SKETCH
FORGED
RONIN INC

Kingmaker · Free · Runs on your Mac

Your AI,
on your Mac.

Kingmaker is an AI agent that lives on your Mac and does the work, not just the talking. Say what you want and it opens your apps, works in the Chrome you’re already signed into, researches, writes, draws and builds, all on your own machine. Its models run on your chip with the refusals taken out, so it takes the job on instead of lecturing you. It still stops for your yes before anything that sends, spends or installs.

Free for individuals. Companies pay to play. Download it, push it hard, and tell us what breaks.

Download for Mac ↓

For Macs with Apple silicon (M1 or newer)

Version 4.4.1 · Apple silicon, macOS 14 or later

The Ronin Launcher showing the Kingmaker page, live — Install 4.4.1 with its sealed release manifest
The program, live — the Launcher’s Kingmaker page: Install 4.4.1, sealed manifest, SHA-256 per part.

01 · What changes

Say it. It’s done. You approve what matters.

K/01

Your work happens in your own apps

Notes, Mail, Finder, WhatsApp, your browser: Kingmaker opens them and does the steps, and stops on every click that commits something until you say yes.

K/02

Nothing leaves your Mac unless you send it

The models run on your chip. Your files, prompts and voice stay home and never train anyone’s model. No cloud account, no per-token bill.

K/03

Your Mac answers from your pocket

Pair your iPhone with Kingmaker Phone and talk to your Mac from anywhere: home Wi-Fi, or anywhere at all once you add Tailscale. Send it a photo and it reads it, saves it, or puts it to work.

K/04

It gets more capable on its own

Hit an app it can’t drive and it goes looking: an open-source tool, read in quarantine, rebuilt as its own, used only after you approve it.

02 · What a cloud chatbot can’t do

Six jobs only an agent on your Mac can take.

  • On a plane with no Wi-Fi. “Go through the contracts in my Downloads folder and draft the replies.” Kingmaker reads them on your disk and writes the drafts with no connection at all. A cloud assistant needs the internet and your files uploaded.
  • Inside the web apps you’re already logged into. “Check my store’s orders and tell me what shipped late.” It works in your own signed-in Chrome: no API key, no new login, no password handed to anyone.
  • Across your real Mac apps. “Open Notes and start a list of everyone I owe a reply in Mail.” It works the apps themselves. A chatbot in a browser tab can only tell you the steps.
  • On the questions filtered models won’t touch. Security research on your own systems, frank medical or legal background, fiction with teeth. Its local models take the work on; the gate sits on actions, not on ideas.
  • With files that must never leave the building. Client records, health files, the deal before it’s signed. They stay on your machine, and so does everything it learns about you.
  • From the job site, on cellular. Snap the whiteboard on Kingmaker Phone and say “save this to my Mac and pull out the action items.” Your Mac reads it with its own vision model and files it where you work.

03 · Everything inside

  • Voice. A wake word you choose. It listens, answers out loud, and wakes with a click on the menu bar logo.
  • Uncensored local models. Open-weight, abliterated models sized to your Mac, running on its own chip. Prefer a cloud brain? Plug in Claude, ChatGPT or Grok with your own sign-in, fenced to Kingmaker’s tools.
  • Hands on your Mac. It reads and drives apps through macOS accessibility, and runs scriptable programs (Blender, Godot, ComfyUI, ffmpeg) through their own command lines.
  • 175+ apps, ready. A hub of ready-made command-line tools, plus a harness that builds one for an app that has none.
  • Your signed-in Chrome. A Chrome connector so it can work in the web apps you already use.
  • Private research. Its own private web search, and a knowledge library on your disk that it searches in place.
  • A studio on board. Images and ad videos made on your Mac, plus seven open-source creative apps it builds and drives: photo, vector, film, light, effects, print and design.
  • 100+ skills built in. Websites, local-business operations, research, video, game and 3D work, and more. Every skill and every outside tool is read by REA, its code inspector, before it runs.
  • A market research desk. A team of AI analysts studies one ticker and rates it Buy to Sell, with their reports. Research only: it never trades.
  • Kingmaker Phone. Pair your iPhone with a QR code and a six-digit code. Talk, send photos, take calls. Kingmaker can call your phone when something needs you.
  • Works with your other AI. Claude, ChatGPT, Grok or your editor can use Kingmaker’s tools over MCP. They can propose; you approve.
  • You stay in charge. Every send, spend and install waits for your yes, and every step leaves a record. Say “stop approving” and every automatic approval stops at once. Turn on verified voice and only your voice can approve. A duress password you choose wipes its keys and data.
  • Keeps itself current. Updates are signed, checked file by file, and installed only after it asks you.

04 · The system

Four parts. One governed system.

