DefenseClawMac 1.1.30

DefenseClawMac 1.1.30 adds read-only OpenShell policy visibility and sandbox monitoring.

• Inspect effective and base policies, DefenseClaw setting sources, organization constraints, and policy revision history.
• Review observed network destinations alongside policy permissions.
• Filter sandbox and gateway logs by source, severity, decision, time, and text; pause monitoring and export redacted diagnostics.
• Clearly identify unavailable data, stale snapshots, and unverified enforcement state.

The unified DMG includes DefenseClaw runtime 1.0.1. The app-only ZIP is used by the in-app updater and preserves your installed runtime. Policy editing is not included.

Select a sandbox in Sandboxes to open its Overview, Policy, Network, and Activity & Logs tabs.

Built from merged PR #35 at 3c0724493a1c6934bcf0485cf8b40313410d9d20.

Validation: 43 standalone regression scripts, native and accessibility window regressions, 63 inspection checks including live reads, eight inspection screen fixtures, and the universal Debug build passed against published runtime 1.0.1 / OpenShell 0.1.3. Unreleased upstream-mainline comparison was blocked by source-download timeouts.

The app and installer use Developer ID signing, Apple notarization and stapling. The bundled runtime is authenticated against upstream release 1.0.1, source 00ef714b8a47f3ba90dad69b91dc8aa40c735057.

SHA-256 checksums:

ffed597ae07211d9d5b58cddcc8252196de875ec288dea7f039568ba35b30ad3  DefenseClawMac-1.1.30.zip
917ecbf32b6f6e2ae48bace0cdfd4f5fe4cb5006a1b0587881f9664daa3c6f27  DefenseClawMac-1.1.30.dmg

Fresh public downloads were verified against the build hashes and GitHub asset digests. The downloaded app and DMG passed signature, staple, Gatekeeper, helper, and complete runtime-payload checks. Public latest-release metadata selects version 1.1.30 and its app-only updater ZIP.

DefenseClawMac 1.1.29

Runtime upgrades from source installations

DefenseClawMac now offers Switch to Published Runtime… next to the available runtime version in Settings and in the runtime update banner. Confirm the switch to install the newer published runtime through the app while preserving your development checkout.

• Ordinary updates continue to preserve source installations and never downgrade equal or newer installed runtimes.
• The app verifies the target version and active launcher before changing its runtime selection.
• Progress remains active until runtime readers refresh. Errors and progress appear in Activity.

Downloads

• DefenseClawMac-1.1.29.zip — app update for existing installations; includes the administrator helper and preserves the installed runtime.
• DefenseClawMac-1.1.29.dmg — unified installer with the authenticated DefenseClaw runtime 1.0.1 payload for fresh installations.

Both downloads target Apple silicon and are Developer ID signed, Apple-notarized, and stapled.

Verification

Built from merged mainline 755cec0ca8cd77da0f086f0ca80d62320b9e9921 (PR #34). All 42 regression scripts, 11 native upgrade scenarios, the app build, and the release compatibility audit passed. Native switch tests use isolated fixtures; a live source migration and administrator gateway restart are not claimed. The runtime's authenticated source metadata reports 1.0.0 while published artifacts report 1.0.1; executable and installed-package contracts were verified.

Both packaged artifacts passed signature, stapling, Gatekeeper, administrator-helper, and strict unified-runtime verification before upload.

SHA-256

6a93957683a534ab49126f18f8c9302c58a339390e1a223a21b648ca44dc288c  DefenseClawMac-1.1.29.zip
e972cde112a82bb0236063f6186688c4858014e47033aab91041abfb4d7a6d8c  DefenseClawMac-1.1.29.dmg

Fresh GitHub downloads of both assets matched the build SHA-256 digests and GitHub asset digests. Signature, stapling, Gatekeeper, helper, and authenticated runtime payload verification passed again on the downloaded copies. GitHub serves v1.1.29 as the latest stable release.

