What is Bifröst?
Bifröst is the secure software delivery layer for restricted and air-gapped networks. It brings approved artifacts across the boundary and records what crossed, when, and under which policy conditions.
FAQ
Frequently asked questions
How is this different from a normal package mirror?
A normal mirror focuses on availability. Bifröst adds policy-aware delivery and traceability: it can fetch from the open internet, verify the artifact, and record the approval boundaries before it is made available on the protected side.
Why does provenance matter so much?
In isolated environments, there is no second chance to recover from a bad fetch. Provenance gives operators the evidence they need to show exactly which artifact crossed the boundary, who approved it, and why it was trustworthy.
Do I need a separate repository and delivery system?
Not necessarily. Bifröst and Sindri are designed to work together, but they also solve adjacent problems. Bifröst moves the software; Sindri answers which versions are approved for each environment.
Still have questions? Email us at info@fridr.io.