Stillroom is an encrypted vault for the Mac. It keeps files, notes, passwords and two-factor codes, and it never goes online: no account, no server, no sync, no update check, no analytics.

Writing "we never connect to the internet" on a website is easy. Keeping it true is harder, because one dependency, one convenience call or one well-meant "check for updates" is enough to break it, and nobody notices until someone runs Little Snitch. So the claim is checked by the build. If the app binary can reach the network, the build fails and there is nothing to ship.

The check

It's a short shell script that runs against the compiled binary, not the source:

#!/bin/bash set -euo pipefail BIN = " ${ 1 :?usage: check-offline.sh <path to the Stillroom binary> } "

linked = $( otool -L " $BIN " | grep -E "/(Network|CFNetwork) \.…