Repository navigation
Trulana v1.2.0 — macOS Desktop MVP
Trulana v1.2.0 — macOS Desktop MVP
This is the first public release where the shipped macOS binary matches the actual security model and desktop experience.
Trulana is a local-first private context system that lets apps and AI agents query useful context without owning your data. Context stays local. Only redacted answers leave the device.
This release includes the desktop shell UI, hardened agent approval flow, enforced access scopes, and a fully signed + notarized macOS build accepted by Gatekeeper.
What’s New
Desktop shell UI
A proper macOS desktop interface for managing local context, approvals, and agent access instead of a CLI-first workflow.
First-contact agent approval
New agents are no longer auto-approved.
First contact now creates a pending request that requires explicit user approval before access is granted.
Scope narrowing before approval
Users can approve only the scopes they want.
Requested scopes can be narrowed before activation. Stored granted scopes become authoritative and cannot be silently expanded later.
Enforced scope checks
Scope enforcement is now live.
- context.read is required for context queries
- monetize.write is required for monetize / lease offer routes
Tokens without the required scope are rejected.
Empty-vault no-echo protection
If no vault match exists, Trulana no longer echoes the caller’s raw query back.
This closes an information disclosure issue and ensures raw context is not reflected unnecessarily.
Signed + notarized macOS release
This build is:
- Developer ID signed
- Apple notarized
- stapled
- Gatekeeper validated
Users can open the app normally without override prompts from an unsigned build.
License
Business Source License 1.1 (BUSL)
Source available.
Commercial production use by a commercial entity requires a separate commercial license from AdamsLocal LLC.
This is not MIT and is not OSI open-source.
Known Limits
- macOS first release only
- signing + notarization are currently manual, not yet automated in CI
- repository/source access may remain private during commercial rollout
- no HIPAA, SOC 2, FedRAMP, or other regulatory certifications are claimed
- audit logs are encrypted, but not cryptographically tamper-evident
Upgrade Notes
v1.0.0
Signed and notarized, but predates the hardened approval and scope-enforcement model.
Do not use as the primary public release.
v1.1.0
Desktop UI milestone, but not shipped as a signed public artifact.
v1.2.0
This is the correct public baseline.
Recommended For
- privacy-first AI workflows
- local agent systems
- personal AI infrastructure
- teams that want context retrieval without cloud custody of sensitive data
Contact
Private testing, licensing, and security inquiries:
What's Changed
- fix: wire all non-functional buttons by Adam Gurley (@machine-squelch) in #16
- restore landing page to March 31 state and add government/compliance … by Adam Gurley (@machine-squelch) in #17
Full Changelog: v1.1.0...v1.2.0