K/01

Governed runtime

The rules live in the runtime, not in the model. Nothing consequential happens without your yes, and every step leaves a record.

K/02

Local models

Open-weight models run on your Mac’s own chip. No cloud account and no per-token bill. Kingmaker suggests a model that fits your Mac; you make the pick.

K/03

Kingmaker Phone

Pair your iPhone from the Mac with a QR code and a six-digit code. The Mac does the thinking; the phone carries it with you. Unpair it any time.

K/04

Ronin Launcher

One place to install, update and open Kingmaker and Kingmaker Phone.

Requirements

  • Minimum: Apple silicon M1 or newer, 8 GB of memory, macOS 14 or later, and about 25 GB free. That is the floor, not the experience: Kingmaker will run, but on a minimum Mac it will not do what you want.
  • Recommended: M3 or newer, 16 GB of memory or more, macOS 15 (needed for clicking and typing in other apps). This is the reference setup, and 24 GB unlocks 35B-class models.
  • About 25 GB free: the knowledge library and the models take the space.

Install

  1. Download the Ronin Launcher and open it.
  2. Sign in with your Ronin account — or create one. It is free.
  3. In the Launcher's Library, find Kingmaker and press Install. The Launcher verifies the release before it installs anything.
  4. Kingmaker opens in your menu bar. Pick a wake word, accept the terms, and allow Microphone, Accessibility and Screen Recording when asked. Click the menu bar logo to turn it on or off.
Download for Mac ↓

For Macs with Apple silicon (M1 or newer)

Version 4.4.1

Release signing key fingerprint (SHA-256): FE70 3A41 F02C 817E CDA3 67D3 8FD5 0A94 7E85 3F03 FC84 F371 3317 AE5A F3DA 1BB1

Licence

Free for personal, research and hobby use under the PolyForm Noncommercial licence. Using Kingmaker inside a company, or building a product on it, needs a commercial licence: talk to Ronin Inc. Every install can share what it learns, never your data, so Kingmaker gets better for everyone. It’s off until you opt in. One keypress turns it on.

Questions

Kingmaker, answered.

Is Kingmaker free?

Yes, for individuals. Kingmaker is free for personal, research and hobby use under the PolyForm Noncommercial licence. Using it inside a company, or building a product on it, needs a commercial licence.

What is Kingmaker?

A free, local AI agent for Mac. It runs uncensored open-weight models on your own Apple-silicon Mac, takes orders by voice, and drives your real apps and signed-in Chrome, asking before anything that sends, spends or installs. It is free for individuals.

Does Kingmaker run offline and on-device?

Yes. Open-weight models run on your Mac’s own chip, so the core reasoning works with no network, no cloud account and no per-token bill. Your files and prompts stay on your Mac and are never turned into training data.

Can Kingmaker control my Mac and Chrome?

Yes. After you grant macOS Microphone, Accessibility and Screen Recording, it opens and drives your real apps and your signed-in Chrome by voice, and runs from your menu bar. A human yes is still required before anything consequential.

What does “abliterated” mean?

The model’s built-in refusals are removed while the rules that matter are kept and enforced by Kingmaker’s governed runtime. Kingmaker will attempt the work you ask for, but still gates any action with real-world consequences behind your approval.

What are the system requirements?

Minimum: an Apple-silicon Mac (M1 or newer) with 8 GB of memory, macOS 14 or later and about 25 GB free. That is the floor, not the experience, and Kingmaker will not do what you want on it. Recommended: M3 or newer, 16 GB of memory or more, and macOS 15; 24 GB unlocks 35B-class models.

Solomon · Field Notebook · Engine by engine

Solomon,
drawn open.

The governed engine, taken apart on the page — how it researches, what it will and won’t claim, how it scores its own confidence, and every engine it drives. Unfold any plate for the rollout notes.

Scroll — one engine per plate

Read this first · how the engines connect

Solomon is not one model — it is a chain of governed engines, each handing the next a checked result. Follow the wire: every box is a real engine, and the arrows are the order they fire.

Engine 01 · Decision

The governed chain.

Every request runs one chain — intent, evidence, governance, decision, authorization, execution, audit — before intelligence is ever allowed to act.

How it works

Intent is resolved, evidence gathered, governance gates applied, a verdict formed — then you authorize, it executes through connectors, and every step writes to the audit trail.

Standard

Authorization before action; audit by default. Intelligence contributes only after the governed steps clear.

State

INTENT ▸ … ▸ VERDICT ▸ ADVISORY

Note

The chain is the same for a one-line answer and a full build — nothing skips it.

FIG. 01 · DECISION · LIVE WORKFLOW
Engine 02 · Research

How it researches.

Every question reaches the live internet — research is inbound-only, through verified fetch. Facts are gathered, separated from assumptions, and the unknowns are flagged, not glossed.

