Security & API Key Architecture

Apple Notarization & Code Signing

Avelyn binaries are signed with Apple Developer ID certificates and notarized by Apple Gatekeeper servers.

Keys are stored in user-restricted application storage (`~/.avelyn`) and masked with password bullets in the GUI.