DiskX 1.0.3 — notarized

DiskX 1.0.3 — notarized

Same code as 1.0.2; this build is notarized by Apple.

Drag it to Applications and open it. No right-click → Open, no xattr, no
Privacy & Security detour. The ticket is stapled to both the DMG and the
app bundle inside it, so a first launch works offline too — Gatekeeper reports
source=Notarized Developer ID.

1.0.2 was Developer ID signed but unnotarized and showed the "Apple cannot check
it for malicious software" dialog. If you are on 1.0.2, this is a cosmetic
upgrade — the security fixes are identical.

Carried over from 1.0.2 (security release)

• Fixes a reproducible crash. A folder containing sparse files with absurd
  reported sizes overflowed a signed 64-bit accumulator and aborted the app.
  Sizes are now clamped at parse time and every aggregation saturates.
• Deletions are bound to file identity. Each item is captured as
  (device, inode, type) before it moves and re-verified after; if the path was
  swapped underneath, the delete is refused rather than performed on the
  substitute.
• Protected system paths stay protected at any depth. /private/var/db and
  similar subtrees were previously offered as "Yours — review" below the
  classification depth limit.
• Hardened getattrlistbulk parsing against malformed kernel buffers.

Verify

shasum -a 256 DiskX-1.0.3.dmg
cb078b922e5f68c87d68c212d5a5dd171dbfed8cb430dcfd639f8bc7960e8fbf

spctl --assess --type install --verbose=2 DiskX-1.0.3.dmg
# DiskX-1.0.3.dmg: accepted
# source=Notarized Developer ID

Universal (Apple Silicon + Intel), macOS 14 Sonoma or later. 54 tests passing.