PathKeep v0.1.0 Preview

PathKeep v0.1.0 Preview

This is the first PathKeep preview release. It is macOS-only for now and intended for tester use before Apple Developer ID signing, notarization, and updater signing are wired.

Download

• PathKeep_0.1.0_universal.dmg - macOS universal build for Apple Silicon and Intel Macs.
• SHA256SUMS.txt and RELEASE-MANIFEST.json are attached for checksum and artifact traceability.

macOS unsigned app install

This preview build is not signed with an Apple Developer ID and is not notarized. macOS Gatekeeper may block the app after download.

1. Download PathKeep_0.1.0_universal.dmg.
2. Open the DMG and drag PathKeep.app to /Applications.
3. Verify the download checksum if desired:

cd ~/Downloads
shasum -a 256 PathKeep_0.1.0_universal.dmg

Expected SHA-256:

7e24878eb9e344b7f93dc08fdcb4d90441a3af11aa1cf011ab1869500637e0b4  PathKeep_0.1.0_universal.dmg

4. Remove the quarantine attribute and open the app:

xattr -dr com.apple.quarantine /Applications/PathKeep.app
open /Applications/PathKeep.app

If you put the app somewhere else, replace /Applications/PathKeep.app with that path. If Finder still blocks launch, use right-click -> Open once, or check System Settings -> Privacy & Security.

Supported in this preview

• macOS archive, import, backup, audit, jobs, schedule, settings, and local security flows.
• Public browser-history support currently covers Google Chrome, Microsoft Edge / Edge Dev, Firefox history-only baseline, Safari on macOS after Full Disk Access, ChatGPT Atlas on macOS, and Perplexity Comet on macOS.
• Optional AI, semantic / hybrid search, vector sidecar, MCP / skill artifacts, and readable-content refetch are intentionally deferred from v0.1.0.

Security refresh

• Rust lockfile refreshed for the v0.1.0 draft after Dependabot review.
• openssl is now patched at 0.10.78.
• vulnerable rand versions were removed or updated to patched 0.8.6 / 0.9.4 paths.
• obsolete core2 and old rand 0.7 transitive paths were removed by the compatible Tauri/Wry/RMCP dependency refresh.
• GitHub Dependabot open alerts are currently clear. The remaining Linux GTK3 glib transitive alert was dismissed as tolerable risk because v0.1.0 ships macOS only and PathKeep app code does not use the affected API path.

Not yet supported

• Windows and Linux binaries are not attached to this draft.
• Windows testing still has known bugs, and my GitHub Actions monthly quota is currently exhausted, so Windows and Linux release builds were not run for this preview.
• Auto-update artifacts are not attached because updater signing is intentionally not configured for this unsigned preview.

Local validation

Built from commit 83876802.

• bun run verify passed locally.
• The macOS release app was rebuilt as a universal x86_64 + arm64 binary with updater artifacts disabled for this preview build.
• The DMG was mounted and inspected locally; the embedded app binary is universal.
• spctl rejects the app as expected because this build has no usable Developer ID signature.