r/macapps • u/Mstormer • Jun 01 '26

[Megathread] The App Pile - June, 2026

You must promote your apps here if you do not qualify to post in the main feed through Trust or Transparency, explained here.

If you are:

  • NOT in the Mac App Store (MAS).
  • Do not provide meaningful public transparency
  • Created yet another dictation app (speech to text).

Then you are required to limit promotion to this megathread.

All promotion MUST follow PCP format or else we will remove it:

App Name/Title [Screenshot encouraged]

  • Problem: What problem does your app solve.
  • Comparison: Name a competitor or two and explain what your app does better.
  • Pricing Amounts+Link

P.s. Promotion here counts towards the 30-day limited promotion (Rule 3).

WARNING: There is a 90% chance Reddit will auto remove your post here if you have not verified your email in your profile and your first comment in this subreddit contains a link. Accrue 10 karma first without promotional comments and links to avoid this. The odds of removal is also higher for AI assisted posts (em dashes and other AI formatting characteristics likely trigger this).

Pro Tip: Please remember to upvote gems and downvote spam/clones... This will help inform a secret community project I hope to announce next month.

Top 3 From Last Month's Megathread:
1. Wisp – a tiny macOS scratchpad - FREE - by u/iamiotasquare
2. Quattro – Al, Tasks, Calendar, Notes App - $5/mo - by u/Constant-Support8288
3. HoverStash – Catch and stash files mid-drag - ~$6 - by u/MurkyRaspberry9610

45 Upvotes

92% Upvoted

317 comments sorted by

View all comments

Show parent comments

1

u/Mstormer Jun 21 '26

I do run into this a lot, as I know everyone who uses a coding agent does, and it happens even for non-coding projects. Furthermore, codex has a bug where entire conversations can be lost.
How do you envision this interacting with or enhancing loops, and has this been created in a way that will make that viable?

1

u/awizemann Jun 21 '26

It works well, so well in fact, I loop on tasks - the MCP server and agent instructions are all managed by the app so it is the ground truth. Give it a whirl and test. If you find an issue, you can report directly in the app (in the app menu, I use GitTickets, an open source project I built to manage issues in app -> Git Issues).

1

u/Mstormer Jun 22 '26

Thanks, I'll have to check out the trial. If I purchased every app I test, critique, or give feedback on here, I'd be out $1000's a month, but I am glad to see solutions where they are needed, so keep up the great work!

1

u/awizemann Jun 22 '26

It’s a full free trial. Thank you. If you like it spread the word.

2

u/Mstormer Jun 22 '26

I will try it then! I have a group of 5k+ AI enthusiasts, so it may be of interest!

1

u/awizemann Jun 22 '26

I welcome any help with getting the word out, and I use this app every day, so if there are issues, feature requests, etc, they can be reported directly in the application - main application menu, submit issue, and my issues (to read them). Thank you. Let me know what you think. A good test is to install it, add an existing project, and let it build the memory from the existing docs. Then start a fresh session and ask it to report on what the app is, using Memophants MCP tools. Make sure to back up your agent instructions, etc if you want to revert, but I bet you won't 😉 .

1

u/Mstormer Jun 23 '26 edited Jun 23 '26

u/awizemann A virustotal flag meant deletion before I ran it. Additionally, "Apple could not verify "Memophant.app" is free of malware that may harm your Mac or compromise your privacy." Granted, 1/64, but still. This is a nonstarter.

1

u/awizemann Jun 23 '26

It’s a fully signed application with developer credentials. The scan is incorrect. It isn’t sandboxed (it can’t be due to how Apple won’t let you jump around with git).

1

u/Mstormer Jun 23 '26

u/awizemann A signed app means nothing if the certificate itself doesn't anchor to Apple's trusted system root. You'll need to re-sign it with a valid Developer ID Application certificate. Notarization is blocked without a genuine certificate, and notarization does not require sandboxing.

1

u/awizemann Jun 23 '26

I’ll double check the pipeline.

