Permission-based access
The application is designed to work with user-selected folders and supported tools. It will not request unrestricted computer control for its first release.
Approval before sensitive changes
File moves and other sensitive operations require review. Supported file changes will have an undo path, and partial failures must be reported clearly.
A release we can stand behind
Security testing, signed distribution, and Apple notarization are release requirements. These are development goals, not claims of a completed audit or certification.