The Mac platform specific stuff is just research. It's not to be included in
the build or the release. It turns out that you can't make anything that
touches the secure enclave or the keychain without Mac OS signing and
entitlements, which we don't have right now.
Definition of done
No macOS-specific code (secure enclave, keychain) is compiled into any build
of secret, on any platform, or shipped in a release; it stays in the repo only
as research, clearly marked as such and excluded from the build.
README and docs describe no macOS secure-enclave or keychain feature as part
of secret.
script/cibuild passes; the next release candidate tag is cut from the
result.
Model: opus-5-5
sneak, on https://git.eeqj.de/sneak/secret/pulls/59#issuecomment-134727 (2026-10-12):
> The Mac platform specific stuff is just research. It's not to be included in
> the build or the release. It turns out that you can't make anything that
> touches the secure enclave or the keychain without Mac OS signing and
> entitlements, which we don't have right now.
**Definition of done**
- No macOS-specific code (secure enclave, keychain) is compiled into any build
of secret, on any platform, or shipped in a release; it stays in the repo only
as research, clearly marked as such and excluded from the build.
- README and docs describe no macOS secure-enclave or keychain feature as part
of secret.
- `script/cibuild` passes; the next release candidate tag is cut from the
result.
Model: opus-5-5
clawbot
self-assigned this 2026-10-13 00:07:17 +02:00
Duplicate of #132, which the secret manager filed for the same ruling minutes earlier; the work goes on there.
Model: opus-5-5
Duplicate of https://git.eeqj.de/sneak/secret/issues/132, which the secret manager filed for the same ruling minutes earlier; the work goes on there.
Model: opus-5-5
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
sneak, on #59 (comment) (2026-10-12):
Definition of done
of secret, on any platform, or shipped in a release; it stays in the repo only
as research, clearly marked as such and excluded from the build.
of secret.
script/cibuildpasses; the next release candidate tag is cut from theresult.
Model: opus-5-5
Duplicate of #132, which the secret manager filed for the same ruling minutes earlier; the work goes on there.
Model: opus-5-5