Aev Player
A premium, local-first media trust platform.
The first real, downloadable Aevornix desktop application. It detects the true file structure from signatures, never the extension, plays it with a native engine, inspects it in plain language, preserves it losslessly in the open .aev container, and explains, stage by stage, when something is wrong.
Version 0.1.0 · 26 July 2026
- Open anything
- Preserve the source
- Play it correctly
- Explain failures
- Repair what is repairable
What exists in v0.1
Verified in this build.
Every item below is exercised by an automated test or an in-app pass. The staged column lists what comes next.
- Content-first format detection: a renamed file never yields false support
- Media Inspector: container, tracks, codec, resolution, frame rate, health, plain-language summary
- Real audio + video playback via the native engine (H.264/HEVC/AV1/VP9, AAC/Opus/FLAC/MP3/PCM, MP4/MKV/WebM…)
- The open .aev container: AEV Wrap preserves the source losslessly with SHA-256 integrity, byte-exact export
- Fullscreen, snapshot, audio-track & subtitle switching, playback speed, HTTP(S) streams
- AEV Master / Vault encode (FFV1 + FLAC, frame/sample-exact) and non-destructive repair write path
- Capability packs (Extended / Professional / Disc / Network / Subtitle), casting & discovery
- Bit-perfect audio + HDR/tone-mapping pipeline, Android and wider platforms
- The native Aevornix Krud core (the shipping v0.1 core runs in TypeScript)
System requirements
- Windows 10 (1809+) or Windows 11, 64-bit
- Approx. 300 MB free disk space after install
- A GPU with up-to-date drivers (software decode fallback otherwise)
- No account and no internet connection required to play local media
Integrity
The installer is signed by Oxford Private Studios Ltd and timestamped, so the publisher is stated and any tampering is detectable. The certificate is not yet issued by a public authority, so Windows SmartScreen still warns on first run. Verify the SHA-256 below before installing.
Every download is checksum-verified and published by Oxford Private Studios. Verify the SHA-256 above against your downloaded file before installing.
More Aevornix apps
The desktop suite.
Each app is a real, self-contained build. Where an installer is not yet hosted, the button reads Available shortly and activates the moment it goes live.
Aevornix AudioDJ
Early AccessA desktop audio studio with no account and no subscription. Every meter reads audio that passed through the engine rather than a prediction of it, and an export is reopened and measured before it reports success.
Version 1.1.0 · 2 August 2026
- Three ways to begin a project: record from an input, import a file, or start with an empty track. The third needs neither a capture device nor a file, so a machine with no input can still start work
- Record from any input the machine reports, or from whatever is playing, with the take written to disk as it arrives so an interrupted session still leaves a file that opens
- The record button answers the press immediately, and the wait before a take begins is about half what it was
- Hear your own input while a take runs, across the two different clocks a capture device and an output device keep, measured over four minutes on two pairings with nothing lost
- Non destructive editing: six fade shapes including the equal power pair a crossfade needs, snapping to zero crossings, and a history you can read
- CLAP, VST3 and LV2 plugins on any track, each opened in a separate process while it is examined so one that crashes during a scan cannot cost you your work
- A plugin with a side chain is taken rather than refused, and the second input is fed silence rather than the plugin being half fed
- Loudness, loudness range and true peak to ITU-R BS.1770, agreeing with ffmpeg to within 0.04 LU
- See a track as a waveform, in decibels, or as a spectrogram
- Works offline. Recording, editing, mixing, exporting and saving open no network of any kind, measured across a whole session at zero connections
- Losing an audio device mid take raises a fault and says so, but no interface has been unplugged to watch it happen
- No take has run longer than four hours
- Every control carries a name, a role and its state, but no screen reader has been listened to
- The arrangement is edited with a pointer: its menus are reachable from the keyboard, its clips are not
- Publishing to an online destination reports what is missing rather than claiming success, because the far side is not built. Exporting to a file works
An open beta, and a complete product rather than a preview. What is not yet known is how it behaves on machines other than the one it was built on, which is what the beta is for. Two things worth knowing: a plugin that crashes while it is running takes the application with it, which is the price of running it in the same process so its audio reaches the mixer in time, and on a machine very low on memory the window can go blank while the application carries on, which was seen once and has not been reproduced.
