Veilpath 1.1.0 Preview

Veilpath 1.1.0 (build 2) is an experimental security-research preview for iPhone and iPad. It uses operation-scoped access with automatic selection between worse_query and bad_query.

Included features

• Application-name recognition with verified container and bundle-identifier matching.
• Read-only App Storage scanning, size breakdowns, sorting, and explicit partial-scan results.
• Recoverable cache cleaning: verified compressed backups before changing Caches; temporary files are opt-in.
• Backup Center for full App and cache recovery archives, validated import/export, and restore with a fresh safety backup.
• Existing guarded editing, Version Vault, source-stability checks, and recovery protections.
• Native adaptive iPhone/iPad UI with English and Simplified Chinese.

Download and installation

Veilpath-1.1.0-2-resign.ipa is for re-signing with AltStore Classic, SideStore, or Sideloadly. It includes the requested App Group entitlement and no embedded developer provisioning profile. It cannot be installed directly on an unmodified device without a valid signature and provisioning profile. These installers have not each been validated with Veilpath; installation alone does not prove sandbox access works. Run Settings → Diagnostics after installing.

The development-signed testing IPA is not included in these public assets. It is restricted to provisioned devices and embeds device identifiers in its profile; keep that testing package private.

Preserve the App Group capability. Veilpath supports AltStore's team-suffixed ALTAppGroups mapping for its own group only. Do not change your signing account, bundle ID, or installation channel without first exporting retained backups. Close a target app before cleaning or restoring its data. Recovery backups consume space and do not expire automatically.

TrollStore's official supported OS range does not overlap Veilpath's iOS 26 minimum. AltStore PAL is a separate notarized marketplace distribution route, not a way to install this IPA directly.

Validation and compatibility

• Release iPhoneOS/arm64 archives; IPA CRC, code-signature structure, and App Group entitlement checks passed.
• The development export was unpacked and installed on iPhone 11, iOS 26.0.1 (23A355): schema 23, 23 passed, 3 unsupported, 0 failed.
• The three unsupported checks concern OS capabilities, not test failures. Writes in regression tests use Veilpath-owned disposable fixtures; other apps are scanned read-only.
• Simulator compilation and standalone backend/App Group mapping and workspace-recovery tests passed. Earlier simulator local-fixture regression passed 16 checks.
• Existing bad_query device validation covers iOS/iPadOS 26 through 27 beta 3. worse_query and the new app-management flows have physical-device validation on iOS 26.0.1 only; this release does not broaden those claims.

Build records and SHA-256 checksums accompany the packages. The source archive corresponds to commit 4e171e65d45f2da80789032b7061dc9785b8d89b.

Licensing status

This is described as source-available security-research software, not as a wholly open-source release. The bad_query-derived files have an unresolved upstream redistribution/license boundary. worse_query-derived files retain GPL-3.0-or-later notices and their license. Veilpath's remaining original code has not been assigned a separate license. See the included LICENSING.md and corresponding source for the exact status; publishing these materials does not constitute a new license grant from upstream authors.

---

本次为实验预发布。包含应用名称识别、只读空间扫描、先备份后清理缓存，以及集中备份、导入、导出和恢复。默认仅清理 Caches，临时文件需要单独选择；不完整扫描不会启用清理。

普通用户请选择 resign.ipa，使用侧载工具重新签名，并保留 App Group 权限。AltStore Classic、SideStore、Sideloadly 尚未逐一完成 Veilpath 真机渠道验证。安装后请运行“设置 → 诊断”；清理或恢复前先关闭目标应用。巨魔官方兼容系统与本项目最低 iOS 26 无交集。

开发签名 Release 导出包已在 iPhone 11 / iOS 26.0.1 真机通过 23 项检查，3 项系统能力不支持，0 失败。测试写入仅使用 Veilpath 自己的临时数据。备份会占用存储空间且不自动过期。许可现状详见附件及源码内的 LICENSING.md。