EK Bridge 0.12.0

Agents need no changes: same tools, ports, files and setups. EK Bridge can now stay light or dark whatever macOS uses, and Remote Access offers to move a Tailscale Funnel setup on port 8443 or 10000 to 443, the only port claude.ai and ChatGPT connect to. The client registry stays at version 4, so going back to 0.11.4 works by installing its DMG over this one.

Added

• Appearance: Automatic, Light or Dark. In Settings ▸ General, keep EK Bridge dark while macOS is light, or the other way round. Automatic follows macOS, as before. It covers the window, Settings, approval and access panels, sheets, alerts and the menu bar menu, changes at once and is kept across launches. The same setting as in Funes Vault.
• Remote Access offers to move a Tailscale Funnel setup on port 8443 or 10000 to 443. claude.ai and ChatGPT only connect to 443. Setups from 0.11.3's drafts, or on a port picked by hand, showed as Running, or got start commands for the old port.
  • Once 443 can take EK Bridge's paths, the Tunnel row says so and shows the four commands that add them to 443, then the ones that turn off the old port's entry.
  • Then Address ▸ Edit… changes the address to the one without a port.
  • A setup on / of 443 stays as it is.
  • BridgeKit 0.4.1.

Install

Download EKBridge-0.12.0.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

f8ded77509b22e0655eb5be880c12eeadfe6f3b94a3c6a52bb78d80e7aa3223c  EKBridge-0.12.0.dmg
f8ded77509b22e0655eb5be880c12eeadfe6f3b94a3c6a52bb78d80e7aa3223c  EKBridge.dmg
0efcab5f24359e8fa8d29561c2a6f768bedb824b4aa819b0b24a1be2f0337d4c  EKBridge-0.12.0.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.12.0.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.11.4

Agents need no changes: same tools, ports, files and setups. An existing Tailscale Funnel setup keeps working as it is. The client registry stays at version 4, so going back to 0.11.2 works by installing its DMG over this one. 0.11.3 was built as a draft only and never published; everything in it is here, with this change to its Funnel fix.

Changed

• Remote Access shares Tailscale Funnel's port 443 by path with Funes Vault and other apps on this Mac. claude.ai and ChatGPT only connect to port 443, so 0.11.3's other public ports didn't reach a second app.
  • A new Funnel setup shows one command per path EK Bridge answers. Each adds only that path to port 443, so other apps keep theirs.
  • The commands to turn it off name each path. A setup from before, which forwards the whole port (/), stays Running and turns off by path too, leaving other apps' paths alone.
  • If 443 has another app's tailnet-only entry, which Funnel would make public, the guide uses 8443 or 10000 and says that claude.ai and ChatGPT can't reach it there.
  • New Tunnel states: Incomplete, with the commands for the missing paths, and No shareable port.
  • After Reset Path…, the page shows the commands that move Funnel to the new path.

Internal

• BridgeKit 0.4.0 (RemotePaths, FunnelPorts, TailscaleFunnelCommand). The tunnel goldens for Tailscale Funnel change to the path commands; every other golden and harness passes unchanged.

Install

Download EKBridge-0.11.4.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

ea6f33e4eaeac63e580d044d1f11a32e2e58713f06dc0e81039913d5c4602168  EKBridge-0.11.4.dmg
ea6f33e4eaeac63e580d044d1f11a32e2e58713f06dc0e81039913d5c4602168  EKBridge.dmg
7c7b0b8df1a674c15eef66003d5645fb1317ee10f81c80fcd179dd22f147eeee  EKBridge-0.11.4.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.11.4.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.11.3

Agents need no changes: same tools, ports, files and setups. Remote Access's guide now shares Tailscale Funnel with Funes Vault and other apps on this Mac instead of taking port 443 from them. The client registry stays at version 4, so going back to 0.11.2 works by installing its DMG over this one.

Changed

• JSON-RPC request ids longer than 1 KiB (as the response writes them) are refused with -32600 Invalid Request and "id": null (HTTP 400). No real MCP client sends ids like that: they use counters or UUIDs.