DefenseClawMac 1.1.28

What changed

• Complete Sandbox setup: install OpenShell prerequisites, configure the gateway, build selected Claude Code/Codex images, and run Doctor from Setup. Each stage shows live progress and stops on failure. Installation, image builds, telemetry, and shell wrappers remain explicit choices.
• In-app runtime upgrades: choose Upgrade Runtime to run the runtime's authenticated built-in updater automatically, with progress in Activity and installed-version verification afterward. Conflicting commands and audit readers pause during replacement. Equal/newer and source-owned runtimes remain protected.
• Runtime 1.0.1 compatibility: updated sandbox feed restart detection and telemetry controls; removed retired cleanup guidance.

Downloads

• DefenseClawMac-1.1.28.zip — app-only update, used by the existing app's updater. Preserves the installed runtime.
• DefenseClawMac-1.1.28.dmg — unified installer carrying authenticated DefenseClaw 1.0.1 for fresh installations. Existing runtimes use the built-in upgrade flow.

Requires Apple silicon (arm64) and macOS 14 or later. OpenShell on macOS uses the experimental upstream MicroVM driver and requires Docker and Homebrew.

Verification and provenance

Merged through PR #33, commit 9ddf59a57e7834863e68f9780dacc208458d00dc, tag v1.1.28.

• 42 regression scripts and Debug build passed; 251 TUI registry entries and 24 setup catalog sections aligned.
• Sandbox native UI success and all three failure stages passed.
• Runtime upgrade fixtures covered success, failure, cancellation, unchanged/equal/newer versions, source ownership, concurrency and reader recovery.
• Real isolated fresh install of published runtime 1.0.1 passed for CLI, gateway, ACP and installer metadata; repeated installation refused.
• Runtime artifacts authenticated using their signed checksum bundle and dependency lock. Verified release source: 00ef714b8a47f3ba90dad69b91dc8aa40c735057. That tag's source project metadata still says 1.0.0; the published wheel and executables report 1.0.1.

Tests did not migrate the user's live runtime or reinstall their working OpenShell environment. Host-specific administrator authorization, Docker/Homebrew provisioning and live migration remain separate integration checks. Runtime upgrades from 0.x to 1.x migrate to schema 9 and start a new audit history, retaining the old database in the runtime rollback snapshot.

See release verification for detailed evidence and limits.

Signing and integrity

Signed with Developer ID Application: Keith OBrien (9R236BB67S). All three Apple notarization submissions were accepted and stapled; strict signatures, helper/payload integrity and Gatekeeper checks passed.

• App-only: 92ddce94-cd40-4544-a0ce-91e44fb3a228
• Unified app: eeee8cc0-b203-4b21-93a1-266aff373992
• DMG: 801d27ec-dc46-422e-bb4e-6e148ad671f8

SHA-256

4d22da0e7921f39f49cf3c5b1894dcc7b7f3378540d30939f83124b6ed8b7883  DefenseClawMac-1.1.28.zip
d464d95c3bc3517fa3b93d71687d98424da2a1c9cc9c4a7d1fe04080026855a0  DefenseClawMac-1.1.28.dmg

Fresh downloads from the published GitHub release matched both SHA-256 hashes. The downloaded ZIP and DMG passed repeated signature, stapled notarization, Gatekeeper, administrator-helper, and strict runtime payload verification. Version 1.1.28 is marked as the latest stable release for app update checks.

DefenseClawMac 1.1.27

DefenseClawMac 1.1.27 adds compatibility with the official DefenseClaw 1.0.0 runtime and its configuration schema 9.

Downloads

• DefenseClawMac-1.1.27.zip — signed app-only package and in-app updater asset. Preserves the installed runtime.
• DefenseClawMac-1.1.27.dmg — signed unified installer with the authenticated 1.0.0 CLI, gateway, ACP guard, dependency lock, and upgrade metadata for fresh installations.

Requires Apple silicon and macOS 14 or later. Both packages are Developer ID signed, Apple notarized, and stapled.

