Skip to content

DefenseClawMac 1.1.28

Choose a tag to compare

View all tags
@keitheobrien keitheobrien released this 13 Oct 20:02
· 8 commits to main since this release
v1.1.28
9ddf59a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What changed

  • Complete Sandbox setup: install OpenShell prerequisites, configure the gateway, build selected Claude Code/Codex images, and run Doctor from Setup. Each stage shows live progress and stops on failure. Installation, image builds, telemetry, and shell wrappers remain explicit choices.
  • In-app runtime upgrades: choose Upgrade Runtime to run the runtime's authenticated built-in updater automatically, with progress in Activity and installed-version verification afterward. Conflicting commands and audit readers pause during replacement. Equal/newer and source-owned runtimes remain protected.
  • Runtime 1.0.1 compatibility: updated sandbox feed restart detection and telemetry controls; removed retired cleanup guidance.

Downloads

  • DefenseClawMac-1.1.28.zip — app-only update, used by the existing app's updater. Preserves the installed runtime.
  • DefenseClawMac-1.1.28.dmg — unified installer carrying authenticated DefenseClaw 1.0.1 for fresh installations. Existing runtimes use the built-in upgrade flow.

Requires Apple silicon (arm64) and macOS 14 or later. OpenShell on macOS uses the experimental upstream MicroVM driver and requires Docker and Homebrew.

Verification and provenance

Merged through PR #33, commit 9ddf59a57e7834863e68f9780dacc208458d00dc, tag v1.1.28.

  • 42 regression scripts and Debug build passed; 251 TUI registry entries and 24 setup catalog sections aligned.
  • Sandbox native UI success and all three failure stages passed.
  • Runtime upgrade fixtures covered success, failure, cancellation, unchanged/equal/newer versions, source ownership, concurrency and reader recovery.
  • Real isolated fresh install of published runtime 1.0.1 passed for CLI, gateway, ACP and installer metadata; repeated installation refused.
  • Runtime artifacts authenticated using their signed checksum bundle and dependency lock. Verified release source: 00ef714b8a47f3ba90dad69b91dc8aa40c735057. That tag's source project metadata still says 1.0.0; the published wheel and executables report 1.0.1.

Tests did not migrate the user's live runtime or reinstall their working OpenShell environment. Host-specific administrator authorization, Docker/Homebrew provisioning and live migration remain separate integration checks. Runtime upgrades from 0.x to 1.x migrate to schema 9 and start a new audit history, retaining the old database in the runtime rollback snapshot.

See release verification for detailed evidence and limits.

Signing and integrity

Signed with Developer ID Application: Keith OBrien (9R236BB67S). All three Apple notarization submissions were accepted and stapled; strict signatures, helper/payload integrity and Gatekeeper checks passed.

  • App-only: 92ddce94-cd40-4544-a0ce-91e44fb3a228
  • Unified app: eeee8cc0-b203-4b21-93a1-266aff373992
  • DMG: 801d27ec-dc46-422e-bb4e-6e148ad671f8

SHA-256

4d22da0e7921f39f49cf3c5b1894dcc7b7f3378540d30939f83124b6ed8b7883  DefenseClawMac-1.1.28.zip
d464d95c3bc3517fa3b93d71687d98424da2a1c9cc9c4a7d1fe04080026855a0  DefenseClawMac-1.1.28.dmg

Fresh downloads from the published GitHub release matched both SHA-256 hashes. The downloaded ZIP and DMG passed repeated signature, stapled notarization, Gatekeeper, administrator-helper, and strict runtime payload verification. Version 1.1.28 is marked as the latest stable release for app update checks.

Assets 4
Loading