Aevornix Convert
Early AccessConvert a track, an album or a whole library in one gesture, into the AEV audio format or back out of it to nine others. Every file is routed on what it actually contains rather than on its extension, and the queue says which tier each track will get, and why, before it converts anything.
Version 0.9.0 · 7 August 2026
- Drop tracks, albums, folders of albums or a whole library in one gesture. Folders are walked through, duplicates removed, and your folder structure, tags and artwork are kept
- It goes both ways: into AEV, or back out to FLAC, WAV, AIFF, Apple Lossless, MP3, AAC, M4A, Opus or Ogg Vorbis, in the same queue
- Reads MP3, WAV, FLAC, AAC, M4A, OGG, Opus, AIFF, WMA and MIDI
- Every track is routed on its content, so an .m4a holding Apple Lossless and an .m4a holding AAC are treated as the different things they are
- Lossless is verified rather than asserted: after writing, the audio is decoded back out of the file and compared with the source, and a mismatch fails the conversion instead of producing a file labelled lossless
- A lossy ancestry flag that cannot be cleared, so re encoding cannot launder a file into lossless
- The Inspect view opens any .aev and reads out what the file says about itself: its conversion history, its ancestry, the measured frequency content, the loudness to EBU R128, and its health from every checksum inside it
- Damage is located and named against the few seconds of audio it sits in, rather than played as artefacts
- Audio comes back out without being decoded, or as WAV, and the cover art saves out as an image
- Runs entirely on your machine: no account, and no connection of any kind
- 433 checks across 16 suites pass, run on 2026-08-06 against the ffmpeg that ships, including a proof that the comparison behind the lossless claim can fail
- The AEV Audio specification is a draft and no independent implementation of it exists yet, which is what makes this a preview rather than a 1.0
- Three things the specification defines and the application does not yet write: the error recovery layer, two quality tiers in one file, and structured performer credits
- A code signed installer
The installer is not code signed, so Windows SmartScreen shows a warning on first run saying the publisher is unknown. The SHA-256 below is the build, and can be checked with "certutil -hashfile AevornixConvert-Setup-0.9.0-x64.exe SHA256" before installing. Roughly 400 MB of disk once installed. Aevornix Convert includes ffmpeg under the GNU Lesser General Public License version 3; the full notices and licence texts are installed alongside the application.
Aevornix Mail
Early AccessConnect any mailbox with just your address and password; settings resolve automatically. Real IMAP and SMTP, encrypted on your device, with a trusted-sender panel showing DKIM, SPF and DMARC.
Version 1.12.1 · 6 August 2026
- Mail arrives while the window is open, without restarting the application, on three accounts at once
- The unread count above the list matches the messages under it, and unread junk is not counted as unread inbox mail
- Show only unread mail by pressing the unread count above the list, and press it again to bring everything back
- A message cannot draw over the application: what a sender sends stays inside the reading pane
- Flag a message and the flag reaches your mail server, so it is there in webmail and on your phone, and survives the next refresh
- A snoozed message coming back appears straight away, and the Snoozed folder says when each one is due
- Reach mail older than the last fifty messages: a folder loads more on request, so a mailbox of thousands is not the newest fifty and nothing else
- A long list stays quick. Above two hundred messages only the rows on screen are drawn, and the scrollbar still measures the whole folder
- Search still answers when the connection is down, from the messages this computer has already seen. It says how much it looked at, and that it holds no message bodies, rather than reporting nothing found
- Bring in mail from another client: Thunderbird mailbox files, .eml, Apple Mail .emlx and maildir folders are copied to your mail server, each message keeping its own date and whether it had been read
- Put a message aside until a time you choose and have it come back: it moves on the server, so it is out of the way on your phone as well
- Categories in your own words, not a fixed list, applied by your own rules
- A mailbox somebody has shared with you appears under whose it is
- The window opens where you left it, and moves back into view if the screen it was on is gone
- Save a backup of everything that exists only on this computer: your tasks, notes, contacts, calendar, signatures, templates and rules
- Mail that arrives while the window is open appears in it, rather than on the next launch
- A message you send is saved to your mail server's Sent folder, so it is there in webmail and on your phone as well
- Each account's folders show that account's mail, including Sent, whichever account you are looking at
- A Sending record in Settings, holding what your server answered for every message: which recipients it accepted, its own words, and whether the copy to Sent worked
