## Summary - Homebrew formula installs **prebuilt** daemon + UI release archives; `bump-formula.sh` hashes the same URLs brew fetches - OSS hardening: `PRIVACY.md`, tighter `SECURITY.md`, Unix socket/dir `0600`/`0700` - Version bump to **0.1.0**; README/INSTALL honesty (HID after Jul 22); Linux aarch64 gated in release installer - UI: Simulator/Detected/Demo chip honesty; Cursor/T3 marked scaffold-only - Tracking: GitHub milestones Phase A/B (#19–#30) — Linear MCP unavailable; see `docs/project-tracking.md` Closes #19, #21, #22, #23, #25, #26 (partially #20/#24 remain for tag smoke + action bridge). ## Test plan - [ ] CI green - [ ] Make repo public after merge - [ ] Tag `v0.1.0` and babysit Release (signed DMGs) - [ ] Merge formula bump PR (fills sha256) - [ ] Anonymous `brew tap` / `brew install` smoke Made with [Cursor](https://cursor.com)  ## Summary by CodeRabbit * **New Features** * Added privacy documentation describing local-only operation, data storage, and network behavior. * Homebrew installation now uses prebuilt release binaries and includes the menu bar app. * Improved connection-status messaging for simulator, detected-device, and disconnected states. * Added stronger local socket security protections. * **Documentation** * Updated release, installation, security, architecture, and contribution guidance for version 0.1.0. * Clarified hardware LED and key behavior and documented project tracking. * **Bug Fixes** * Linux ARM64 release installation now exits with a clear unsupported-platform message.

OSS hardening (PRIVACY, SECURITY, socket 0600) #23

Description

Activity

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions