Updates
In-app update flow, release source, automatic updates, and operational update behavior.
Update Overview
Guardian checks for updates on startup, on focus, and every 15 minutes while the app is open. When an update is available you can install it from the update banner or Settings > Updates.
Update Source
Guardian reads updater metadata from the public distribution repository (GitHub Releases).
Release Structure
Distribution Repository
├── latest.json # Current version metadata
├── Guardian_X.Y.Z_aarch64.app.tar.gz # macOS updater artifact
├── Guardian_X.Y.Z_aarch64.dmg # macOS installer
└── ...
latest.json Format
{
"version": "vX.Y.Z",
"notes": "Bug fixes and performance improvements",
"pub_date": "2026-02-07T12:00:00Z",
"platforms": {
"darwin-aarch64": {
"signature": "base64-signature",
"url": "https://github.com/<org>/<repo>/releases/download/vX.Y.Z/Guardian_X.Y.Z_aarch64.app.tar.gz"
}
}
}
In-App Update Flow
Automatic Update Check
Guardian checks for updates:
- On Startup: When you open the app
- Manually: Via Settings > Updates > Check Now
Update Notification
When an update is available:
- Banner appears at the top of the window
- Version info shows in Settings > Updates
Update Installation Process
1. Notification Shown
↓
2. User Approves
↓
3. Download in Background
↓
4. Verify Update (integrity / signature / version)
↓
5. Install Update
↓
6. Restart Application
↓
7. New Version Active
Installation Steps:
- Approval: Click "Install Update" in the banner or Settings
- Download: Package downloads in background (progress shown)
- Verification: The updater validates the update (for example: signature checks depending on your configuration)
- Installation: The updater installs the new version
- Restart: App restarts automatically
- Confirmation: New version number shown in Settings
Update Verification
Before applying updates, Guardian verifies:
| Check | Purpose |
|---|---|
| Updater Verification | Authenticity and integrity checks (depends on updater configuration) |
| Version Format | Prevents invalid updates |
If any check fails, the update is rejected and the user is notified.
Update Settings
The current app experience focuses on startup checks, focus checks, and manual checks in Settings > Updates.
Manual Updates
Checking Manually
Settings > Updates > Check Now
Forces immediate check regardless of schedule.
Downloading Manually
If automatic updates fail:
- Visit the download page on this website (
/download) - Download installer for your platform
- Run installer (previous version will be replaced)
Offline Updates
For air-gapped systems:
- Download installer on connected machine
- Transfer via USB/sneakernet
- Run installer normally
Rollback
Manual Rollback
macOS:
# Restore from Time Machine
# Or reinstall previous version from backup
Operational Notes
Release Mirroring
If release mirroring is manual, verify that:
latest.jsonpoints to distribution repository URLs- Checksums match the actual files
- Signatures are valid
- Files are publicly accessible
Corporate Deployments
For enterprise environments:
- Disable Auto-Update: Use internal policy and avoid in-app updates
- Internal Mirror: Host
latest.jsonon internal server - Staging: Test updates in staging environment first
- Scheduled Deployment: Plan updates during maintenance windows
- Group Policy: Configure via MDM or configuration management
Internal Mirror Setup:
{
"version": "X.Y.Z",
"downloads": {
"darwin": {
"url": "https://internal.company.com/guardian/Guardian-X.Y.Z.dmg"
}
}
}
Point Guardian to your internal update feed by setting the GUARDIAN_UPDATE_FEED_URL environment variable for the app runtime.
Update Notifications
Disable notifications temporarily:
- Do Not Disturb: System setting
- Focus Mode: macOS Focus
Troubleshooting Updates
Update check fails
Causes:
- Network connectivity issues
- Firewall blocking your update host
- Proxy not configured
Solutions:
- Check internet connection
- Verify update host accessibility
- Configure proxy if behind corporate firewall
- Try manual download
Download stuck or slow
Solutions:
- Check bandwidth usage
- Pause and resume download
- Try different network
- Use manual download as alternative
"Update verification failed"
Cause: Corrupted download or signature mismatch
Solutions:
- Retry the update
- Download a manual installer from the download page
Update installed but version unchanged
Solutions:
- Fully quit Guardian (not just close window)
- Restart application
- Check if multiple versions installed
- Reinstall manually if needed
Security Considerations
- Prefer updates from trusted distribution sources (official releases or your organization's internal mirror).
- Signature and integrity checks are performed by the updater depending on how your build and update source are configured.
- For custom update feeds, treat downloads as untrusted unless you have an independent verification process in place.
Getting Update Help
If update issues persist:
- Check your network connectivity and try again.
- Try a manual installer from the download page.
- If you are using a custom update source, verify the URL and the feed response format.
- Report the issue in the repository you are using and include the app version plus the error message you see.