Cryoframe 1.2.0

Cloud-sync backups that actually verify and restore — with the right per-provider behavior.

Added

• Cloud provider awareness. Adding a cloud-sync destination detects the provider (OneDrive, Dropbox, Google Drive, Box, iCloud) and asks which plan you're on, so sealed archives split under that plan's single-file limit. These differ a lot — iCloud caps at 50 GB, Box at 5 GB on Free/Starter (50 GB Business, 150 GB Enterprise), the rest ~250 GB — or set a custom size. Detected cloud folders appear as one-click choices.
• Offloaded-archive handling. Cloud clients evict files to placeholders to save space, and reading one re-downloads it. A scheduled health check or restore drill now detects an offloaded cloud archive and skips it (reported as "not downloaded" — neither pass nor failure) instead of silently pulling gigabytes back down. Turn on Settings ▸ Archive health ▸ "Download cloud archives to check them" to verify them anyway. A restore always downloads what it needs.

Fixed

• A job whose only copies are offloaded placeholders no longer raises a false "no archives found — is the target connected?" alert.
• Cloud jobs created before this release also get the offloaded-archive handling.

Requires macOS 15. Apple-notarized.

Cryoframe 1.1.0

The 3-2-1 release: more copies, proven restores, and a way to find out when a backup breaks while you're away.

Added

• Multiple destinations per job. Write to more than one destination from the same snapshot — a local drive plus a NAS, an external plus a cloud-sync folder. The first is the primary; if a secondary is offline the run finishes as a partial backup rather than failing. Sealed archives are compressed once and copied to each destination (no recompression), and each copy is checksum-matched against the original.
• Remote alerts. A push to your phone or a chat channel when a backup fails, finishes partially, or an archive health check fails — even with the window closed. ntfy or a generic webhook (Slack/Discord/custom), with a Send test alert button. Fires independently of local notifications.
• Restore drills. A deeper check than a checksum re-hash: it reassembles, mounts or extracts, and reopens each archive (a database integrity check on Photos, Music, and other database libraries), proving the restore path itself works. Set the depth in Settings ▸ Archive health, or run one from a job's ⋯ menu.

Changed

• Storage and archive-health report per destination; Restore offers every destination a job writes to.

Fixed

• Resuming an interrupted transfer no longer deletes a build artifact another destination still needs.
• A single un-readable job no longer wipes the whole job list.
• Two destinations at the same folder collapse to one copy (with a warning) instead of a phantom second.
• Per-copy integrity check, launch-time scratch sweep, version-collision guard, and cross-job destination guard.

Requires macOS 15. Apple-notarized.

Cryoframe 1.0.1

A documentation and polish release.

Added

• A full user guide under docs/guide/ — setup, jobs, formats and destinations, encryption and recovery keys, versions and retention, health and verification, restoring, scheduling, and troubleshooting. In-app Help links to it.

Changed

• In-app Help brought up to date with 1.0: Browse contents opens an in-app file browser (not Finder), and Help now covers recovery keys, Verify all archives, archive-health scope, and deleting a single version.
• Smaller, non-wrapping window title so it no longer hyphenates to "Cry-oframe" on a narrow window.

Requires macOS 15. Apple-notarized.

Cryoframe 1.0.0

The 1.0 release: the archives now watch themselves, recover themselves, and update themselves.

Added

• Archive health monitoring — re-hash existing archives against their manifests on demand (job ⋯ menu) or on a weekly/monthly schedule, scoped to the latest version or all. Catches bit rot before a restore needs it; works on encrypted archives with no passphrase. "Verify all archives" checks every job at once.
• In-app updates over an Ed25519-signed appcast (Check for Updates, in the menu bar).
• Recovery-key escrow — export every archive passphrase into one master-password-encrypted file (PBKDF2 + AES-GCM) so encrypted backups survive a lost Mac (Settings ▸ Security).
• Restore in place — restore over the live library, staged and verified first, with the old copy moved to the Trash.
• Browse inside an archive — drill in and extract just the files you need, without restoring the whole library.
• Storage overview — per-job, per-version sizes against each volume's free space.
• Onboarding — a first-run walkthrough for the helper and Full Disk Access.

Fixed

• Backups to network shares and non-APFS volumes no longer false-fail the free-space preflight (a reported 0 is now read as "unknown," never "full").
• Mirror manifest no longer fails on directory-shaped artifacts (sparsebundles).
• Failed/cancelled runs no longer leave empty version folders that could occupy a retention slot.

Requires macOS 15. Apple-notarized; Gatekeeper will accept it.

Cryoframe 0.5.0

Closes the backup loop and hardens the archives. Signed with a Developer ID and notarized — opens with no Gatekeeper warnings.