Changes

• Align all 251 TUI command entries, setup/configuration fields, and unified policy thresholds with runtime 1.0.
• Add canonical runtime alerts with agent/session attribution, IDE extension inventory, and stable agent identities.
• Show applied policy identity/profile and admission overrides separately from base configuration.
• Install all runtime components in one rollback-protected transaction; fix ACP version verification.
• Keep equal/newer and source-managed runtimes in place. Existing runtime upgrades use the runtime's updater while preserving the standalone Mac app.

Runtime upgrades

The runtime 1.0 upgrader migrates configuration to schema 9. It retains the old audit database in the rollback snapshot, starts new audit history, and defaults audit retention to seven days. Updating the Mac app alone does not perform that migration.

Verification

42 regression scripts, native inspector tests, all 16 panels and 23 setup forms in a disposable native host, and a real isolated fresh install. CLI, gateway and ACP reported 1.0.0; all 107 installed Python packages passed dependency validation. Repeated fresh installation was refused. External providers, live hooks, privileged sensors and real sandbox provisioning were not changed during verification.

Built from merged mainline 788c1c10b2b65cf0b864e52514e59c8baab51a0f, PR #32. Runtime source: 57698deb67c902e563ed10114a20dbab010f8922, authenticated through the upstream release signature.

Feature matrix, tests and screenshots

Fresh downloads of both published assets matched the build SHA-256 digests and passed strict signature, helper, stapling, Gatekeeper, and authenticated runtime-payload verification. GitHub’s latest-release endpoint reports v1.1.27 with both assets ready for download.

SHA-256

94331c2ad0147f64f3b551eba3f829348a4cad3bbe3f7ac9fc1e262d4ec9f2c1  DefenseClawMac-1.1.27.zip
7c33e8d3709e09a54320617ad9d38f26c358120ac33abc43aa4183fbaba571c2  DefenseClawMac-1.1.27.dmg

DefenseClawMac 1.1.26

DefenseClawMac 1.1.26 expands native coverage of the current DefenseClaw TUI and fixes runtime selection and MCP catalog loading.

• Adds Policies and Sandboxes panels, local model discovery details, ACP Guard setup, and advanced redaction controls.
• Aligns the command catalog with all 253 current TUI entries and updates canonical audit history reading.
• Uses the runtime selected by the default source-install launcher, preserving explicit and managed installation choices.
• Shows readable MCP entries and clear diagnostics when another discovery source is unreadable; actions remain disabled until discovery is complete.
• Preserves existing gateway lifecycle, administrator authorization, runtime upgrade safeguards, and newer installed runtimes.

Runtime compatibility: verified against DefenseClaw source commit 95159fdb849d265f31e31a0ef92eff5e40ebbee0 (runtime 1.0.0, schema 8). The unified DMG bundles the latest published runtime, 0.8.10. Newer runtime features require a compatible runtime; installing this app alone does not add them to 0.8.10. Existing newer and source-managed runtimes are retained.

Downloads: app-only update (ZIP), unified installer (DMG). The DMG includes the runtime installation payload. Both target Apple Silicon, are signed with Developer ID team 9R236BB67S, and passed Apple notarization, stapling, Gatekeeper, and strict app/helper/gateway signature checks.

Verification: full regression suite and Debug build, native fixture coverage of 16 panels and 23 wizard forms, inspector regression checks, and real-installation Policies/MCP loading checks. Live provider delivery, sandbox lifecycle, and clean-machine installation are not claimed as tested. See the verification report for the complete scope and limitations.

Source: PR #31, merged commit 216bec5be9b68ba103af3ebf18f6cc87e65f93e3.