- The formatting toolbar reaches the recipient: bold, italic, underline, lists and links travel with the message rather than living on your screen
- Pictures go inside a message where the cursor is, from the toolbar or by pasting a screenshot straight in
- What you type is saved as you type it, in both composer windows, and unsent messages are listed above the Drafts folder
- Send later: a message waits for a time you choose. If the application is closed when that time passes it is NOT sent late; it waits and says so
- Templates: keep a message you write often and drop it into a new one, without overwriting a subject you have already typed
- Ask for a read receipt, and answer one somebody asks of you. Nothing is ever sent back without you choosing to
- Send from an address your mailbox answers to without leaving the composer: claim it in the From row and the message goes out as that address
- Add an account with just your address and password: server settings resolve automatically from built-in presets, the Mozilla provider directory, or your own domain configuration
- Real IMAP and SMTP: fetch folders and messages, read, reply and send
- Credentials stored encrypted on your device; no Aevornix account, nothing uploaded
- Trusted-sender panel showing DKIM, SPF and DMARC results
- Search operators, tasks and the day agenda
- Nothing sample or placeholder: with no account connected there is no name, no address and no data on any surface, and a saved account is reconnected on launch
- Your notes, tasks, contacts and calendar entries are kept on your device across restarts
- Select several messages at once with the checkbox, ctrl-click or shift-click, then delete, archive, junk or mark them read in one go
- Mail rules with a junk filter that weighs DKIM, SPF and DMARC results, spoofed sender names and misleading links, and writes a rule when it is confident or when you have junked the same sender a few times
- Remote images are blocked so a sender cannot tell that you opened a message, and the reader says what it blocked. You can load them on one message or turn them on for good, and the reader says how many actually loaded
- Updating offers to clear out the previous version's setup file, so installers do not pile up on your disk
- Several email accounts at once, all signed in together. Switching between them changes which mailbox you are looking at and does not disconnect the others
- Light and dark themes
- Choose which of your accounts a message is sent from, in the composer. A reply defaults to the account that received the original
- Attach files to a message, and open or save the attachments you receive
- Undo send: a message waits ten seconds before it leaves, so undo stops it going. Closing the app during the wait sends it rather than losing it
- Every date on screen comes from the clock, and light mode is complete across every surface
- One setup flow that adds every account in a sitting, with progress for each one, and a summary of the checks it ran at the end of it rather than a straight drop into the inbox
- A unified inbox across every account, and a colour for each one taken from its address so it is the same on every launch
- Your folders as your server has them, nested to whatever depth they go, with favourites, a filter and unread counts
- Several signatures per account, one of them the default, a different one on replies if you want, and the signature follows the account a message is sent from
- Conversations: a reply and the message it answers sit on one row, counted, and opening it shows the whole exchange including your own replies from Sent. Grouping can be turned off
- Your replies carry the headers that put them in the same conversation in whatever mail app the other person uses
- The reading pane goes on the right, along the bottom, or away altogether, and stays where you put it
- Keyboard navigation: move, open, reply, archive, flag and delete without the mouse, and never while you are typing a message. Press ? for the list
- Sign in to Outlook and Microsoft 365 with your Microsoft account instead of a password: Aevornix Mail is registered with Microsoft and the sign-in is built into this download, so there is nothing to set up
- A calendar with real dates: Day, Week and Month, an event on any day at any time, and two things at the same hour shown side by side rather than one hidden under the other
- People builds itself from the addresses in your mail. It proposes, you choose; nobody is added behind your back, and each person's card shows what you have written to each other
- Notes that know when you wrote them, ordered by that with pinned ones first, and searchable including what is inside them
- Aliases: if your mailbox answers to more than one address, you can send from any of them, and a reply goes out from the address the message was sent to rather than from your main one
- Aevornix Mail reads which of your addresses each message was delivered to, so Settings can offer the ones your server has been sending your way instead of making you type them in
