Cliphoard 1.0.1

Cliphoard 1.0.1

Cliphoard is a complete, free clipboard manager for macOS. Keep and search your clipboard history, pin useful clips, and use local models to search by meaning. The entire app codebase, including Pro features, is open source under the MIT licence.

This release uses the A2 Labs application identity and includes a company-signed, Apple-notarized installer for Apple silicon and Intel Macs running macOS 13 or later.

Install

Download Cliphoard-1.0.1.dmg, open it, and drag Cliphoard to Applications. Open Cliphoard from Applications. macOS may ask you to confirm opening the downloaded app. Free functionality requires no account or licence key.

Automatic paste is optional and requires the macOS Accessibility permission explained by the app. Clipboard capture, search and copying a selection can be used without granting automatic-paste permission.

Upgrading from 1.0.0

Quit the older Cliphoard before replacing it in Applications. Version 1.0.1 uses ai.a2-labs.cliphoard. It retains the existing clipboard-data location and encryption namespace and includes migration of preferences and the saved licence. Because macOS permissions are linked to app identity, Accessibility and launch-at-login permission may need to be granted again.

Pro and distribution channels

Pro adds on-device image search, text recognition and similar-image search. The direct edition accepts Cliphoard's signed offline licence keys. Its purchase link will be enabled after the checkout and key-delivery flow are verified.

The Mac App Store edition is being prepared as one free app with an optional Pro in-app purchase. It is not available in the Store yet; this download is the direct edition.

Customer-install verification

The exact installer was downloaded in Chrome and installed through Finder in an isolated Mac. Gatekeeper accepted it, and Free clipboard capture, exact search, pinning and history survived relaunch and a guest reboot. A signed offline test licence exercised Pro activation, relaunch, removal, OCR and similar-image search.

This testing used a licence fixture, not a live purchase. The old-identity migration check used synthetic preferences rather than a full upgrade from an older installed binary. Automatic paste was not exercised in that guest because it did not grant Accessibility permission.

Integrity and source

• Version: 1.0.1 (build 2)
• Signed by: A SQUARED LABS LIMITED, Apple team 74M96PGT6P
• Frozen application source: 80a92ea9fdac4562f20d48b71c11e760d7f095ee
• DMG SHA-256: 645d92652d02ddd7200de900abd5c504a2db074b205ae5cb3c6da8e0a75f495d
• DMG size: 39,379,848 bytes

The installer includes the application and its licence/model attribution notices. The direct edition bundles the image-search model; the optional text embedding models download when selected. Clip contents and search queries stay on your Mac.

Cliphoard 1.0.0

Cliphoard 1.0.0 — a fast, private, open-source clipboard manager for macOS 13+.
Download Cliphoard-1.0.0.dmg below, drag it to Applications, and press ⌃⌥⌘V.

⚠️ This build is not notarized by Apple — the notarized build and the Homebrew tap
ship in 1.0.1. On first launch macOS refuses it once: System Settings → Privacy &
Security → Open Anyway, or xattr -dr com.apple.quarantine /Applications/Cliphoard.app.

1.0.0 — 2026-09-11

What it is

The first release of Cliphoard: a fast, private, open-source clipboard manager for macOS 13+
(Universal, Apple Silicon and Intel). Press ⌃⌥⌘V and your history slides up from the bottom
of the screen — text, rich text, links, hex colours, files and images — searchable by
meaning as well as by exact text, with on-device search models, 17 themes, three layouts,
stackable tag baskets, text recognition inside screenshots, image search by description or
by example, and an importer for the clipboard managers already on your Mac. Native Swift,
no Electron, no account, no cloud.

Also in this release

• File clips open. Double-click a file clip (a PDF, a document, an image file) and it opens
  in its default app; ⌘O does the same for the selected clip. Right-click and the inspector
  gain Open, Reveal in Finder and Copy Path; ⌥⌘C copies the path as plain text
  (Finder's own "Copy as Pathname" chord). A file clip no longer pastes on a mouse click — click
  selects, double-click opens, and ↩ / ⌘1–9 / right-click → Paste still paste it. Every other
  clip kind is unchanged. If the file has been moved or deleted, Open and Reveal are greyed with
  the reason and the bar says which path is gone; Copy Path still works.
• Quit is discoverable. ⌘Q quits from the bar, the inspector and Settings; the safe-mode
  banner carries Quit and Relaunch; Settings → General has a Quit button. If clips are held
  unsaved (safe mode), quitting asks first and names how many.

Privacy in this release

• Encrypted at rest, AES-GCM. Clip content — text, rich text, file paths, colours,
  tags, recognised text and, new in this release, the name of the app each clip came from
  — is sealed in the database; image clips and their thumbnails are sealed payload files
  on disk; the semantic search index is sealed too. Stored in the clear, on purpose: the
  row id, clip kind, timestamps, pin state, use count and the small detector flags.
• One-time migration on first launch. Builds before 1.0.0 stored the source-app name
  in the clear. 1.0.0 seals it on first launch and compacts the database; your history is
  kept. (APFS is copy-on-write, so freed unencrypted blocks may linger in unallocated
  space until the OS reuses or trims them — see PRIVACY.md.)
• The key. On a Mac with a Secure Enclave, a P-256 private key is generated inside the
  Enclave and never leaves it; the AES key is derived from it (key agreement + HKDF). A copy
  of that derived key is kept in your login Keychain marked this-device-only — never synced,
  never in the database. Macs without a Secure Enclave use a random key in the login
  Keychain. No Touch ID prompt is involved.
• Password-manager clips are quarantined, not hidden. Pasteboards marked transient,
  concealed or auto-generated are never stored. A clip that still arrives from a known
  password manager is stored encrypted but flagged password app and excluded from every
  search index — no embedding, no tags, no recognition. It stays visible and pastable in
  your history; delete it with ⌘⌫. Exclude any app entirely with
  defaults write io.antreas.cliphoard excludedBundleIDs -array com.example.app.
• No network. Nothing you copy ever leaves your Mac. The app's only outbound calls are
  optional, download-only fetches of a search model you have not installed yet (the ogma
  models from HuggingFace, the others from our GitHub release); they carry none of your
  data. No telemetry, no analytics, no account.
• Screenshots are made pasteable in web apps — on by default, with a switch. macOS puts
  a screenshot on the clipboard in a format browsers cannot read, so pasting one into
  Messenger, Gmail or any web app silently does nothing (the first issue filed against this
  project); Cliphoard adds a PNG they understand. To do that it has to take ownership of the
  clipboard and rewrite it — the only time it does anything to the clipboard beyond reading
  it and writing the clip you picked. Your screenshot is carried across; apps that ask for
  TIFF get a standard-range image; the clipboard's owner shows as Cliphoard; and if both the
  rewrite and the restore fail the clipboard is left empty (unlikely, logged loudly). Turn it
  off in Settings → Make screenshots pasteable in web apps. Full detail in PRIVACY.md.

Fixed

• The inspector now opens in its own centred window above the bar, instead of inside it.

Not notarized yet

1.0.0 is not yet notarized by Apple (the notarized build and Homebrew tap ship in 1.0.1).
First launch: open it once, then System Settings → Privacy & Security → Open Anyway, or
xattr -dr com.apple.quarantine /Applications/Cliphoard.app. When 1.0.1 replaces it, macOS
treats it as a new app: re-grant Accessibility once and click Always Allow when Cliphoard
asks for its keychain key (Deny freezes history read-only; nothing is deleted).

The build is signed with the project's local self-signed certificate, still named
"Ditto Local Signing" from the app's former name.

Deferred to 1.0.1

• Encrypted, passphrase-protected export/import for moving history to a new Mac
• Touch ID hiding for password-manager clips
• A Settings UI for excluded apps
• The notarized build and Homebrew tap

Known issues

• A launch during a dark wake can enter read-only safe mode until relaunch.
• The keychain may ask for confirmation on each launch until the key reaches the
  data-protection keychain.
• The one-time-code detector cannot recognise the format authenticator apps use (a code
  shown as two short groups with no surrounding words), so recognised text from those
  screenshots is not reliably withheld — see PRIVACY.md.

Licences

• The app is MIT.
• Bundled: the OpenVision-Tiny image and text towers, Apache-2.0 — licence text shipped
  inside the .app and at the root of the DMG (LICENSE-Apache-2.0.txt).
• On demand, never bundled: the ogma models (MIT) and all-MiniLM-L6-v2 (Apache-2.0).
• Full attribution in THIRD-PARTY-NOTICES.md.

SHA-256: f439daa3510b9e27c2c52341f932e6fce7be0981b585a0d188a56c5c6483a85e

On-device embedding models v1

Auto-download assets for Cliphoard's semantic search tiers. The app fetches
these on demand when a tier is selected whose model isn't bundled — no manual
install. Each zip: the CoreML .mlpackage (compiled on-device on first use) +
tokenizer folder.

asset	tier	params	license
all-MiniLM-L6-v2.zip	High	22.7M	Apache-2.0
openvision-tiny-p8.zip	build-time asset: both OpenVision-Tiny towers + tokenizer (bundled by Scripts/release.sh via tools/restore-models.sh; the app never downloads it)	5.9M+2.9M	Apache-2.0

The ogma tiers are served from HuggingFace: https://huggingface.co/axiotic/open-ogma-micro and https://huggingface.co/axiotic/open-ogma-small (MIT).

---

Note on the retired Max tier. An embeddinggemma-300m tier was offered here and has
been withdrawn. Not for quality: EmbeddingGemma is governed by Google's Gemma Terms of
Use, including a prohibited-use policy, which is not what someone downloading an MIT-licensed
app expects to inherit — and hosting the weights here made this project their redistributor.
The asset is gone from this release and the tier is gone from the app, which migrates anyone
who had selected it to high (MiniLM).

Every model published here is permissively licensed: Apache-2.0 (all-MiniLM-L6-v2, openvision-tiny-p8), so the shipped artifact carries no use restrictions
beyond Cliphoard's own MIT licence.