Before you install
The build targets macOS on Apple Silicon and is unsigned (ad-hoc), so Gatekeeper quarantines it on first launch and reports it as damaged. It is not damaged; macOS is saying it does not recognise the signer.
Drag OpenMake.app to /Applications first, then clear the quarantine attribute once. After that it opens normally.
xattr -dr com.apple.quarantine /Applications/OpenMake.app
Connect a local folder
Choose a folder from the desktop local-work menu. The app shows which folder is connected without sending its full path to the server, and agent tasks can then request work through the bridge — with a composer toggle and a task-list badge marking runs that execute locally.
- Access is scoped by a fixed RPC allowlist and realpath checks, so symlinks cannot walk out of the folder
- Clearly dangerous commands are denied immediately
- Every remaining shell command requires user confirmation that cannot be bypassed
- sandbox-exec blocks writes outside the connected folder and reads from secret paths
Verified updates
The updater accepts only HTTPS or loopback origins, reads a server-side manifest, and verifies the SHA-256 of the download before it replaces the running application.
OpenMake