feat(daemon): macOS DNS privacy — demote the hijacked default + scope corp domains (Phase 7d-4)#40

Merged

stslex merged 13 commits into

devfrom

Jun 29, 2026

fix(daemon): macOS detector list-parsing + secondary-network scoping + DNS-dict preservation (Codex P1/P1/P2)

stslex
and
claude
committed
fix(daemon): macOS demote — refresh a stale same-service snapshot + flush cache on restore-only revert (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): macOS — restore the prior scope on a demote-failure rollback + watch Global/IPv4 (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): macOS — read the service interface from its IPv4/IPv6 entity + reconcile an orphaned demote at startup (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): macOS — record the installed fallback so a fallback_dns change keeps the real prior + retry a failed startup demote cleanup (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): macOS — re-detect on a fallback_dns change + keep the real prior when the installed-fallback record was lost (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): run a pending global cleanup during shutdown (Codex P2)

stslex
and
claude
committed
fix(daemon): macOS detector — propagate real scutil failures + watch the service IPv4/IPv6 keys (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): refuse an ambiguous primary-interface physical fallback + surface a pending demote-cleanup in status (Codex P2/P2)

stslex
and
claude
committed
fix(daemon): validate fallback_dns as IP literals before the macOS scutil demote (P2)

stslex
and
claude
committed

Provide feedback