Rootz Desktop
The key stays on your machine
An archive you own, signed by hardware only you hold. Alpha, for macOS on Apple Silicon.
Why this is an app and not a website
A website cannot sign for you. Whatever it stores, it stores on a machine somebody else controls, with a key somebody else holds. That is fine for publishing and useless for proving.
Rootz Desktop exists so the signing key never leaves your hands. On a Mac it is generated inside the Secure Enclave and cannot be exported from it — not by us, not by malware, not by you. On Windows the same job is done by the TPM. Your wallet address is your identity, and the hardware is what makes that claim mean something.
“You cannot give data provenance by labelling it, because data is not the kind of thing that has a maker, a lot, or a holder. An asset is.”
Three jobs, three different ways
AI output becomes an asset when it carries quality, origin and ownership. They are not one thing and they are not done the same way.
Quality — measured
How deeply was this checked? A stated depth, never a yes-or-no. Depth is the grade on the title.
Origin — measured
How was it made — which machine, which code, which inputs. The supply side of the record.
Ownership — signed
Whose is it? You sign the intent and the output binds back to you. This is where property rights live.
Origin plus ownership is title. Quality is the grade on the title.
Downloads
macOS — Apple Silicon
v6.6.1 alpha. Signed with our Developer ID and notarized by Apple, so it installs without a security warning.
Apple Silicon only. Check Apple menu → About This Mac. If it reads “Processor: Intel”, this build will not run.
Pre-release demo · all releases
Windows
Alpha, in progress. A matching v6.6.1 build is being produced.
It will ship unsigned, so Windows SmartScreen will warn on install. That is what an alpha looks like — code signing is being arranged separately and the same build will be signed once it is.
It will appear on the releases page alongside the macOS build.
Installing on macOS
- Open the
.dmgand drag Rootz Desktop to Applications in Finder. - Launch it from Applications.
- macOS will ask once whether to open an app downloaded from the internet, and will say Apple checked it and found no malicious software. Click Open.
Drag it in Finder rather than copying it in Terminal. A cp -R keeps the quarantine flag, which makes macOS run the app from a hidden read-only copy — it starts with an empty wallet and looks like data loss. Finder handles this correctly.
What it does
Archive your AI work
Sessions with Claude and other tools are captured locally, encrypted, and anchored on-chain when you choose to publish them.
Hardware-bound identity
Your wallet is derived inside the Secure Enclave or TPM. It cannot be reconstructed on another machine.
Share without surrendering
Give a teammate read or write access to one record, encrypted to their key, without handing over an account.
Speaks to your AI tools
A local MCP endpoint lets Claude and other assistants read and write your archive with your permission.
What alpha means
We would rather you know this before you put a real identity on it.
- Losing the Mac loses that identity. The Secure Enclave key cannot leave the machine — that is the security property, and it is also the risk. The recovery mechanism that would let a second device restore you is designed but not yet built. Keep your recovery phrase.
- It is alpha. Expect rough edges, and expect to update often.
- Apple Silicon only. There is no Intel or universal build yet.
If that is too early for you, join the beta list and we will tell you when it settles.