D9010 VmAppOpen source · macOS on Apple silicon
Run apps you don't have to trust.
A normal app acts as you: it can read your files and talk to any server. D9010 VmApp takes that back. Each app runs in its own small virtual machine, and you decide which folders and which websites it can reach. Nothing, by default.
How it worksRead the documentationView on GitHubA sealed room per app
The app's engine runs in its own tiny VM. It starts in about half a second and sees only what you hand in.
A window with no reach
The app's screen is drawn natively on your desktop, with no internet and no file access of its own.
You hold the keys
The launcher asks which folders and which websites, shows every message an app sends, and lets you revoke access at any time.
How an app is split
Every app has two halves that never touch each other directly. All messages go through the launcher, which is the one piece of trusted code on your Mac and is the same for every app.
Where to start
| If you want to… | Read |
|---|---|
| Understand it without any technical background | How it works |
| See exactly what is and isn't protected | Security, then the full security model |
| Try the sample apps | Apps and Try it |
| Build or convert an app | Building apps and Converting an app |
| Understand the design in depth | Architecture and the specification |
Status
| Part | State |
|---|---|
| macOS 13 or later, Apple silicon | Built and tested |
| Sample apps (notes, to-do, VS Code, local AI chat and more) | Working |
| Public app catalog where anyone can publish | Built, not open yet |
| GPU for apps (local AI models) | Experimental, off by default |
| Windows and Linux | Designed, not built yet |
More on the roadmap.