Fixed

• Remote Access shares Tailscale Funnel with other apps on this Mac, such as Funes Vault's Remote Access.
  • The guide used to offer tailscale funnel --bg 47616 whatever Funnel already served, and that takes port 443 from any app using it. It now checks what Funnel serves and uses the first free public port: 443, 8443 or 10000. With 443 free, nothing changes.
  • The address then ends in that port, such as https://my-mac.tail1234.ts.net:8443. If all three are taken, it says so and offers no command.
  • Another app's Funnel entry no longer shows as Wrong port; only one to the local MCP port does.
  • The command to turn Funnel off only touches EK Bridge's own port.
• A client on this Mac that sent requests without reading the replies could make EK Bridge's memory grow without limit. EK Bridge now reads the next request only once the client has taken the last reply, and closes a connection whose reply isn't taken within 30 seconds.

Internal

• BridgeKit 0.1.1 (scripts/bridgekit.sh), which brings both changes above to the local MCP port and the Remote Access port.
• BridgeKit 0.3.0 for the Funnel ports above (FunnelPorts, TailscaleFunnelCommand). Every existing golden and harness passes unchanged; the tunnel tests now expect another app's Funnel entry to be another app's, not this tunnel at the wrong port.
• Remote Access comes from BridgeKit 0.2.0. The Remote Access listener, the OAuth server and its store, the client-metadata fetch, the tunnel checks and the reachability test moved to BridgeKit 0.2.0's BridgeKitRemote, shared with Funes Vault. Nothing changes for users or cloud agents: the same URLs, tokens, sign-in pages, wording and remote-connections.json. build.sh links it next to BridgeKitCore. Every existing test, golden and harness here passes unchanged; the tests of the moved code run in BridgeKit.

Install

Download EKBridge-0.11.3.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

1ff9d31986203436ea6267f290e4e6498ec7f226ae693f529f0a7f9cbece9a72  EKBridge-0.11.3.dmg
1ff9d31986203436ea6267f290e4e6498ec7f226ae693f529f0a7f9cbece9a72  EKBridge.dmg
ab915389b7bb94564c69999e4cc2793ee01f9127c313bcd2f40adea58634ad99  EKBridge-0.11.3.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.11.3.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.11.2

Nothing changes for users or agents: same tools, wording, ports, files and setups. The client registry stays at version 4, so going back to 0.11.1 works by installing its DMG over this one.

Internal

• EK Bridge uses BridgeKit. The MCP protocol and security core (the loopback HTTP server, MCP and JSON-RPC, tokens, rate limits, safe file loading, bridge-mcp and one-click agent setup) moved to BridgeKit 0.1.0, a Swift package shared with Funes Vault. build.sh builds it as a static library (scripts/bridgekit.sh, pinned to an exact tag and commit) and links it into the app, bridge-mcp and bridge-client. The tests of the moved code run in BridgeKit too; every existing test here passes unchanged against it.

Install

Download EKBridge-0.11.2.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

a533278b875760e98b1e10df08c5cdfe3e56ece927e368da2bf6f428ccaf4276  EKBridge-0.11.2.dmg
a533278b875760e98b1e10df08c5cdfe3e56ece927e368da2bf6f428ccaf4276  EKBridge.dmg
5a4d69e179790ca41cb6403903ff516fe2518d0577d35f954428a77fe2c28a6d  EKBridge-0.11.2.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.11.2.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.11.1

A small fix release for the tunnel check on Remote Access. Agents need no changes. The client registry stays at version 4, so going back to 0.11.0 or 0.10.3 works by installing its DMG over this one.

Fixed

• Remote Access ▸ Tunnel said Can't check on this Mac for Tailscale Funnel whenever EK Bridge was opened from Finder, at login or by an update, so the guide didn't find a running Funnel and Down never showed. Tailscale.app's built-in CLI acts as the CLI only when started from a shell; EK Bridge now asks for it with TAILSCALE_BE_CLI=1.

