Four checks around every operation

  1. Bounded discovery. Scanning is limited to the selected application and documented macOS support locations. AppUnwind does not recursively search Documents, Desktop, external drives, or your whole home folder.
  2. Independent protection. System roots, symbolic links, another signing team, sibling-app resources, root-owned components, and protected product classes can block a match even when its name or identifier looks relevant.
  3. Identity at execution. The selected app identity is captured during review and checked again before the plan runs. A changed bundle or path stops the operation.
  4. Recoverable transfer. Same-volume items move into quarantine. Cross-volume items remain at the source until a SHA-256 digest verifies the copy.

Full Disk Access

AppUnwind can run with limited coverage. Full Disk Access lets macOS expose additional support locations, but it does not loosen the path firewall or select shared files. The coverage screen names unreadable locations instead of representing them as empty.

Direct Mac release

The production DMG will be signed with a Developer ID Application certificate, submitted to Apple notarization, stapled, and checked with Gatekeeper. This page will publish the exact signer, version, and SHA-256 checksum for the immutable public package.

Release gate is currently closed

The native app and local ad-hoc package are validated for development. They are not substitutes for the final Developer ID, notarization, stapling, Gatekeeper, and public-artifact checks, so there is no public package link yet.

Audited rule sources

AppUnwind includes a generated catalog of literal, bounded Homebrew Cask zap paths pinned to one reviewed upstream commit. Rules are clues, not permission: every resulting path still passes the same safety policy and stays visible in the receipt.

Report a security issue

Email security@trieflow.com. Include the AppUnwind version, macOS version, and the smallest safe reproduction. Do not attach private quarantined content or a full application inventory.