Signed and verifiable
Every box carries a manifest, content digests, and a signature. Consumers verify a box offline before unpacking it — no registry call, no trust in the download path.
Skip to content
In active development · Coming soon
Scrollcase
Pack AI and scientific models
as self-contained boxes.
Pinned, validated, signed, no docker, and installable offline on
macOS metal, Linux and Windows (CPU and CUDA).
Apache-2.0
No container runtime
A box is a single archive that unpacks into a self-contained Python environment. No Docker, no daemon, no dependency resolution at install time.
One format, many targets
macOS Metal, Linux and Windows on CPU or CUDA — described by one target model that builders, signers, and clients agree on character for character.
From recipe to installable box
Resolve, build, validate, sign — one pipeline, one format, every target.
Build from a recipe
Describe the environment once. Scrollcase resolves it against conda-forge with pixi and produces a box per target, fully pinned.
Validated before shipping
Each build runs the recipe’s own validation on real inputs. A box that fails validation never gets an identity.
Accelerator-aware
The accelerator and CUDA ABI version are part of the box identity, so a CUDA 12.4 build can never be mistaken for a 12.8 one.
Reproducible identity
The target ID that appears in archive names, object keys, and registry routes is derived deterministically and locked by golden fixtures.
Portable contract
The box format ships as a reference implementation plus JSON Schemas and fixtures, so other languages can mirror it and stay in agreement.
Air-gapped installs
Download once, carry the archive across, verify and unpack anywhere. The same box works on a connected laptop and an isolated workstation.