Install

Download EKBridge-0.11.1.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

4dbee48856d0eea48ed34fe0b56a48e2efcdb2130ac8be584e57d5ae6606a48d  EKBridge-0.11.1.dmg
4dbee48856d0eea48ed34fe0b56a48e2efcdb2130ac8be584e57d5ae6606a48d  EKBridge.dmg
05435d0f9013d5d0661a54335e527fa28a64c542d2e583202011ad395699d1c7  EKBridge-0.11.1.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.11.1.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.11.0

Remote Access can now switch tunnels properly and checks whether your tunnel is running on this Mac. Switch Tunnel… sets up and tests a new tunnel while the one in use keeps working, lists by name which cloud agents need the new URL and which signed-in cloud apps get disconnected, and saves nothing until you click Switch; EK Bridge remembers each tunnel's last address for switching back. The checks are read-only and local (the tailscale CLI's status, cloudflared's and ngrok's local status endpoints): they let the guide move on by itself once the tunnel runs, show the Tunnel row's state, and warn with Down in the sidebar when the tunnel stops; a notification for that is optional and off by default. Address ▸ Edit… now tests the new address before saving it. Agents need no changes; cloud agents need the new URL only when you switch tunnels or change the address, as before. The client registry stays at version 4, and the new settings (RemoteTunnelAddresses, NotifyTunnelDown) are ignored by 0.10.x, so going back to 0.10.3 works by installing its DMG over this one.

Added

• Remote Access checks whether your tunnel is running on this Mac. For Tailscale Funnel it reads tailscale status --json and tailscale funnel status --json; for Cloudflare Tunnel and quick tunnels, cloudflared's local status server on 127.0.0.1:20241–20245; for ngrok, its agent API on 127.0.0.1:4040; and, when those are off, this user's process list. The checks are read-only: they never start, stop or change a tunnel, send nothing off the Mac, and never change what EK Bridge accepts. They run when you open Remote Access, every 60 seconds while it's on, after the Mac wakes and before each Test; nothing runs while Remote Access is off.

• The Remote Access guide finds the tunnel for you. On step 2 it says Waiting for Tailscale Funnel… and checks every 3 seconds; once the tunnel runs and forwards to the Remote Access port, it moves on to step 3 by itself with the address filled in (you still check it and save it, and it's tested). If the tunnel forwards to the wrong port or isn't public, it says how to fix it. I've Started It stays for Other tunnel and whenever the check can't tell. After Back from step 3 it shows Continue instead of moving on again.

• Cloudflare Tunnel and ngrok ask for your hostname in step 2, and the commands and config.yml use it.

• Switch Tunnel… on the Remote Access page: Choose · Start it · Paste and test · Switch. The tunnel in use keeps working, and nothing is saved, until you click Switch; Cancel works on every step. The new address is tested through the new tunnel first (EK Bridge answers its health check for that address only, never MCP or sign-in), the test says which tunnel answered, and the confirmation lists by name which connections need the new URL, which signed-in cloud apps will be disconnected, and the command to stop the old tunnel. Afterwards the page says Switched to .

• A warning when the tunnel stops. While Remote Access is on, the sidebar's Remote Access badge shows ⚠ Down and the menu bar menu says Remote Access on · tunnel down when the check on this Mac finds the tunnel isn't running (or forwards to the wrong port, or isn't public). An optional notification, Tailscale Funnel stopped. Cloud agents can't reach this Mac., is off by default (Settings ▸ General ▸ Notifications ▸ The Remote Access tunnel stopped); it's posted once when a running tunnel stops, at most every 30 minutes, never at launch and never while Remote Access is off.

• EK Bridge remembers each tunnel's last address, shown as Last used when you switch and filled in when you switch back.

• Live-test copy: Remote Access automation and quick tunnels for maintainers (details). EK Bridge Test's automation can turn Remote Access on, set the address, run Test and drive the guide, and sh scripts/live_test.sh quicktunnel start|stop|stop-all|status runs Cloudflare quick tunnels to the test copy's remote port only (never another port, never with ~/.cloudflared). Nothing changes in the released app.

Fixed

• Choosing another tunnel on a set-up Remote Access page went straight back to the tunnel in use, without showing its steps (the old Tunnel ▸ Change). Switch Tunnel… replaces it.
• Cloudflare Tunnel's commands and config.yml in the Remote Access guide used the host of the address already in use (for example a Tailscale …ts.net name). They now use the hostname you type in step 2.