Artifact verification

All runtime payload hashes match the verified manifest. Apple accepted the app-only, unified app, and DMG notarization submissions:

• App-only: 9a78884c-e92e-434a-89ac-db3ed80ab03d
• Unified app: 1b962554-948d-4fc3-9f8b-fd3fe52e4c5e
• DMG: 35fe4ec3-8c12-43bc-9a4c-9bc9cd840b8c

SHA-256:

966cf62500802352221a0ee27d4fa0f76912a1d0ccb6df5aa0aded38e12cad7a  DefenseClawMac-1.1.26.zip
0563b0a6b7fac73142f2b28d1586784679eefe4b1463b286361d9da65b537bde  DefenseClawMac-1.1.26.dmg

Fresh copies downloaded from the published GitHub release match both SHA-256 values above and independently passed strict app/helper/gateway signatures, notarization-ticket validation, Gatekeeper, DMG integrity, and all runtime payload hash checks. The GitHub latest-release endpoint reports v1.1.26, with a complete updater ZIP and digest.

DefenseClawMac 1.1.25

DefenseClawMac now starts the gateway automatically after successful setup and whenever the app opens, including after an app update.

• Enabled by default: the shared setting appears in first-run setup and Settings → Connection.
• Preserves your choices: a running gateway is left in place, an explicit opt-out is remembered, and a manual Stop is respected for the current app session.
• Consistent administrator mode: startup uses the existing macOS authorization flow and records its result in Activity. Failed or canceled setup cannot accidentally launch the gateway.
• Reliable relaunches: startup also runs when macOS restores the app minimized or hidden.

The app-only ZIP supports the built-in app updater and existing runtime installations. The unified DMG includes the authenticated DefenseClaw 0.8.10 payload for fresh runtime installation. Existing runtimes are preserved.

Both downloads are Developer ID signed and Apple notarized. Administrator approval and Full Disk Access remain subject to macOS permissions.

Changes: #27

SHA-256:

248eb2eba357416a4c995198faabc828af0773557ef3441d15cb9b2056ac9ff5  DefenseClawMac-1.1.25.zip
98462606cc6cce8801662c28fe5b0a74456c90ac0ffff3460bfe66d00a71b992  DefenseClawMac-1.1.25.dmg

DefenseClawMac 1.1.24

DefenseClawMac 1.1.24 replaces the nested native inspectors that triggered the reported macOS 27 window-constraint crash. Alerts, Audit, Logs, and Activity now use a shared inline detail pane. Selection, detail loading, Close Details, and Escape dismissal remain available. The detail pane is fixed at 320 points; its former 250–380-point resize control is intentionally removed.

Logs also keeps its scroll-follow flag outside view observation, avoiding unnecessary view updates during native row reuse. This is a scoped precaution, not a claim that Logs alone caused the crash.

Built from merged mainline commit 7aaaec81a7baf969071da7a50366810f3fb1d865, incorporating PR #26.

Verification

• All 35 headless test suites and an isolated Debug build passed. The opt-in GUI test ran separately; its default headless skip is not counted as a GUI pass.
• The optimized native regression reproduced the original exception as a control and passed the actual inline layout at 980 and 1180 points, with native/accessibility selection, asynchronous detail loading, close/resize cycles, and a 20-second observation period.
• The optimized full app passed a fresh-launch 20-selection/10-close-and-resize sequence across 980, 1180, and 1677 points. Populated Logs with approximately 5,556 rows passed six Logs-to-Alerts cycles. Audit and Activity command details passed at 980 points. Activity's mutation detail pane was not separately exercised.
• Compatibility review records 32 intentional app differences against DefenseClaw mainline f05a9d3cb115c18f2c7903590a82dadf8835f2ae (runtime 0.8.10, schema 8). The audit retains the known 76-file source difference in the deliberately preserved local runtime; identical version labels do not establish source parity.

The final Developer ID signed export passed the full alert selection/close/resize sequence, six populated Logs-to-Alerts cycles, Audit details, and Activity command details with Escape dismissal and reopening. The Activity command was the read-only defenseclaw version and completed with exit 0. A second fresh launch repeated all 20 alert selections and 10 close/resize cycles, followed by a 20-second observation period. Both signed-app runs completed without an observed constraint exception, crash, or hang.

Runtime preservation

Existing runtimes, including source installations, remain preserved. Older installed versions receive an upgrade prompt; equal or newer versions stay in place. Runtime upgrades use the built-in updater; this app update does not replace the installed gateway. The optional administrator helper continues to use the selected installed runtime after native authorization.

