Approved Applications List

SCOPE

This list covers every device used for Halved business:

• Andrew James: MacBook Air 15” M4, Mac mini, iPhone 16 Pro Max, iPad (A16)

• The second administrator: MacBook, iPhone

It covers the applications and command-line tools installed on those devices. Software libraries and fonts built into the Halved product are part of the product, not applications on these devices, and are not listed here.

This review, on 28 September 2026, was made by reading the applications installed on each device, not from memory. Applications that were unsupported or no longer needed were removed from the devices at this review.

HOW APPLICATIONS ARE APPROVED

Mac applications: installed only from the App Store or from identified developers with a valid code signature. Gatekeeper enforces this.

Mac command-line tools: installed only from Homebrew’s core formulae or from the vendor’s official installer. Gatekeeper does not check command-line tools, so they are approved by name in this list and updated at least every 14 days.

iPhone and iPad applications: installed only from the App Store, with automatic app updates on.

Personal use: applications for personal use are permitted on these devices only if they are installed from the App Store (or, on a Mac, from an identified developer), are still supported by their vendor, and update automatically. They are not named in this published list. Any application that stops receiving security updates is removed.

AI browsers: browsers that can act inside websites the user is signed in to must not be used while signed in to any Halved administrative account (Microsoft Azure, GitHub, Cloudflare, Microsoft 365 administration).

APPROVED APPLICATIONS - MACOS

Andrew’s MacBook Air and Mac mini (both, unless marked):

Microsoft 365:

• Microsoft Outlook, Word, Excel, PowerPoint, Teams, OneNote, To Do

• Microsoft OneDrive

Communication:

• Slack

• Zoom

• WhatsApp

Browsers:

• Safari (built in)

• Google Chrome (current version, automatic updates on)

AI:

• Claude (desktop app)

• ChatGPT

• Perplexity (MacBook Air)

• Plaud

Design, documents and video:

• Adobe Creative Cloud

• Figma

• Miro

• Loom

• Notion (MacBook Air)

• Keynote, Numbers, Pages

• Google Docs, Google Sheets, Google Slides

• iMovie (MacBook Air)

• Teleprompter

Development:

• Visual Studio Code

• Visual Studio Code Insiders (Mac mini)

• PowerShell

Utilities:

• Alfred

• BetterDisplay (MacBook Air)

• CheatSheet

• Hand Mirror

• Magnet

• Structured

• The Unarchiver

Security and network:

• NordVPN

• UniFi (MacBook Air)

Printing and peripherals:

• HP (MacBook Air)

• PaperCut Mobility Print Client

• Logi Tune

• Dell Display and Peripheral Manager (Mac mini)

The second administrator’s MacBook:

• Microsoft Outlook, Word, Excel, PowerPoint, OneNote, To Do

• Microsoft OneDrive

• Claude (desktop app)

• Keynote, Numbers, Pages

• Safari (built in)

• NordVPN

• WhatsApp

APPROVED COMMAND-LINE TOOLS - MACOS

Andrew’s MacBook Air and Mac mini (both, unless marked):

• Azure CLI

• GitHub CLI

• Terraform

• PostgreSQL 16 client, with the pgvector extension (Mac mini)

• MongoDB Shell

• Python

• Node.js, with Yarn

• uv

• Git and git-filter-repo

• gitleaks (Mac mini)

• pandoc (Mac mini)

• ripgrep

• tokei (Mac mini)

• Redis, for local testing only

• GnuPG (MacBook Air)

• Claude Code

The supporting libraries these tools depend on are installed by Homebrew with them and are not listed individually.

The second administrator’s MacBook: Git and Python from Apple’s Command Line Tools only.

APPROVED APPLICATIONS - IOS AND IPADOS

Andrew’s iPhone 16 Pro Max:

• Microsoft Outlook, Teams, OneDrive, OneNote, To Do

• Microsoft Authenticator (sign-in verification)

• Apple Passwords (built in)

• Safari (built in)

• NordVPN

• DocuSign

• GitHub

• Claude

• ChatGPT

• Perplexity, including its Comet browser (subject to the AI browser rule above)

• Plaud

• Xero Verify

• LinkedIn, X, Threads, Instagram, Facebook, Pinterest, Reddit, YouTube (business social media)

Andrew’s iPad (A16):

• Microsoft Outlook, Teams, Word, OneDrive, OneNote

• Keynote, Numbers, Pages

• Zoom

• Google Meet

• Google Chrome

• Figma

• Miro

• Loom

• ChatGPT

• iMovie

• NordVPN

• Apple Passwords (built in)

• Safari (built in)

The second administrator’s iPhone:

• Microsoft Outlook

• Microsoft Authenticator (sign-in verification)

• Microsoft Defender

• Apple Passwords (built in)

• NordVPN

TECHNICAL CONTROLS ENFORCING APPLICATION APPROVAL

MacBook Air, Mac mini and the second administrator’s MacBook:

• macOS Gatekeeper enabled and set to “App Store and identified developers” (confirmed on all three on 28 September 2026)

• System Integrity Protection (SIP) active

• Unsigned applications blocked by default

• Administrator approval required for any exception

iPhone and iPad:

• The App Store is the only installation method

• Sideloading disabled (no developer mode)

• All apps code-signed by Apple

• Automatic app updates on

APPROVAL PROCESS FOR NEW APPLICATIONS

• The user identifies a business need for a new application or command-line tool

• The CEO reviews it: security, business need, vendor reputation, and whether the vendor still supports it

• The CEO verifies it is code-signed (Mac), from the App Store (iPhone and iPad), or from Homebrew’s core formulae or the vendor’s official installer (command-line tools)

• The CEO approves installation

• The application is added to this list

• The user installs it

REMOVAL PROCESS

Applications are removed if:

• they are no longer needed for business purposes

• the vendor ends support or security updates

• a security vulnerability is identified

• the user no longer requires access

Each quarterly review reads the applications installed on every device in scope and removes any that meet these conditions.

REVIEW, OCTOBER 2026

Reviewed on 5 October 2026. The Mac mini was read directly: its installed applications, its Homebrew formulae and the location of each command-line tool, with Gatekeeper and System Integrity Protection confirmed on. One correction followed: Yarn is installed on the Mac mini as well as the MacBook Air, with Node.js from the vendor’s official installer, so it is no longer marked as on the MacBook Air only. The MacBook Air, the iPhone, the iPad and the second administrator’s devices were not read at this review and stand as read on 28 September 2026. The next quarterly review reads every device in scope, so its date stays December 2026.