Changed

• Address ▸ Edit… tests the new address through the tunnel before saving it (Paste and test · Save), with the same confirmation as Switch Tunnel…. Before, it saved first.
• The Remote Access page's Tunnel row moves up under Status and says whether the tunnel is running on this Mac: Running · on this Mac · forwards to 47616, Not running with the command to start it (with Copy), Wrong port, Not public (Tailscale Serve without Funnel), Not installed with where to get it, or Can't check on this Mac. It names the tunnel that answered the last test, then what the address looks like, then the tunnel you picked, so it can't disagree with the address. When a test fails and the check explains why, the Status row says so (Tailscale Funnel isn't running on this Mac.). Its button is now Switch Tunnel….

Install

Download EKBridge-0.11.0.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

6ddedb4fa35bf61231e04701695163120c569c0e46bbb0d9988bf5dbc5ec166c  EKBridge-0.11.0.dmg
6ddedb4fa35bf61231e04701695163120c569c0e46bbb0d9988bf5dbc5ec166c  EKBridge.dmg
a3010676e01e5be7d56b165eb001c427d38ff9c0af6b9a41e3c8174b397b6e6d  EKBridge-0.11.0.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.11.0.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.10.3

A small fix release for the Remote Access guide. Agents need no changes. The client registry stays at version 4, so going back to 0.10.2 works by installing its DMG over this one.

Fixed

• The Remote Access guide moves on as soon as you pick a tunnel and goes back when you click Back. Before, picking Tailscale Funnel (the preselected tunnel) or clicking Back on the second step left the page as it was until you opened another page and came back.

Install

Download EKBridge-0.10.3.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

356aa729c9706aeaae584645b44e4ea6ce452f2f2623010a59cfbd052be7afe1  EKBridge-0.10.3.dmg
356aa729c9706aeaae584645b44e4ea6ce452f2f2623010a59cfbd052be7afe1  EKBridge.dmg
04f25fd089def65c873b281f00cd08aad4f5143171d8acce096480b8e127aba9  EKBridge-0.10.3.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.10.3.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.10.2

A small release for how EK Bridge installs: opening the DMG now shows a window that says what to do. The app is unchanged. Agents need no changes. The client registry stays at version 4, so going back to 0.10.1 works by installing its DMG over this one.

Changed

• The DMG opens to a drag-to-install window: EK Bridge and the Applications folder side by side on a cream background, with a dotted arc from the app to Applications and Drag to Applications to install below, no toolbar or sidebar, and the app icon on the disk.

Install

Download EKBridge-0.10.2.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

98bd20acfb4a5e952420cdd6a0b7498fd4828ea8ec20eccb1950778da3d9ba17  EKBridge-0.10.2.dmg
98bd20acfb4a5e952420cdd6a0b7498fd4828ea8ec20eccb1950778da3d9ba17  EKBridge.dmg
adcacbeba267d67300050b094d28396fd713cad372a35dc672016b2b0d3ea106  EKBridge-0.10.2.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.10.2.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.10.1

A small fix release. The sidebar's Remote Access badge now says Off until Remote Access is turned on and has a tunnel address, so a Mac without a tunnel never shows On. Agents need no changes. The client registry stays at version 4, so going back to 0.10.0 works by installing its DMG over this one.

Fixed

• The sidebar shows Remote Access as On only when it's turned on and has a tunnel address, and Off otherwise; the menu bar's globe and Remote Access items follow the same rule. Before, turning it on in the guide's second step showed On before any tunnel was set up.
• The empty Activity page keeps its title and filters at the top, and the Connections + button lines up with the sidebar rows.

Install

Download EKBridge-0.10.1.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

a0eec2a5ed17428ec54f0ae1b668ff3eb892cb68497b8b3c0e7deb4972c860c4  EKBridge-0.10.1.dmg
a0eec2a5ed17428ec54f0ae1b668ff3eb892cb68497b8b3c0e7deb4972c860c4  EKBridge.dmg
748572d0ed110312deadbdf2cc5b970a72d95f38808f991e9a307e10296c42dd  EKBridge-0.10.1.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.10.1.dmg --repo bereciartua/ek-bridge checks the provenance of each download.

