Phantom 3.29.11

Phantom 3.29.11 makes new macOS native resource profiles resilient to device-number changes after reboot. The launcher verifies a witnessed APFS volume, directory identity, and boot before using a profile. An explicit phm resources profile upgrade-identity command upgrades an unchanged older profile while it is still on the same boot. Profiles that already drifted remain fail closed and require a new profile and native sign-in.

• Accept current GitHub ruleset transport fields during protected-branch attestation without weakening its policy checks.
• Allow only the fixed system identity probes needed by witnessed profiles inside Claude's native sandbox.
• Pass the exact-source platform Merge Gate and independent dependency audit.

The npm package is the original attested CI archive, published through the canonical OIDC workflow with provenance and an isolated consumer check. The Apple silicon app and CLI assets are paired and locally signed with the included manifest. The Mac app is not notarized.

Install the CLI with npm install -g @ashlr/phantom@3.29.11. Publication does not restart the resident fleet or reauthorize standing grants; those are separate Mac operations.