Repository navigation
Releases: jamalbalya/jamal-tools
Release list
Recension v1.0.0
Recension™ v1.0.0
Compare text, code, PDFs, Word documents, images, spreadsheets and folders —
with the comparison running on your own machine.
Free for any use, including commercial and client work. No account, no
trial, no feature held back pending payment.
Install
Web
Nothing to install: https://recension.pages.dev
The engine is WebAssembly and runs in your browser. Your documents are not
uploaded.
Desktop
Download from https://github.com/jamalbalya/jamal-tools/releases — or use
the buttons at https://recension.pages.dev/download
| Platform | File |
|---|---|
| macOS (Intel + Apple Silicon) | Recension_1.0.0_universal.dmg |
| Windows | Recension_1.0.0_x64-setup.exe |
| Debian / Ubuntu | Recension_1.0.0_amd64.deb |
| Fedora / RHEL | Recension-1.0.0-1.x86_64.rpm |
| Any Linux | Recension_1.0.0_amd64.AppImage |
SHA256SUMS is attached. Verify with sha256sum -c SHA256SUMS.
Why binaries live in another repository. Recension's source is proprietary
and its repository is private, which makes its GitHub Releases private too —
the assets would upload and then return 404 to everyone but the author.
jamalbalya/jamal-tools is a public repository that exists to distribute the
compiled artifacts. The source is not there either; only the binaries are.
The installers are unsigned — read this before you download
There is no Apple Developer ID and no Windows code-signing certificate, because
both cost money and this project runs at zero cost. That is a deliberate
decision, not an oversight, and it has consequences you will meet immediately:
macOS. Gatekeeper will refuse to open it. Since Sequoia the Control-click
bypass is gone, so: System Settings → Privacy & Security, scroll to the
message about Recension, and click Open Anyway, then authenticate.
Windows. SmartScreen shows "Windows protected your PC" with Don't run
as the default button. Click More info → Run anyway. If Smart App Control
is enabled it will block the installer outright, and there is no override.
Linux. Unaffected. Nothing about .deb, .rpm or .AppImage requires
signing.
Verify the SHA-256 against SHA256SUMS if you want assurance the download is
what was built.
What it does
- Text, code, PDF, Word, images, spreadsheets, folders
- Line, word and character precision; move detection; merge with accept/reject
- Side-by-side, unified and JSON views
- Command palette (
⌘K), syntax highlighting, PDF and PNG export - Performance HUD showing parse, diff and render timings
- Desktop: works fully offline, with the network cable unplugged
Your documents stay on your device
The comparison engine runs client-side — WebAssembly in the browser, natively in
the desktop app. Nothing is uploaded.
This is enforced rather than promised. A destination allowlist is compiled into
the binary and refuses everything not on it, and a test runs the desktop build
behind an intercepting proxy and fails the build on any request outside that
list. The desktop app was observed opening zero outbound connections during
a normal session.
Documents leave your machine only when you send them somewhere yourself: to your
own iManage tenant, or to an AI provider you configured with your own key.
Telemetry
Off until you choose. The first run shows what is sent, what is never sent,
and where it goes, with equal weight given to declining. In the EU, EEA and UK
nothing is sent unless you opt in. Declining costs no functionality, and the
toggle stays in Preferences.
Full detail: https://recension.pages.dev/privacy
Known limitations in v1.0
SAML SSO and SCIM return 503 until configured
The SSO and SCIM provisioning endpoints are implemented and tested but not
configured in this deployment, so they answer 503. They exist for operators
running their own instance; nothing in the public product uses them.
This is deliberate for v1.0. Configuring them requires an identity provider,
and until one exists a 503 is honest — the alternative would be endpoints that
appear to work and fail at the assertion.
- Setup guides, for Okta and Microsoft Entra ID, are in
docs/spec-kit/09-integration-saml-sso.md§9.5–9.7. They cover the exact
fields each IdP asks for, the group-claim traps in both, and the environment
variables to set. - Until SSO is configured, operators authenticate with a session minted
fromADMIN_SESSION_SECRET. That is a deployment secret, not a user account. - One interop note: Recension requires exactly one
<Signature>element,
so the "sign response and assertion" option is refused. Standard Okta and
Entra configurations work; the guides name the setting. Dual-signature support
is a v1.1 workstream (OQ-14) gated on a seven-case signature-wrapping test
matrix.