The linked investigation reports capture the pre-publication assessment; final signed-artifact results are recorded in this release.

Crash investigation and correction · Detailed verification

Downloads

• DefenseClawMac-1.1.24.zip — app only, including the administrator helper; use for the app updater or an existing runtime.
• DefenseClawMac-1.1.24.dmg — unified app with authenticated DefenseClaw 0.8.10 payload for fresh Apple Silicon runtime installations. Existing runtimes remain untouched. The published 0.8.10 payload predates the new Runtime monitoring planes; see the administrator guide for compatibility and permissions.

Both artifacts are Developer ID signed, notarized, and stapled. Strict app/helper/gateway signature checks, Gatekeeper checks, all six runtime manifest hashes, and authenticated runtime/source binding passed. The app-only ZIP was also verified after independent archive extraction. Independent fresh GitHub downloads passed all 34 verification checks: both SHA-256 values and sizes match the frozen build outputs; ZIP and DMG signatures, notarization tickets, Gatekeeper acceptance, helper layout, all six payload hashes, and authenticated runtime/source provenance passed. The public tag resolves to the merged source commit above. ZIP upload preceded DMG upload.

Artifact	SHA-256
DefenseClawMac-1.1.24.zip	1d9b3eb79cce010bef27d38ec8f30a6d7341231fe502ecdc4f48bacf58a9b0af
DefenseClawMac-1.1.24.dmg	0025f1d2e0c8d2708a4942528cfab8ff01709e1c2fd373c16d41ebcad4f1567e

DefenseClawMac 1.1.23

DefenseClawMac 1.1.23 adds native macOS administrator authorization for gateway Start, Stop, and Restart, and preserves the runtime already installed on your Mac. It also fixes the authorization handoff that previously reported an immediate denial after preauthorization.

Changes

• Enable Run gateway as administrator in Overview or Settings → Connection. macOS approves the signed background helper and requests administrator authorization for each operation. Passwords are handled by macOS.
• Administrator operations use a validated, private copy of your existing installed gateway, isolated to your macOS account. The app does not replace it with the runtime bundled for fresh installations. Use Restart Gateway as Administrator after updating the runtime.
• The app checks the latest published DefenseClaw release and prompts when the installed runtime is older. Equal or newer runtimes remain in place. Source-managed, custom, partial, and unknown installations remain protected from replacement; eligible release installations use the authenticated runtime updater.
• Runtime version detection ignores Go/Sonic warnings and refreshes release availability on launch. The command catalog now tracks 235 upstream entries, with Kiro setup shown only when supported by the selected runtime.

See the administrator setup guide for background-service approval and Full Disk Access. Full Disk Access is separate from administrator authorization.

Downloads and compatibility

• DefenseClawMac-1.1.23.zip — app only, including the signed administrator helper; suitable for the app updater and Macs with an existing runtime.
• DefenseClawMac-1.1.23.dmg — unified app with the authenticated, published DefenseClaw 0.8.10 payload for fresh Apple Silicon runtime installations.

The published 0.8.10 payload predates the new Runtime monitoring planes and support for an administrator gateway using operator-owned configuration. Those features require a compatible newer/source runtime. The app preserves existing runtimes, including source builds that carry the same version number. Fresh-install packaging rejects unsupported ACP-bearing payloads; runtime updates remain managed independently.

The Runtime panel displays risk findings above the reporting floor, not all observed processes or activity. Zero findings is possible while sensors are running. Read-only investigation of the installed source runtime also found missing HOME-default file-watch coverage and a static DNS-capture label when DNS capture was disabled. These runtime issues are documented in the verification report; this Mac app release does not modify the installed runtime to conceal them.

Verification

Built from merged mainline commit a324c1be664fd00d8c06000b6c0d765a625688cf, incorporating PR #23 and PR #24.

