Files

SysAdmin 7d5f9cc246 chore(scaffold): initial SilverMetal program scaffold

Cross-platform privacy-hardening program. Two-layer product:
- SilverLABS Application Stack (cross-platform spine)
- Platform Hardening Profiles (per-OS, tier-honest)

Platforms: Linux (Debian/Kicksecure), Android (Pixel/Samsung/Moto/generic),
Windows (LTSC IoT), macOS (profile), iOS (MDM profile). Each flavour has
both a preflashed hardware SKU path and a self-apply "harden your existing
device" path.

Includes umbrella docs (README + threat-model, design-principles,
platform-matrix, roadmap, trust-model), per-platform and per-stack-
component README stubs, .gitignore, LICENSE.

Linux v1 ships first; Stack v1 = Browser + VPN + Sync.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-25 03:11:48 +01:00

2.0 KiB

Raw Blame History

SilverMetal iOS

Status: Phase 4 (planning, post-Windows v1)

Tier D — profile-layer only. Weakest tier in the family; labelled as such. We cannot modify iOS; we ship MDM profiles, App Store apps, and a setup guide.

Scope (v1)

Signed .mobileconfig MDM-style profile that:
- Enforces device passcode policy
- Disables analytics uploads, Siri suggestions
- Restricts iCloud to absolute minimum (Find My, OS update only — sync-replaced services point at SilverSync)
- Enables Lockdown Mode guidance
- Default-app changes where iOS 18+ allows (Browser, Mail, etc.)
Stack ports via App Store:
- SilverBrowser (subject to Apple WebKit constraints — fall back to a hardened-defaults wrapper if pure custom engine is forbidden)
- SilverVPN (NetworkExtension API)
- SilverSync (file/contact/calendar/photos providers)
- SilverChat (post-v1.1)
- SilverKeys (post-v1.1)
Setup guide:
- Disposable Apple ID guidance
- Hardware-key 2FA (YubiKey via Lightning / NFC)
- Recommended app curation
- eSIM privacy guidance

Out of scope

Anything requiring jailbreak (we do not support, recommend, or distribute jailbreaks)
Anything bypassing Apple's review for Stack apps
Eliminating Apple ID — it is required for App Store and we say so

Directory layout

To be populated in Phase 4:

ios/
├── profile/         # .mobileconfig sources, signing
├── stack/           # iOS-specific Stack app builds (Xcode projects)
└── docs/            # setup guide, recommended apps, threat-tier disclaimer

Verification gates

Profile signature verifies on iOS install
Lockdown Mode guidance verified across iOS 17+
Stack apps pass App Store review and behave per spec
Telemetry capture documents minimum-feasible Apple contact (we cannot reach zero)

Honest framing

This is the weakest SilverMetal tier. iOS is the most restrictive consumer platform; users who pick this tier are typically users who must stay on iPhone. The product page must say so prominently.

2.0 KiB Raw Blame History