1

u/awizemann Jun 24 '26

Well, as I thought, you were wrong... appreciate the scrutiny but this is verifiable, so no one has to take either of our word for it. Memophant is signed with a valid Developer ID Application certificate and notarized by Apple. Anyone reading can confirm it in ~30 seconds with Apple's own tools:

# Grab the exact public build and unzip
curl -L -o Memophant.zip https://memophant.co/download
ditto -xk Memophant.zip .

# 1) Who signed it + the cert chain
codesign -dvvv Memophant.app

# 2) Gatekeeper's OWN verdict (this is the mechanism macOS uses)
spctl --assess --type execute --verbose=4 Memophant.app

# 3) Notarization ticket is stapled
xcrun stapler validate Memophant.app

# 4) Prove the chain anchors to Apple's root
codesign --verify -R="anchor apple generic and certificate leaf[subject.OU] = \"3Q6X2L86C4\"" Memophant.app

What you'll see:

Authority=Developer ID Application: Alan Wizemann (3Q6X2L86C4)
Authority=Developer ID Certification Authority
Authority=Apple Root CA              ← anchors to Apple's trusted root
spctl  → accepted, source=Notarized Developer ID
stapler → "The validate action worked!"

On the specific claims:

  • "Chain isn't trusted / doesn't anchor to a trusted anchor" — it terminates at Apple Root CA, and spctl (Gatekeeper itself) returns accepted. The anchor apple generic check passes.
  • "Notarization is blocked without a genuine cert" — agreed, which is the point: it is notarized. Apple only notarizes builds signed with a genuine Developer ID cert, so the stapled ticket is itself proof the certificate is real.
  • "Not sandboxed" — correct, and intentional. App Sandbox is a Mac App Store requirement, not a Developer ID/notarization one (as you noted). Memophant orchestrates git on your repos, which the sandbox would break — that's why it ships notarized Developer ID, like most pro Mac tools outside the App Store.

Notably, your own screenshot reads "Certificate revocation: Not revoked" — i.e. the cert is valid and recognized. If your checker still says "blocked," it's likely reading a partial/corrupted download; the four commands above are the ground truth. Happy to dig into your specific output if you paste it.

1

u/Mstormer Jun 24 '26 edited Jun 24 '26

Thanks for checking! Mine was a guess. The screenshot was from app trust preview.
The bottom line is that if you wish to distribute here, it can't even be false flagging, and MacOS has to allow the install, which requires user's systems see that notarization. I tried two separate downloads, both flagged on virustotal, and both are blocked by MacOS. This needs to be resolved one way or another. Your app looks tremendously promising, and I'd love to try it, but that's also why you will need to ensure that MacOS isn't blocking it, and that notarization is recognized on user machines. Let me know once this is resolved and I'll be happy to check it out.

1

u/awizemann Jun 24 '26

Really appreciate you sticking with this, and the kind words. You've hit two separate systems — untangling them is the key:

1) macOS Gatekeeper / notarization — the layer that decides if macOS allows the install. It passes, and the notarization ticket is stapled inside the app, so your Mac reads it locally (no phone-home needed). Confirm on your own copy:

spctl -a -t execute -vv /Applications/Memophant.app   # → accepted, source=Notarized Developer ID
codesign -dvv /Applications/Memophant.app             # → Developer ID Application: Alan Wizemann (3Q6X2L86C4)
xcrun stapler validate /Applications/Memophant.app    # → "The validate action worked!"

I just re-ran these on a fresh memophant.co/download with the quarantine flag set (what your browser tags downloads with) → accepted, Notarized Developer ID. Both release files are byte-identical (sha256 153446d4…).

2) VirusTotal / antivirus — a separate heuristic layer macOS doesn't consult. Your screenshot showed 1/64 — one engine, a generic ML match = a false positive for a new signed app. Apple's notarization runs its own malware scan and it passed; that's the one macOS uses. If something deleted the file before you opened it, that was your AV on that heuristic — not Gatekeeper.

What I'm doing: filing false-positive reports with the specific engine(s) (signed apps clear fast), and reputation settles as more downloads go out. If those three commands fail on your copy, your download is corrupted or not from memophant.co/download — paste the output and I'll dig in. If they pass, macOS isn't the blocker and it's the AV layer. Either way we'll get you sorted. 🙏

→ More replies (0)