Declarative macOS defaults with drift detection - #57

Open

nonrational wants to merge 30 commits into

mainfrom

macos-defaults-declarative

Commits on Aug 25, 2026

Design: declarative macOS defaults with drift detection

nonrational
and
claude
committed
ba7cc77
Plan: implement declarative macOS defaults

nonrational
and
claude
committed
2cfbc24
Add macos-defaults table parser and check mode
nonrational
committed
440f1a1
Add audit mode to macos-defaults
nonrational
committed
d4bde1f
Add apply mode to macos-defaults
nonrational
committed
182bd85
Add accept mode to macos-defaults
nonrational
committed
8469019
Guard accept against noaudit=tcc and noaudit=complex rows
nonrational
committed
ae36e04
Correct the defaults-write count from 217 to 218

nonrational
and
claude
committed
5d36c0b
Generate the macos-defaults table from .macos
nonrational
committed
996e866
Correct the tcc/unset split from 40/9 to 44/5

nonrational
and
claude
committed
3ff2b60

Commits on Aug 26, 2026

Keep ${HOME} as a literal token through macos-defaults instead of a live path
nonrational
committed
cde89bb
Record two type drifts the design probe could not see

nonrational
and
claude
committed
9ab04af
Expand the ${HOME} token in run_accept's own drift comparison too
nonrational
committed
50e2b5f
Make apply resolve a type drift that audit reports
nonrational
committed
d553a9c
Seed macos-defaults from the live machine
nonrational
committed
09155a4
Audit noaudit=tcc and noaudit=unset rows when they read
nonrational
committed
a08e78d
Reclassify five rows after the tcc/unset audit change
nonrational
committed
262a0c2
Let accept resolve a readable noaudit=tcc row, not just audit it
nonrational
committed
11e9a03
Fold the Full Disk Access prerequisite into Task 7

nonrational
and
claude
committed
b645d08
Canonicalize bool values to true/false on accept and generation
nonrational
committed
2d65663
Retire the defaults section of .macos

nonrational
and
claude
committed
abfa013
Apply the pre-merge fix wave to macos-defaults
nonrational
committed
19edc1f

Commits on Aug 29, 2026

Scope duplicate-row detection to condition, count condition skips in audit summary
nonrational
committed
4ed11e8

Commits on Aug 30, 2026

Merge remote-tracking branch 'origin/main' into macos-defaults-declarative
nonrational
committed
ff562d4

Commits on Sep 25, 2026

Merge remote-tracking branch 'origin/main' into macos-defaults-declarative

nonrational
and
claude
committed
00c795b
Merge remote-tracking branch 'origin/main' into macos-defaults-declarative

nonrational
and
claude
committed
fe1ad9c
mouse accel 3
nonrational
committed
5fe59b4
Move .macos to scripts/macos-bootstrap.sh and drop its dead steps

nonrational
and
claude
committed
d608641
Retire the macos-defaults rows macOS 26 no longer reads

nonrational
and
claude
committed
d8c989e

Commits on Sep 26, 2026

Merge remote-tracking branch 'origin/main' into macos-defaults-declarative
nonrational
committed
3f7f884