Fixed
- Removed Keychain access from Long-Term Insights identity anonymization, preventing the macOS “access confidential information” prompt on launch.
- The anonymous installation salt now stays in a protected local Application Support file and is never uploaded.
- Salt updates are atomic, owner-only, excluded from backups, and storage failures are surfaced instead of silently changing identities.
A small number of command-line or background entries without bundle identifiers may begin a new anonymous identity after upgrading. Existing local history is not deleted.
Verification
- Passed 168 deterministic, non-privileged unit and integration tests.
- Signed and notarized for Apple silicon and Intel Macs running macOS 14 or later.
- App and DMG notarization were both accepted by Apple; the distribution passed Gatekeeper checks.
SHA-256: d258fb4c05164ff0a5a21a2583b6af2dfd40a387a11a38692ecc99fe494c3820