What 0.0.13 actually includes

This update stays narrow and user-facing: it keeps the signed firewall alpha intact while restoring deterministic automation coverage around the newest redesign pass.

Guided Onboarding

Fresh launches still start with dedicated setup that explains Bello Wall, points users at the right System Settings steps, and asks for a default unknown-traffic mode.

Revamped Shell

The app now centers the experience around the redesigned sidebar-first shell, so onboarding, overview, diagnostics, rules, and settings all follow one consistent navigation model.

Rules Editor

The production shell now includes a dedicated Rules section where you can create, edit, refresh, save, and clear visible rules without dropping into debug-only controls.

Native Update Checks

The app bundle now ships with the real Sparkle feed configuration, so `Check for Updates…` works again from the app menu and the Settings page can manage automatic checks.

Current Diagnostics

Diagnostics still exposes the embedded helper bundle path, live helper PID state, prompt endpoint/status-file timestamps, and the decoded file-bridge transport/session details.

Reusable Rule Scopes

Build exact host + port rules, exact host on any port rules, and root-domain matches from the prompt path and enforce them immediately in the live flow-filter extension.

Local-First Design

Rules, diagnostics, and runtime coordination stay on-device through app-group storage and native macOS components.

Native macOS Packaging

The app is distributed as a signed and notarized DMG using the same Developer ID and Apple notary defaults as the sibling BelloClipboardManager release flow.

Current scope

Live today: signed flow-filter system extension, guided onboarding, app-based activation diagnostics, prompt decisions, learned rules, and the alerting / permissive / blocking unknown-traffic modes.
New in 0.0.13: the newest shell redesign stays shipped by default, stable automation anchors now cover the redesigned onboarding/overview/rules/settings surfaces again, and the automated UI plus built-app onboarding/rule-management verification were rerun on top of that preserved UX.
Distribution: Developer ID signed, notarized, and delivered as a drag-to-Applications DMG.
Runtime model: local SwiftUI app, login-item helper, app-group coordination, and Network Extension content-filter provider.
Validation: focused onboarding/rules/settings UI verification, installed-app onboarding/update-check and rule-management E2E, and the copied-out notarized app launch were green before release.
Not public product surface yet: packet-filter and process-observer scaffolding still exist in the repo, but they are not the focus of this first public build.

Current alpha

Release notes

Bello Wall 0.0.13 is the current public alpha release for the firewall repo after the newest shell redesign was preserved, the redesigned onboarding/overview/rules/settings automation anchors were refreshed, the built-app onboarding/update-check and rule-management E2E slices were rerun, and the notarized release pipeline was verified again.

If you are evaluating Bello Wall today, expect the strongest path around guided setup, prompt handling, rules editing, update delivery, flow monitoring, and the redesigned shell that ties those pieces together. Broader policy surfaces are still being layered in.

Use it as an alpha build: it works on its current verified path, but stability, polish, and broader coverage are still in progress.

Download DMG