Obsidian extension · TestFlight beta
Your writing, end-to-end. Signed by the author. Verified by the reader.
Authorship attestation
Every note you publish carries a cryptographic signature bound to your identity. Imitators get the words. The signature stays with you.
On-disk redaction
Private notes stay private. PHI and entity patterns scrubbed on disk in real time. The file you read is the file the audit chain promises.
Editor handoff
Share a draft with an editor without uploading to a vendor. Revoke with one tap. Audit trail intact. Your custody, never broken.
Problems we solve
Authorship, framed three ways.
What appmaestro actually delivers — end-to-end writing custody, wrapped for humans.
Sign
Authorship attestation
Every note you publish carries a cryptographic signature bound to your operator identity. Imitators get the words. The signature stays with you.
Pre-publish signing
One-tap Touch ID or Face ID gate before a draft ever leaves your vault. No accidental publishes, ever.
Reader verification
Readers verify your signature against your public profile without trusting any platform, including ours.
Redact
Private notes stay private
Dynamic redaction-at-rest. The vault file on disk is the redacted file. There is no unredacted intermediate to leak.
PHI auto-scrub
Patient identifiers detected and scrubbed as you type. Compliant by default, not by audit.
Redaction audit trail
Every redaction event signed and chained. Auditors verify the trail without seeing the contents.
Share
Editor handoff
Send a draft to an editor without uploading it to a vendor. Revoke access with one tap.
Mobile companion
Approve handoffs, sign claims, manage your quorum from the iOS app. TestFlight beta now.
Revocable preview
Editor sees the manuscript with audit. Revoke and the chain invalidates the access on next verify.
Publish
Direct to reader
No platform gatekeeper between you and your audience. Publish to your channel of choice with provenance baked in.
Signed receipts
Every publish produces a cryptographic receipt. Your archive proves what you wrote, when, and that it is yours.
Vault-aware export
Export your vault to PDF, EPUB, or signed envelope. Every artifact carries the chain head as proof of integrity.
Built on
appmaestro is the product. mae is the CLI. verum is the substrate.
mae
Local-first writing CLI
- mae is the writer-facing scriptable layer underneath appmaestro. Voice-fingerprint extraction, dynamic redaction-at-rest, signed publish.
- Power users drop to the mae CLI for batch operations, scripted redaction passes, and custom publish pipelines.
- Same vault, same audit chain, same signed publish. mae for terminal, appmaestro for visual.
verum
Cryptographic custody substrate
- verum holds the keys. Biometric unlock via Touch ID, Face ID, or YubiKey. Nothing crosses our servers.
- verum chains the audit. Every read, write, redact, share, and publish is SHA-256 linked and on-chain anchored.
- verum signs the claims. Editor handoffs and reader-verifiable authorship ride on verum-grade Ed25519 attestations.
appmaestro is the consumer-facing surface of an operator-owned writing stack. The CLI lives at mae.sh. The custody substrate lives at verum.sh. The Obsidian extension and mobile companion live here.