Distillation

Date: June 9, 2026

• 🟡 (11:46) Agent fetched BYK/fossilize GitHub repo page — confirmed: 20 stars, 1 fork, 1 watcher, 3 open issues, 0 pull requests, 10 releases (latest: 0.9.0, Jun 7, 2026), 55 commits on main branch, TypeScript 96.9% / JavaScript 3.1%
• 🟡 (11:46) fossilize repo src/ directory contents: bin/ (subdirectory), app.ts, archive-util.ts, context.ts, env-to-bool.ts, impl.ts, index.ts, node-util.ts, postject.d.ts, tsconfig.json
• 🟡 (11:46) fossilize repo root files: .github/workflows/, .vscode/, src/, test/, .craft.yml, .gitignore, .lore.md, AGENTS.md, CHANGELOG.md, README.md, entitlements.plist, import-meta-url.js, package-lock.json, package.json
• 🟡 (11:46) Agent fetched Apple Support page "Safely open apps on your Mac" (published May 27, 2026) — key details: Gatekeeper verifies Developer ID signature + notarization (required macOS Catalina+); notarization checks use encrypted connection resilient to server failures
• 🔴 (11:46) User quoted Apple Support page stating: "These security checks have never included the user's Apple Account or the identity of their device" and "we don't log IP addresses associated with Developer ID certificate checks"
• 🟡 (11:46) Apple Gatekeeper privacy details (from Apple Support, May 27, 2026): online checks verify known malware + whether developer signing cert is revoked; data never combined with Apple user info or device info; IP addresses not logged for Developer ID cert checks; notarization checks use encrypted connection
• 🟡 (11:46) Agent next step: examine fossilize source code (impl.ts likely contains signing logic) and research how other OSS projects handle macOS signing