EnvLatch v0.1.0 — unsigned preview

EnvLatch v0.1.0 — unsigned preview

EnvLatch stores API keys once in macOS Keychain and launches local agents,
SDKs, scripts, tests, or backends with a least-privilege environment:

envlatch run --using OPENAI_API_KEY -- npm test

Download

This prerelease provides an unsigned arm64 preview:

• EnvLatch-0.1.0-macos-arm64-unsigned.dmg
• EnvLatch-0.1.0-macos-arm64-unsigned.dmg.sha256

The app is ad-hoc signed, not Developer ID signed or notarized. Verify the
checksum before mounting. macOS will require Privacy & Security → Open
Anyway for the installer and may require it again for the app.

shasum -a 256 -c EnvLatch-0.1.0-macos-arm64-unsigned.dmg.sha256

The DMG's Install EnvLatch.command installs the app, CLI, and reusable agent
skill. It also includes the MIT license and unsigned-preview notice. Add
credentials only through the installed app after verifying the download.

Included

• one provider-agnostic envlatch run --using command;
• direct use of every saved key plus optional multi-key groups;
• per-key Anthropic, OpenAI Chat Completions, OpenAI Responses, and Gemini
  client bindings;
• direct execve without shell interpolation;
• optional any-name agent/host pairing and a reusable installed skill;
• transactional source and preview installers.

No secret values are exported, copied into the repository, or included in the
release artifacts. A notarized, friction-free binary remains a later release
boundary.