Security

How to verify a download is legitimate, and how to report a vulnerability.

Verify your download

There's no build available to download yet, so there's no checksum to verify. Once a real macOS build ships, its SHA256 checksum will be published on the Download page, and this page will show the exact command to verify it.

Gatekeeper warnings

Early PortableRAG builds are not notarized by Apple, so macOS will warn that the app is from an unidentified developer when one becomes available. That's expected for an early access build — signed, notarized builds are planned before a wider public launch.