Report vulnerabilities privately through GitHub private reporting. Include affected version, reproduction and impact; omit credentials and private filesystem/network reports. Orven 3.0 is the current development/release line. Older Toolbox binaries remain historical downloads.
Orven 3.0.0 is an explicitly authorized ad-hoc-signed, unnotarized release. Verify the SHA-256 from the same published release before installing. Structural codesign verification does not establish Developer ID trust or notarization. macOS may require Open Anyway after the blocked first launch; do not disable Gatekeeper or strip quarantine. No Homebrew distribution is claimed.
No privileged helper, automatic cleanup, credential collection or malware verdict. Explicit network probes are bounded direct-argument helpers, without shell evaluation; user-entered hosts reject URLs/options/credentials. Pending operations cancel only owned processes. Process actions revalidate PID/start identity. Priority lowering is manual, not a hard CPU cap or automatic suspension.
Eligible file mutations require foreground review, canonical-path/identity revalidation and recovery evidence. Trash is used where supported. Restore refuses to overwrite existing paths; package receipts/registrations/leftovers are evidence, not authorization. Corrupt health stores are preserved and block writes. Permission denial and missing readings remain explicit; missing sensor values are not zero.
Mapped hardware sensors are community mappings and model dependent. No firewall, full packet history, fan control, calibrated per-core temperature, exclusive snapshot-byte calculation or privileged system repair is provided. Current foreground resource profiling, physical Intel/macOS 13/Ethernet, full VoiceOver, Japanese critical-copy review and OS notification delivery are incomplete. See release readiness and Privacy.
Báo vulnerability riêng qua GitHub private reporting. Gửiversion/reproduction/impact, khôngcredentials/reportfilesystem/networkriêng. Orven 3.0 là dòng hiện tại; binaryToolbox cũ là downloadhistorical.
Orven 3.0.0 kýad-hoc/chưa notarized theo lựa chọn được phép. VerifySHA-256 của cùngrelease trước cài. Codesignstructural không proofDeveloperID/notarization. macOS có thể cầnOpenAnyway saufirst launch blocked; không tắtGatekeeper/xóaquarantine. Không claimHomebrew.
Khôngprivilegedhelper/autocleanup/credentialcollection/malwareverdict. Probe bounded/directargs khôngshell; hostrejectURL/options/credentials. Cancel chỉownedprocess. ProcessactionrevalidatePID/start. Lowerprioritymanual khônghardCPU cap/autosuspend.
Eligiblemutation cầnforeground review/canonicalpath/identity revalidation/recoveryevidence; dùngTrash nếu hỗ trợ. Restore khôngoverwritepathoccupied. Receipt/registration/leftover chỉevidence. Healthstorehỏng giữnguyên/chặnwrite. Permissiondenial/missingrõràng, sensor thiếu không thành0.
Sensorcommunity/modeldependent; khôngfirewall/fullpackethistory/fan control/calibratedper-coretemp/exclusive snapshot bytes/privileged repair. Foregroundresource/Intel/macOS 13/Ethernetvật lý/full VoiceOver/JAcriticalcopy/OS notification cònchưa xác minh. Release readiness/Privacy.
VulnerabilityはGitHub private reportingへ非公開報告。Version/reproduction/impactを含めcredentials/privatefilesystem/networkreportは除外。Orven 3.0が現在line、旧Toolboxbinaryはhistoricaldownload。
Orven 3.0.0は承認されたad-hoc署名/unnotarized。同publishedreleaseのSHA-256を確認。StructuralcodesignはDeveloperID/notarization証明ではありません。Firstlaunchblocked後OpenAnywayが必要な場合、Gatekeeper無効化/quarantine除去なし。Homebrewの主張なし。
Privilegedhelper/autocleanup/credentialcollection/malwareverdictなし。Probeはbounded/directargs、shell評価なし。HostはURL/options/credentialsをreject。Cancelはownedprocessのみ、processactionはPID/startrevalidate。ManualpriorityloweringはhardCPU cap/autosuspendではありません。
Eligiblemutationはforeground review/canonicalpath/identity revalidation/recoveryevidence、対応時Trash使用。Restoreはoccupiedpathをoverwriteしません。Receipt/registration/leftoverはevidenceのみ。破損health store保持・write停止。Permissiondenial/missing明示、sensor欠測は0にしません。
Sensorはcommunity/modeldependent。Firewall/fullpackethistory/fan control/calibratedper-coretemp/exclusive snapshot bytes/privileged repairなし。Foregroundresource/physicalIntel/macOS 13/Ethernet/full VoiceOver/JAcriticalcopy/OS notificationは未確認。Release readiness/Privacy参照。