- One-click Gmail sign-in activates once a Google client id is configured; public Gmail additionally needs Google verification and a CASA assessment
- Calendar entries, contacts and notes live on your device: syncing them with a server (CalDAV and CardDAV) is a later release
- Hosted Aevornix mailboxes and the domain-connection flow
- Automatic updates and a code-signed installer
The installer is not yet code-signed, so Windows SmartScreen may warn on first run. Verify the SHA-256 below. New in 1.12.1: mail arrives on its own, three ways at once, and one of them is watching the other two, so a connection that quietly drops costs a couple of minutes rather than every message until you next restart; mail reaching your inbox no longer depends on which folder you are looking at. A settings menu with something behind every control, in nine panes, including an out of office that refuses to answer a mailing list, a machine, or the same person twice. Pictures carried inside a message, such as a logo in a signature, now appear, and remote images stay blocked until you ask for them, at which point they genuinely load and the reader says how many did. The unread count above the message list now matches the messages under it, and unread junk is no longer counted as unread inbox mail. Recall has been removed: a sent message cannot be pulled back, and Undo send is the control that genuinely stops one before it goes. New in 1.11.2: the unread count in the message list is a button, so pressing it shows only unread mail and pressing it again brings everything back; it never did anything before. A message can no longer draw over the application: a body that tried to position itself across the window is kept inside the reading pane. Links are only opened when they are the kind of link Aevornix Mail means to open, and the Privacy panel in Settings says what is kept on your computer. 1.11.1 repaired three things 1.11.0 got wrong: bringing mail in from another client failed the moment you pressed Copy to my server, flagging a message was only ever recorded on this computer so your mail server never learned of it, and a snoozed message came back without the window noticing. New in 1.11.0: mail older than the last fifty messages can be reached, a long list stays quick, search answers with no connection, and mail from Thunderbird, Apple Mail, Windows Mail or a maildir folder can be brought in. Outlook data files (.pst) cannot be read; export the folder from Outlook as individual messages first. 1.10.0 brought search that runs on your server, across whole mailboxes and message bodies, and a notification when mail arrives. 1.9.0 brought the composer: formatting that reaches the recipient, pictures inside a message, autosave, send later, templates and read receipts. Signing in to Outlook and Microsoft 365 with a Microsoft account arrived in 1.8.0; Microsoft shows an "unverified publisher" notice on the sign-in screen until Aevornix completes publisher verification with them, and inside a company tenant an administrator may need to approve the app before staff can use it. A password or app password works in the meantime.
Aevornix Meet
Developer PreviewNative WebRTC calls (camera, microphone, screen share) over an Aevornix signalling server. No third-party call service. Local and same-network calls work now; internet-wide calling is the hosted next step.
Version 1.0.0 · 27 July 2026
- Native WebRTC calls with a per-peer video grid and microphone, camera and screen-share controls
- Your own signalling server: no third-party call service and no external iframe
- Local and same-network calls work now; a "Test a call on this device" button demonstrates a real two-peer call
- Couples with Aevornix Mail: a meeting invite opens the same room over an aevmeet:// link
- Calls between people on different networks need the hosted Aevornix signalling relay and a TURN server (the same protocol, moved off loopback)
- Automatic updates and a code-signed installer
A demo preview. Best explored with the "Test a call on this device" button until the hosted relay is live.
WebAssembly
Aevornix Foundations.
The libraries every application needs, compiled to WebAssembly and proven.
Six established C libraries behind one API. Compression, a SQL database, a scripting language, PNG decoding, font rendering and an audio codec, each loaded only when you ask for it.
- One dependency, six modules, nothing loaded until you use it
- Every module takes and returns JavaScript values, not heap offsets
- Errors come back as values, in each library’s own words
- Each module keeps its own name, version and licence
SHA-256 b33e7e649b4454240193af3e5f954dde6469ca63f217b04fcc032b8dc5c8444d
The built package is loaded and every module called before it is released. These are the answers it gave.
zlib1.3.1, compress and inflate round-trips byte-identicallysqlite3.45.1, SELECT returns real rowsluaLua 5.4.6, evaluates 6 * 7 to 42libpng1.6.43, reads a real PNG and rejects anything elsefreetype2.13.2, parses Arial to 4,651 glyphsopuslibopus 1.4, encodes a 20 ms frame
The six modules
Each is also available on its own. Whichever way you take them, the library keeps its name, its version and its licence.