All 35 standalone test suites passed, including 110 administrator-helper security checks. Debug compilation and a clean signed Release archive passed, with script sandboxing enabled. A native-authorized restart was verified live: the gateway ran from the account-specific private copy, all three selected Runtime planes started, and the installed gateway digest was unchanged. Native cancellation has regression coverage but was not separately exercised in the live release check.

Compatibility was reviewed against upstream mainline f05a9d3cb115c18f2c7903590a82dadf8835f2ae, runtime 0.8.10, and schema 8. The full audit retains one failure because the intentionally preserved installed source runtime differs from current mainline in 76 contract files. Source parity is not claimed. The fresh-install payload has separately authenticated published source provenance bf45995c7fa691f34ffa89b6f0468c93a6207dea.

Both downloads are Developer ID signed and Apple-notarized. The app bundles and disk image are stapled. Local checks passed for Gatekeeper, strict app/helper signatures, updater ZIP extraction, and the unified runtime payload and its manifest digests. After publication, an independent verification freshly downloaded both GitHub assets and confirmed byte-for-byte SHA-256 matches. Both downloads passed signature, notarization/stapling, Gatekeeper, helper-layout, and strict unified-payload checks. All six payload manifest digests matched, and the helper was identical in both distributions.

Apple notarization accepted the app-only build (f679f699-e33a-4d9c-b23c-c359e7309011), unified app (8e5546fa-0443-4593-bb5d-e789d346b2ed), and disk image (237fdb2d-d7b4-4049-96d3-0901a4657781).

SHA-256:

03551061abb23261f58bb495036ddf432d8c7a0a10f8b7d1d41bf17c50f08dac  DefenseClawMac-1.1.23.zip
c04498fba3f19485dda09f5553ae0557072f27d574fdc171e37e585931f6036b  DefenseClawMac-1.1.23.dmg

DefenseClawMac 1.1.22

DefenseClawMac 1.1.22 preserves existing DefenseClaw runtimes during app installation, including custom and partial installations. Source/development runtimes are left unchanged so installing the Mac app cannot replace a forward development runtime with the bundled release. Existing release installations use the runtime updater for newer releases.

This release also adds the AI Runtime panel with capability-aware controls, aligns the command palette with 234 upstream entries, and improves canonical audit-event history with bounded reads and legacy fallback.

Built from commit bf6eae7486aefb22272ca34a80bf4358d2e077cd. The release tag points to that exact build commit; the corresponding mainline PR #22 was merged into main at 4a97544. The merged source tree exactly matches the published build.

Downloads:

• DefenseClawMac-1.1.22.zip — app only, for the in-app updater and Macs that already manage a DefenseClaw runtime.
• DefenseClawMac-1.1.22.dmg — unified app with the authenticated DefenseClaw 0.8.10 runtime payload for fresh installations. The bundled runtime is for Apple Silicon.

Both artifacts are Developer ID signed, Apple-notarized, stapled, and verified with Gatekeeper and strict signature/payload checks. The compatibility audit, all 32 standalone test scripts, and Debug build passed. Source compatibility was checked against DefenseClaw mainline 85029e57e9094debd9366a7d5a9f7e6d5c3ef6fc, runtime 0.8.10, and config schema 8. The bundled published runtime has authenticated source provenance bf45995c7fa691f34ffa89b6f0468c93a6207dea.

SHA-256:

531096054658058fe180d3a6f3deb97f379bb9ea5b01ad13b05fedaada6c4700  DefenseClawMac-1.1.22.zip
0c96ba3b4776d5092387388112c7c8c2a6d8fa1233940af7c01b3b1c6fd53386  DefenseClawMac-1.1.22.dmg

DefenseClawMac 1.1.21

DefenseClawMac 1.1.21 aligns the standalone Mac app with DefenseClaw runtime 0.8.10 and upstream mainline d4b9a01.

Highlights:

• Supports the Amp connector label.
• Retains checksum-verified runtime dependency-override provenance after a successful install.
• Prevents the catalog rebind path from waiting indefinitely on a missing child-process completion notification.

Both the app ZIP and unified runtime DMG are Developer ID signed, Apple-notarized, stapled, and verified before publication.