The on-machine governance gate for AI clients, all five platforms. Combines 1.5.18 + 1.5.19 (1.5.18 was not published here).

1.5.19

• First-run welcome screen: bare airgov_daemon now explains what works with no account (MCP server with 13 governed tools, coverage scan, monitoring switch) and what pairing unlocks
• mcp mode prints a startup banner on stderr — version, tool count, governance state — so a directly-run or Docker-run server is no longer a silent process. stdout stays byte-clean JSON-RPC
• Richer unpaired status

1.5.18

• Per-app monitoring switch across every governance surface: disable / enable <app> / monitoring-status for claude_code, cursor, hermes, codex, claude_desktop — hooks, MCP policy/HITL/audit, usage-sync all honor it; tools keep running; the off state is recorded in the audit chain as a coverage gap (mcp.monitoring.disabled / .enabled)
• Honest audit-recording messages: the CLI only claims a coverage gap is on the chain when the POST succeeded

Verify

shasum -a 256 -c airgov_daemon-<platform>.sha256

Install guide: https://proofpane.com/install

First tagged snapshot of the Proofpane MCP server listing (README + Dockerfile + glama.json + CI self-check). The server is airgov_daemon mcp — a stdio MCP governance layer advertising 13 tools (policy-gated, DLP-redacted, tamper-evidently audited). Run it via the included Dockerfile, which pulls the public prebuilt Linux binary. The daemon itself is proprietary; this repo is the public mirror + integration scaffolding (MIT).

First public macOS double-click build of the Proofpane MCP daemon.

What's inside the .zip: Proofpane Daemon.app — a real macOS bundle wrapping the 13 MB PyInstaller daemon binary. Double-click opens Terminal so you can see the daemon start, paste a pairing code on first launch, and watch live logs.

Architectures: x86_64 only in this release (runs on Intel Macs natively + Apple Silicon via Rosetta). arm64-native build is next.

Signing: unsigned. On first launch macOS Gatekeeper blocks the .app — right-click → Open → Open in the dialog (not double-click). After that macOS remembers the exception. Apple Developer ID signing + notarisation is on the roadmap.

SHA-256 verification:

shasum -a 256 ProofpaneDaemon-macos-x86_64.zip
# expect: 59d588657e580d60756526e24ed82cb8505d7c02627fff1705a3c36042e52062

shasum -a 256 airgov_daemon-x86_64-apple-darwin
# expect: 67a379ad8be730333852bc50937f91d29f77a8efcf64814a60f5f4de71ccf055

Built with PyInstaller 6.20.0 + websockets 16.0 from the private daemon source.