, installation trust, or the feedback path materially changes.