Not open source
Recension is free to use and proprietary. Use it anywhere, including
commercially; you may not redistribute or resell it, and the source is not
published.
Free to use and free to copy were once treated as one decision. They are two,
and only the first is a promise to you.
If this project goes unmaintained for 24 consecutive months, the source is
released under the MIT licence. That commitment is in the licence itself.
Under the hood
One Rust engine, compiled to both WebAssembly and native, with a test asserting
the two produce byte-identical output. A diff that differed between the web
and desktop versions of the same tool is the kind of bug you find out about from
a user.
Correctness is a fixture suite rather than a claim: every reported wrong answer
becomes a permanent case that every later release is checked against.
Links
| App | https://recension.pages.dev |
| Privacy | https://recension.pages.dev/privacy |
| Terms of use | https://recension.pages.dev/LICENSE |
| Third-party licences | https://recension.pages.dev/licenses |
Changelog — v1.0.0
The first public release. Everything below shipped between project start and
this tag.
Engine and correctness
- One Rust core compiled to
wasm32and native, with byte-identical output
asserted byTC-PARITY-01 - Text, document, image and spreadsheet engines; folder and batch comparison
- Line/word/character precision, move detection, whitespace and case rules
- Golden-fixture and property suites as the correctness contract
- 10,000-line diff under 500 ms (
NFR-PERF-01)
Interface
- Side-by-side, unified and JSON views; compare-and-merge with per-side accept
- Command palette, syntax highlighting for 20+ languages, Performance HUD
- PDF and PNG export written from scratch, deterministic output
- WCAG 2.2 AA, contrast measured against composited backgrounds
- Responsive to phone widths in both orientations
Desktop
- macOS, Windows and Linux installers built on native runners
- Fully offline; zero outbound connections observed in normal use
- First-run disclosure combining the licence summary and the telemetry choice
TC-DESK-SYNCguarantees the desktop ships the same interface as the web app
Privacy and telemetry
- Closed-enum telemetry payload with no free-form string field
- Compile-time egress allowlist, default-deny, exact host matching
- Raw IP addresses capped at 72 hours by a database trigger; the web ingest
never reads one at all - Telemetry over TLS with certificate verification against the OS trust store
Operator tooling
- SAML SP with nine validation rules and a permanent signature-wrapping test
- SCIM 2.0 provisioning with roles from a single shared map
- Role-based access with mandatory 2FA enforced by a database constraint
- Privacy-safe analytics with a live free-tier capacity view
Sustainability
- Free-tier governor degrading in tiers before any quota is exhausted;
comparison and encrypted sharing are never degraded - Analytics storage capped at 300 MB and enforced by the database
- Zero infrastructure cost by design
Built by Jamal Balya.
Recension™ is an unregistered trademark.
Jemz Cleaner 1.3.0
System cleaning and optimization for macOS and Windows. Runs entirely on your
machine — the engine links no HTTP client and the shipped configuration names
no remote host.
| Platform | Download |
|---|---|
| macOS 11+ | .dmg — universal, Intel and Apple Silicon |
| Windows | -setup.exe — per-user or per-machine |
First launch will warn. The macOS build is ad-hoc signed and not notarized;
the Windows installer is unsigned. That is a property of this build, not of the
download.
- macOS: right-click the app → Open → confirm.
- Windows: SmartScreen → More info → Run anyway.
Removals go to a Quarantine Vault and can be undone; nothing is deleted
outright.
Jemz Cleaner 1.2.0
System cleaning and optimization for macOS and Windows. Runs entirely on your
machine — the engine links no HTTP client and the shipped configuration names
no remote host.
| Platform | Download |
|---|---|
| macOS 11+ | .dmg — universal, Intel and Apple Silicon |
| Windows | -setup.exe — per-user or per-machine |
First launch will warn. The macOS build is ad-hoc signed and not notarized;
the Windows installer is unsigned. That is a property of this build, not of the
download.
- macOS: right-click the app → Open → confirm.
- Windows: SmartScreen → More info → Run anyway.
Removals go to a Quarantine Vault and can be undone; nothing is deleted
outright.