Install & Trust

Complete three trust checks after download.

Before the first launch, confirm Gatekeeper, ad-hoc signing, the SHA-256 checksum, the source, and the local data boundary in one pass. Vibelsland Free keeps the package, Release page, and source aligned around the same version.

Gatekeeper First-launch check
Signing ad-hoc
Data Local boundary

First launch

Use the macOS confirmation flow.

  1. 01 Move it to Applications

    Unzip Vibelsland-Free-0.1.0-macos.zip, drag >_ - island.app into Applications, then launch it from Applications.

  2. 02 Click Done on the block dialog

    If macOS says Apple cannot verify whether the app contains malware, click Done. Do not click Move to Trash. This dialog usually does not include the Open button.

  3. 03 Allow it in Privacy & Security

    Open System Settings → Privacy & Security. In the Security section, find the blocked >_ - island entry, click Open Anyway, then confirm with your password or Touch ID.

  4. 04 Open the app again

    Return to Applications and open the app again. When macOS asks one more time, choose Open. The confirmation is recorded on this Mac for future launches.

Signing meaning

ad-hoc signing is an intentional trust step.

v0.1.0 has no Developer ID notarization, so macOS asks you to confirm the source on first launch.

SHA-256 verification only confirms the package matches the GitHub Release asset; it does not prove developer identity. For this ad-hoc package, spctl may show rejected or not accepted, and that does not mean the checksum failed.

If Privacy & Security does not show Open Anyway, and you have confirmed the zip came from this page's GitHub Release, you can remove the browser download quarantine from Terminal:

Open install and status support
Local checks xattr -dr com.apple.quarantine "/Applications/>_ - island.app" open "/Applications/>_ - island.app" codesign --display --verbose=4 "/Applications/>_ - island.app" spctl --assess --type execute "/Applications/>_ - island.app"

SHA-256

Verify that the package has not been replaced.

Download the zip and its matching .sha256 file into the same folder, then run the checksum check. The value shown on the website, the GitHub Release checksum file, and your local result should match.

Open v0.1.0 Release
Current SHA-256 b8ae6ea245d4720c1c9389c2ce95a582df9005866fda3522279058eb40b40af5 cd ~/Downloads shasum -a 256 Vibelsland-Free-0.1.0-macos.zip shasum -a 256 -c Vibelsland-Free-0.1.0-macos.zip.sha256

Local permissions and data boundary

Enable only the local sources you need.

Read boundary

  • Reads local Claude Code, Codex CLI, and Codex Desktop state.
  • Creates no online account and uploads no telemetry.

Write boundary

  • App config is written to ~/Library/Application Support/VibelslandFree/config.json.
  • App logs are written to ~/Library/Logs/VibelslandFree/app.log.
  • Local connection runtime files live in ~/.vibelsland-free.

User control

  • Enable or disable Claude Code, Codex CLI, and Codex Desktop by source in Settings.
  • The app changes corresponding configuration only when you choose to install, repair, or uninstall local connections.
  • Before sharing logs, hide account details, private file paths, conversation content, and other sensitive information.