EK Bridge 0.10.0

A trust release. Activity says what each agent changed, by name (Moved “Design review”), looked up when you open it, with Show in Calendar; changes and problems are kept for 90 days. When an agent is refused only because it lacks one action on a calendar it can already read, EK Bridge asks you instead (Allow Once, Always Allow, Not Now). Notifications can tell you when a change wasn't made because nobody answered, Overview and the menu name the items that changed, and Codex and Gemini CLI get one-click setup next to their copyable setups. Agents need no changes; when you don't allow an access request, the forbidden message says so. Activity moves to its own file on the first launch. The client registry stays at version 4 with an empty Activity list, so going back to 0.9.0 or 0.8.x means installing its DMG over this one: connections, access and settings are kept, and that version starts a new Activity list, which 0.10 imports again later.

Added

• Activity says what changed: a Change column (Added event, Moved event, Completed) and an Item column with the event's or reminder's name, looked up in Calendar or Reminders when shown (only its ID is stored; a deleted one shows Deleted item). Rows are grouped under Today, Yesterday and dates, there's a Changes filter next to All and Problems, and the details below the table show the item with Show in Calendar / Show in Reminders. A refused move now says when it was the destination that lacked Create.
• Ask for access when refused: when an agent tries to add, change, complete or delete on a calendar or list it can already read but lacks that one action, EK Bridge asks you in the approval panel (Claude Code can't add reminders to Groceries) with Not Now, Allow Once and Always Allow, instead of refusing straight away. The answer counts as the approval for that change, so it fits in the agent's time limit. Writes only, never for calendars it can't read, at most once an hour per connection, calendar or list and action; each connection can turn it off (Let … ask for more access). Activity shows the answer, and the agent is told when you didn't allow it.
• Notifications (Settings ▸ General ▸ Notifications), opt-in by kind: a change that wasn't made because nobody answered (on), an agent that was refused without being able to ask (off, at most one per connection every 10 minutes), and an update (on, once per version). macOS asks for permission only when the first one is due or you turn one on. A notification about a change can include the item's title; EK Bridge never stores it.
• Overview's Today and the menu bar's Recent changes name the item: Moved “Design review” · Claude Code (looked up when shown; in the menu, only when it opens). Needs you and the menu list agents waiting for access, with Allow… bringing the panel forward.
• Add to Codex… and Add to Gemini CLI… on the Connect tab, next to the copyable setup: Codex's own codex mcp add (or, without it, the same table appended to ~/.codex/config.toml, never rewriting the file), and a merge into Gemini CLI's ~/.gemini/settings.json. A preview first, a backup, never the token.
• For a change you answered in the approval panel, Activity's details show what changed (When: 10:00–11:00 → 11:00–12:00) until EK Bridge quits. The panel's text is kept in memory only, never written.

Removed

• Overview's one-time notice about the rename from EventKit Bridge. Upgrading from 0.7.0 still moves everything over and brings the setup checklist back for macOS access; docs/SETUP.md has the steps.

Changed

• Activity has its own file, activity/activity.jsonl, instead of living inside the client registry. It keeps changes and problems for 90 days (up to 5,000) and other requests for 7 days (up to 2,000), instead of the last 500 rows in all. Each row now has a request ID, and changes keep the item's EventKit ID (never its title or content), so EK Bridge can look the item up when you open the row. Rows already in the registry move over at the first launch. The registry stays at version 4 with an empty Activity list, so rolling back to 0.8.2 or later still works.
• Each request no longer rewrites the client registry: Activity rows are appended instead.

Install

Download EKBridge-0.10.0.dmg (EKBridge.dmg is the same file, under a name that stays the same in every release), open it and drag the app to Applications. It needs macOS 14.0 or later, on Apple silicon or Intel. The first start asks for Calendar and Reminders access (Setup). Replacing an installed copy at the same path keeps its access, clients and agent setups. An installed copy offers this version from Check for Updates….

Checksums (SHA-256)

e7897c7c723228558bddc2807cf6a513947f0c5fbae20f9c44593d3b8561f76d  EKBridge-0.10.0.dmg
e7897c7c723228558bddc2807cf6a513947f0c5fbae20f9c44593d3b8561f76d  EKBridge.dmg
b75ca2fe2963a2620dc9faf2de6c6afe2aaf47e943253be1ed4b45f961c9a347  EKBridge-0.10.0.zip

The app and the disk image are signed with a Developer ID and notarized by Apple. Built by the release workflow: gh attestation verify EKBridge-0.10.0.dmg --repo bereciartua/ek-bridge checks the provenance of each download.