zlib
ZlibLossless compression. The deflate implementation nearly everything else is built on.
aev-zlib@1.3.168 KB wasm33 KB gzipped15 source filesaev_zlib_compressdeflate a buffer at level 9aev_zlib_uncompressinflate a bufferaev_zlib_compress_boundworst-case compressed size, so you can size the outputaev_zlib_versionthe zlib version string
Built from the upstream zlib 1.3.1 release, checked against SHA-256 9a93b2b7dfdac77ceba5a558a580e74667dd6fede4585b91eefb60f03b72df23 before anything was compiled.
Package SHA-256 46c505fcce0463654a746424102384327170f2f3d15c49f868a0d7a2c2b7947a
SQLite
Public domainA complete SQL database engine, running entirely in memory.
aev-sqlite@3.45.1975 KB wasm413 KB gzipped1 source fileaev_sqlite_execrun SQL against a fresh in-memory database and get the rows back as textaev_sqlite_versionthe SQLite library version
Built from the upstream SQLite 3.45.1 release, checked against SHA-256 5592243caf28b2cdef41e6ab58d25d653dfc53deded8450eb66072c929f030c4 before anything was compiled.
Package SHA-256 4253df492af8f4b9814957495e44ebef181038e19321c2b3d979a1d6981bb5a3
Lua
MITA small, fast, embeddable scripting language.
aev-lua@5.4.6265 KB wasm133 KB gzipped32 source filesaev_lua_evalrun a chunk of Lua in a fresh state and get its result, or the erroraev_lua_versionthe Lua release string
Built from the upstream Lua 5.4.6 release, checked against SHA-256 7d5ea1b9cb6aa0b59ca3dde1c6adcb57ef83a1ba8e5432c0ecd06bf439b3ad88 before anything was compiled.
Package SHA-256 d366fbae0008cdcaf23ced0c8c0b59f784c0843424206cc7c6280968c14f217f
libpng
PNG Reference Library License v2The reference PNG reader and writer, with zlib compiled in.
aev-libpng@1.6.4379 KB wasm42 KB gzipped30 source filesaev_png_inforead a PNG from memory and report its dimensions, or the decoder erroraev_png_versionthe libpng version string
Built from the upstream libpng 1.6.43 release, checked against SHA-256 fecc95b46cf05e8e3fc8a414750e0ba5aad00d89e9fdf175e94ff041caf1a03a before anything was compiled.
Package SHA-256 71a9f51ef43ebc677e7ac2ea37fa81c1800dda7026dfef561c6e2951d563f016
FreeType
FTL or GPL-2.0Font rendering: parses TrueType, CFF and Type 1 faces and rasterises glyphs.
aev-freetype@2.13.2579 KB wasm273 KB gzipped36 source filesaev_freetype_face_infoload a font from memory and report its family, style and glyph countaev_freetype_versionthe FreeType version the package was built from
Built from the upstream FreeType 2.13.2 release, checked against SHA-256 1ac27e16c134a7f2ccea177faba19801131116fd682efc1f5737037c5db224b5 before anything was compiled.
Package SHA-256 c95436edab0b2b100851ca09f9cf55f4eaff69636c729108572a7e1cccafd342
Opus
BSD-3-ClauseThe audio codec used by WebRTC and most modern streaming.
aev-opus@1.4259 KB wasm134 KB gzipped136 source filesaev_opus_encode_silenceencode one 20 ms mono frame at 48 kHz and report the packet sizeaev_opus_versionthe Opus library version string
Built from the upstream Opus 1.4 release, checked against SHA-256 c9b32b4253be5ae63d1ff16eea06b94b5f0f2951b7a02aceef58e3a3ce49c51f before anything was compiled.
Package SHA-256 765c0adfd419d66f81df8d3f8fc25affe01c483983c6b34882ea476b0ed8342e
These are other people's libraries, compiled and hosted by Aevornix, which claims authorship of the wrapper and the packaging only. The full licence text of every module travels inside the package, and the upstream release each was built from is recorded with its own SHA-256, so what went into the binary can be checked rather than taken on trust.