Tier 1
macOS endpoint
BeProof app + CLI
scanpolicy evallocal DBsigned export
Architecture · Two-tier model
Local evidence plane + org governance plane
BeProof is an AI agent evidence layer for macOS — not a replacement for MDM, EDR, or SIEM. Policy evaluation stays on the endpoint; the control plane aggregates signed, metadata-only fleet summaries and admin workflows.
Two tiers
Tier 1 — Endpoint evidence plane
BeProofApp.app + CLI on each Mac. Collects AI-agent evidence, evaluates Policy Pack rules locally, maintains a hash-chain journal, and signs exports. Journal payloads are encrypted at rest (AES-256-GCM, Keychain-bound key); inventory tables are metadata-only but not encrypted in the current release.
- Local scan — Declared, Granted, Observed evidence layers
- Policy Pack evaluation on device (CoverageGap-first)
- SQLite evidence store + hash-chain journal (never uploaded)
- Ed25519 signed exports and fleet summaries
- Review workflow — endpoint source of truth for evidence state
Tier 2 — Org governance plane
Cloud control plane + admin console. Tenant-scoped inventory, fleet health, review queue, and policy distribution — without server-side scanning.
- Tenant-scoped device registry + enrollment tokens
- Signed metadata-only fleet summary ingestion
- Fleet metrics — heartbeat, stale audit rate (POL-M02)
- Sanitized review queue + analyst assignments
- Policy bundle publish (pull model; MDM precedence unchanged)
System diagram
MDM / UEM
Jamf · Intune · Kandji · Fleet
PKGPPPCorg-policy overlay
signed metadata-only summariesenroll · heartbeat · policy pull
Tier 2
Control plane API
GCP Cloud Run + Postgres
ingestmetricsreview queuepolicy bundles
Admin console
Vercel + Firebase Auth
dashboarddevicesreviewenrollment
Policy evaluation stays on the endpoint. The control plane receives signed, allowlisted metadata only — never raw SQLite or secrets.
Evidence trust boundary
BeProof enforces a normative split between local raw evidence and shared org evidence. Missing data surfaces as a CoverageGap — never a silent pass.
| Class | Location | Examples |
|---|---|---|
| localRawEvidence | On the Mac | Full SQLite database, complete audit report, journal bodies, raw credential locators |
| sharedOrgEvidence | Signed upload only | Fleet summary allowlist fields, export manifest metadata — no secrets, no raw DB |
Key data flows
- Enrollment — fleet admin creates a one-time token; Mac runs
fleet enroll; device credential registers with tenant. - Managed audit — endpoint evaluates policy locally, signs
FleetSummaryPayload, uploads to control plane; dashboard and review queue update. - Policy publish — admin publishes bundle; endpoint pulls on sync. MDM system overlay path wins when present.
- Review sync — analyst bulk actions in cloud; endpoint pulls decisions. Full evidence paths stay on device.
Operating modes
Personal
Tier 1 only — local audit and signed export. No cloud upload required.
Managed local
Tier 1 + MDM overlay. Org policy context without fleet enroll.
Managed fleet
Tier 1 + Tier 2 — enrollment, heartbeat, admin console governance.
Integration points
BeProof integrates with existing stacks — it does not replace them.
| System | Role | Status |
|---|---|---|
| MDM / UEM | PKG, PPPC, org-policy overlay delivery | Pilot |
| OpenAI / GitHub admin APIs | Cloud grants + account attribution | Pilot default |
| Firebase Auth | Admin console sign-in (pilot) | Available |
| SIEM / webhook | Normalized summary streaming | Planned (M4) |
| EDR / XDR | Enrichment metadata attach | Planned (M4) |
What BeProof is not
- MDM or device management replacement
- EDR, XDR, or runtime blocking
- Central log store or SIEM replacement
- Server-side policy evaluation engine
- Auto-remediation for AI agent misconfigurations
Next steps
For a 30-day pilot walkthrough, see the design partner program. For MDM rollout, start with managed deployment runbooks.