Vault Bridge v0.1.0 — public preview

Vault Bridge v0.1.0

Vault Bridge connects a private Obsidian-compatible vault to ChatGPT through a
self-hosted, read-only MCP runtime. The Mac remains the only reader of the
canonical vault; a replaceable snapshot is published over SSH to an isolated
Docker project, and the MCP reaches OpenAI through an outbound-only Secure MCP
Tunnel.

Highlights

• One macOS application for vault, server, OpenAI, sync, and activity status.
• Agent-first setup: copy one prompt into Codex instead of following a terminal
  tutorial.
• Exactly two ChatGPT tools: search and fetch.
• No vault writes, deletes, arbitrary paths, shell, raw SQL, public server
  ports, or server-to-Mac control channel.
• Startup and five-minute synchronization with atomic last-known-good
  snapshots and persistent aggregate change history.
• Exact SSH host identity pinning, encrypted local secret storage, hardened
  Electron packaging, and resource-bounded containers.

Install

The supported preview path is
Install with Codex.
The agent follows the versioned runbook and pauses only for account consent,
the restricted OpenAI tunnel key, the first SSH fingerprint, and any action
outside the read-only contract.

The attached DMG and ZIP are Apple Silicon preview artifacts for inspection
and testing. Both are ad-hoc signed and integrity-checked, but they are not
Developer ID signed or Apple notarized. Do not bypass macOS security warnings
to run a download you do not trust.

Verification

• Repository lint, type checking, tests, build, Compose contracts, and release
  hygiene pass.
• The macOS application, DMG, ZIP, locked Electron fuses, and artifact manifest
  are verified locally.
• The release manifest records exact SHA-256 digests and byte counts.
• A real owner-controlled deployment has been observed healthy with no
  published host ports and a working read-only ChatGPT connection. This is a
  deployment observation, not a guarantee about every VPS, account, or client.

Known limitations

• macOS Apple Silicon only for the downloadable preview.
• The desktop application must be running for new local vault changes to be
  scanned and published; ChatGPT can continue using the last healthy server
  snapshot while the Mac is offline.
• Phone-to-Mac freshness belongs to iCloud or the owner's chosen Obsidian sync
  provider.
• Secure MCP Tunnel supports private connections and developer-mode testing;
  it is not a public ChatGPT catalog listing.
• Vault write-back is intentionally absent from v0.1.0.

See the
changelog,
threat model, and
public roadmap.