Added

• Restore. A Restore window finds archives in a folder, verifies their checksums, mounts or extracts them, and copies the library back out with its original folder name — beside your live library, never over it. Handles split volumes and every format.
• Encryption. Optionally encrypt a job's archive with AES-256 (sealed DMG and live mirror). The passphrase is kept in your Keychain so scheduled runs encrypt without prompting; verify and restore unlock with it. Losing the passphrase means the backup is unrecoverable, by design.
• Versions & retention. Each run of a sealed job is saved as a dated version, so you can restore a point in time. Keep all versions, the last N, or a daily/weekly/monthly scheme — older versions are pruned automatically. (Live mirror stays a single, continuously-updated copy.)
• Notifications & menu bar. A menu-bar status item shows each job's last run at a glance and turns red on failure. Cryoframe stays resident there so it can notify you of scheduled-run results — never, on failure, or on every run — even with the window closed.

SHA-256 (Cryoframe-0.5.0.dmg): b2398b3d340c8ba6508c61cf2723912a16ee4b3f21c9a79e3dacfcf8a4638a01

Cryoframe 0.3.2

Signed with a Developer ID and notarized — opens with no Gatekeeper warnings.

Added

• Live throughput while a job runs: current speed, time elapsed, and estimated time remaining under the progress bar (smoothed for archives, cumulative for transfers).
• Persistent run history. Every run — manual or scheduled — is recorded with its outcome, per-library detail, duration, size, and any error, and survives quitting the app. A History button (top right) lists past runs, including scheduled ones that ran while the app was closed. Each job shows a last-run summary, and the activity log is seeded from recent history and narrates per library during a run.
• Mirror size is now a numeric field with a GB/TB unit picker (matching the resumable-transfer part size), in the New Job sheet and Settings.

Changed

• The job row shows which library is being processed during a multi-library run.

SHA-256 (Cryoframe-0.3.2.dmg): d55b68fbdad482c176f5a02d700eef687d1c638607848d4556c5d0e920976ed1

Cryoframe 0.3.1

Signed with a Developer ID and notarized — opens with no Gatekeeper warnings.

Added

• Keep the Mac awake while a backup runs (Settings ▸ General, on by default). Holds an idle-sleep assertion for the duration of a run so an unattended or scheduled backup isn't cut off when the Mac idle-sleeps. Prevents idle sleep only — it never forces the display on, and is released while a job is paused.
• Wake the Mac for scheduled backups (off by default). Asks the helper to set a system wake a couple of minutes before the next due job, so an idle Mac runs its scheduled backup near the intended time. It only ever manages its own wake event, can't wake a Mac that's shut down, and can't beat a closed lid.

Internal

• Removed the superseded BackupRunner/TargetedBackupRunner paths; all runs go through JobExecutor.

SHA-256 (Cryoframe-0.3.1.dmg): 8c9bd19ee389300e9fd0543e1c3065b7d68dac480f085185ba452ae5f2824cb7

Cryoframe 0.3.0

Signed with a Developer ID and notarized — opens with no Gatekeeper warnings.

Added

• Multiple libraries per job, archived from one APFS snapshot into their own subfolders (a consistent set in a single pass). Libraries are picked from one unified checklist.
• Resumable transfers to network shares and external drives: the archive ships in numbered part files (default 2 GB, configurable in GB or TB) and resumes from the last whole part after a dropped connection or unplugged drive.
• Concurrent jobs, bounded by a "maximum jobs running at once" setting (default 2); snapshot creation is serialized in the helper.
• Job controls — run, stop, pause/resume, edit, delete, enable/disable scheduling. Pause suspends the in-flight tool for live-mirror and sealed-zip archives and for transfers; sealed-DMG imaging can't be safely paused, so a DMG job shows only Stop while building.
• Live progress — a determinate bar with bytes/percent during archiving and part counts during transfers.

Changed

• Live mirror is now the default format, ahead of sealed zip and sealed DMG.
• After an app update the helper reloads itself on next launch, so helper fixes apply without a reboot.

Fixed

• Snapshot unmount retries and force-unmounts when the mount is briefly busy after a run, instead of failing with "Resource busy".

SHA-256 (Cryoframe-0.3.0.dmg): c4342a115efc06769eed69d93b485063f46daf7b8139b72eb8f92047bd86cf44

Cryoframe 0.2.0

[0.2.0] — 2026-06-24

Added

• Custom locations for built-in libraries, in Settings ▸ Libraries. Repoint a library kept somewhere other than its default path — an external drive, or a moved library — without losing its owning-app detection or integrity check. Each library has its own reset, plus a restore-all-defaults button. Jobs that target a built-in pick up the new path on their next run.

Docs

• Added app screenshots to the README.

[0.1.0] — 2026-06-24

Cryoframe 0.1.0

First public release.

macOS 15+ · Apple Silicon. Signed with a Developer ID and notarized, so it opens with no Gatekeeper warnings.

Install: download Cryoframe-0.1.0.dmg, open it, and drag Cryoframe to Applications. On first launch, enable the helper (approve in System Settings ▸ Login Items), grant Full Disk Access, then relaunch.

SHA-256 (Cryoframe-0.1.0.dmg):
7beb58c97f0f04d571d874e0aabade73beacaa05174ab41f33929d0e71b9fcdd