Verity - Know what changed on your Mac.

Verity started with an incident on my own Mac.

It was under unusually heavy load, and I found a lot of `find` processes searching for

credentials. I disconnected it, then discovered

• an executable called download in /usr/local/bin

• and commands to run it added to my .zshrc and .bashrc.

I suspect an npm package, but I still don't know for sure. I had to search for those

changes myself before I could understand how it was being launched.

That was me typing every command. Today a growing share of what lands on a dev Mac was

never typed by a human: an agent runs brew install, npm i -g, curl … | sh while

you're reading the diff. The install is a line in a transcript you skim.

So I built the tool I wish I'd had running:

-Watch the sensitive places: shell startup files, SSH configuration,

LaunchAgents/Daemons, /usr/local/bin and /opt/homebrew/bin, which is exactly where

an agent's installs land.

- Every change, explained: a severity from 0–100, the reasons behind it, the file

changes, and the possible process chain when attribution is available.

- Bring a version back: eligible file contents are kept in an AES-256 encrypted vault,

key in your macOS Keychain. You see the shell profile diff line by line, and can restore it.

- Optional Protect: asks before selected new or changed executables in your monitored

folders run: Block, Allow Once, or Always Trust.

What it isn't: an antivirus, and not a sandbox for your agent. It records a baseline and shows you what changed from there; severity helps you prioritize a review, it's not a malware probability.

To be precise about the limit: a malicious npm `postinstall` running under `node` isn't an execution Verity can gate — but the binary it drops in a watched folder, the line it appends to your .zshrc, and the LaunchAgent it writes are all changes you'll see.

Monitoring data and the vault stay on your Mac, and there's no telemetry.

Native macOS 15+, Apple silicon & Intel, signed and notarized. 7-day free trial, no card; then a one-time $39 for one Mac ($69 for three) as an early-adopter price for the first 100 of each, $49 / $89 after that.

I'd love your feedback, especially on which folders you'd want watched next, the per-user

bin directories (~/.local/bin, ~/.cargo/bin, ~/go/bin) are top of my list.

Thanks for checking it out! 🙏

Love the idea!

We tends to let AI do so much things without worrying and knowing what it does.
Will definitely try it

Good luck for the launch!

What led you to build that tool?