Skip to content

Sandbox Lens v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Oct 08:23
· 8 commits to main since this release
v0.1.0
cda4f4c

Sandbox Lens v0.1.0

Released October 4, 2026.

The first public release provides a native, read-only macOS interface for comparing readable .sb sandbox profiles with build-specific references.

Highlights

  • Exact path and SHA-256 comparison with Match, Different, Missing, and Additional results.
  • One-click standard system scan plus copied-folder scanning.
  • 22 sourced macOS snapshots containing 5,342 derived profile records.
  • Plain-language interpretation alongside technical paths, hashes, provenance, and broad static markers.
  • Universal Apple Silicon and Intel application archive.
  • Local-only operation with no profile execution, mutation, upload, or telemetry.

Verified for this release

  • 21 Swift tests and 2 Python generator tests pass.
  • The universal archive contains arm64 and x86_64 slices.
  • The staged and re-extracted apps pass strict code-signature verification.
  • A real exact-build scan on macOS 27.0 (26A428) read 610 profiles and classified all 610 as matches.

Distribution note

This build is ad-hoc signed with Hardened Runtime. It is not Developer ID signed or notarized, so Gatekeeper may require the one-time Control-click Open flow. Verify the accompanying SHA256SUMS.txt before opening it. See Signing and distribution.

Important limitations

Baseline coverage is incomplete, and static profile text cannot establish runtime use or compromise. A non-match is a review finding, not a malware verdict. Match the exact macOS product version and build before interpreting a difference.

The publication workflow adds the generated archive's exact SHA-256 value to these notes. The same value is provided in the attached SHA256SUMS.txt file.

SHA-256

185b789eca538cb1cc131fb4dfe1a2b8cdb70949c22ac7e5082f7ffd8a65c96c  Sandbox-Lens-v0.1.0-macOS-universal.zip
Assets 4
Loading