- Identity
- com.lockedinflow.app · bundle id · preferences domain · Keychain service · log subsystem
- Requirements
- Apple silicon · macOS 15 or later
- Entitlements
- 1 · audio input · hardened runtime
- Signing
- your Developer ID · notarized by you
- Models (system)
- /Library/Application Support/LockedIn Flow/Models
- Ownership
- root:wheel · directories 0755 · files 0644 · no ACLs · no symlinks
- Model files
- 39 · pinned by revision, size and SHA-256 · verified before load
- Model size
- ≈484 MB default · English Precision ≈614 MB more
- Microphone
- approved by each user on first recording
- Accessibility
- pre-approve with a PPPC profile for your signature · or Copy only
- Network
- none needed once models are installed · enforce with your egress rule
- User data
- ~/Library/Application Support/LockedIn Flow · what's kept is encrypted
- Settings
- per-user preferences · no dictated text
- Ships with
- SBOM.cdx.json · BUILD-PROVENANCE.txt
- Logs
- subsystem == "com.lockedinflow.app" · never contain dictated text
- Removal
- app · data folder · preferences domain · Keychain item · tccutil reset