How it works

Deterministic reach-out: every question is sent to the open internet and answered from what comes back, assembled into a grounded evidence packet.

Standard

Inbound-only — research reads the world; it never exfiltrates your data. Sources are kept; assumptions are labelled; unknowns are surfaced.

State

GATHER ▸ SOURCED · 0 FABRICATED

Note

If the evidence is thin, it says so rather than filling the gap with a guess.

FIG. 02 · RESEARCH · NODES LIVE
Engine 03 · Standards

What its standards are.

No hidden assumptions. No uncontrolled execution. No unsupported certainty. No claim without proof.

How it works

Evidence before advice, authorization before action, proof before every claim. Each standard is enforced in the runtime, not left to good intentions.

Standard

Authentication is not authorization. Private data fails closed. A claim ships proof-backed or is marked pending — never asserted.

State

PROVE ▸ OR MARK PENDING

Note

The restraint is the product: what it refuses to do is as designed as what it does.

FIG. 03 · STANDARDS · TRACE VISIBLE
Engine 04 · Confidence

The confidence score.

Every verdict carries a confidence and a risk level. The reasoning is advisory — shown to you, never certified as fact.

How it works

A numeric confidence (e.g. 0.62) and a risk band ride with each decision. Low confidence routes to a question or a hold instead of an action.

Standard

Prose reasoning is advisory only — never a forced act, never presented as proof. The score is visible, not buried.

State

CONF 0.62 · RISK MED · ADVISORY

Note

You see the number the machine used — and you keep the final call.

FIG. 04 · CONFIDENCE · HONEST HOLD
Engine 05 · CodeGen

It builds software.

Constraint discovery → a proof-backed build tree → a local, inspectable scaffold. It never calls something “deployed” until it truly is.

How it works

It surfaces missing constraints first, structures the work as a governed build tree, and emits a local scaffold with a proof manifest you can inspect.

Standard

Local coding sovereignty — an offline coding model plus real compiler and git checks. Nothing is claimed shipped until it runs.

State

PLAN ▸ SCAFFOLD ▸ LOCAL (NOT DEPLOYED)

Note

The plan is honest about what still needs a human, a key, or a deploy.

FIG. 05 · CODEGEN · NODE ACTIVE
Engine 06 · Fabrication

It plans what gets built.

Concept → material stack → tolerances, bill of materials, assembly risks → a planning-only manufacturing workflow.

How it works

A concept enters as an operational object with purpose and constraints; candidate materials are proposed; tolerances, BOM, and assembly risks are drafted and governed.

Standard

Planning-only. Nothing is called manufacturing-ready without real dimensions, an electronics package, thermal limits, and safety validation.

State

ESTIMATED_PREVIEW · NOT_CAD

Note

It draws the plan to build — it does not pretend the part exists.

FIG. 06 · FABRICATION · BUILD TRACE
Engine 07 · Titan

It creates.

A creative project twin — world, characters, continuity — with a scene graph. Rendering is delegated to adapters, never claimed without evidence.

How it works

Every production begins as a Creative Twin holding the whole work; world, characters, and lore are organized so continuity is enforced; scenes are structured before a single asset is generated.

Standard

Rendering is handed to external adapters; Titan never reports a finished result without render evidence to back it.

State

RENDER ▸ QUEUED · EVIDENCE-GATED

Note

Continuity is designed in, not improvised shot to shot.

FIG. 07 · TITAN · BLENDER WORKFLOW
Engine 08 · Twin

One source of truth.

A persistent project twin every engine reads and writes — one governed, versioned record instead of scattered files and lost context.

How it works

Every build or production is anchored to a Twin; each engine reads from and writes to it, so state is shared, inspectable, and versioned.

Standard

One record, auditable end to end. No hidden state, no engine working from a private copy.

State

TWIN ▸ PERSISTENT · VERSIONED

Note

It’s the memory the whole system agrees on.

FIG. 08 · TWIN · PROGRAM STATE
Engine 09 · God’s Eye

It turns place into evidence.

A place request becomes a governed intelligence workflow: geocoding, maps, cameras, flights and current reporting are routed into one evidence surface, with missing feeds exposed rather than invented.

How it works

The request is geocoded, mapped and fanned out to authorized public-data adapters. Research, routing, CodeGen, Titan and memory remain visible as live nodes while God’s Eye assembles the operational picture.

Standard

Every target and feed must retain provenance. If a location or source cannot be verified, the evidence board shows the missing state instead of drawing a false target.

State

GEOCODE ▸ MAP ▸ FEEDS ▸ EVIDENCE

Note

This is a direct capture of a real downtown Phoenix command populating the Machine workflow map.

FIG. 09 · GOD’S EYE · LIVE COMMAND