Early release · Mac A to Mac B
Your Macs, one trustworthy workspace.
One Mac asks. You approve. Another Mac does exactly that one thing and hands back a typed receipt of what happened, on which machine, and what still waits for you.
One handoff, five steps
- 1
Inspect
Read-only inventory of a Mac: OS, chip, free disk, which tools are installed.
- 2
Propose
The coordinator explains one finding and proposes one bounded action for one named Mac.
- 3
Approve
You sign the approval. A model may pick from declared capabilities; it cannot grant itself any.
- 4
Run
The worker checks the signature and the host key, then runs only that typed capability.
- 5
Receipt
A redacted record: source, target, capability, approval, result. No secrets.
Mac A · Coordinator
Understands the request, proposes, asks you.
Mac B · Worker
Builds, tests, opens tmux panes, reports back.
Three screens design mockups
The Mac pair is the engine. The menu bar is the daily surface. The iPhone is only an approval card and a receipt, never a shell.
Capability xcodebuild · target Mac B · expires in 10 min
- ProposedMac A to Mac B ·
xcodebuild - Approvedsigned by owner · Touch ID
- AcceptedMac B verified signature and host key
- Ranexit 0 · 4 min 28 s · 1 attempt
- Receiptredacted · kept on both Macs
Build Rifflet on Mac B?
Mac A wants Mac B to run xcodebuild once. Nothing else is allowed.
What it will never do
- Run an arbitrary shell command or key sequence from a model or from the iPhone.
- Treat a Tailscale connection, a voice command or discovery as permission.
- Copy credentials, Keychain values, cookies, raw transcripts or tokens into a repo or receipt.
- Merge, deploy, publish or delete anything on its own.
- Let two writers work on one project at once. One Mac holds the pen.
Where it stands 2 November 2026
Working
- A menu bar app, signed with Developer ID and notarized by Apple.
- Mac A sends a signed, read-only request to Mac B over a pinned SSH link, and Mac B's worker answers.
- Approvals ask for Touch ID or your password first.
- Runs on Apple silicon and Intel Macs, macOS 26 or later. 110 automated tests pass.
Not yet
- Setting up a second Mac is still manual (SSH keys and Tailscale). A pairing code is next.
- Building and testing on the other Mac from the menu bar.
- The receipt window and the iPhone approval card above are mockups.
- Choosing a Mac by load and heat.