🟡 T1Bridge

Added by Boyd Boyd
Column
Supporting Packages
Assigned to
Boyd Boyd
Notes

I'm mid-stream on taking my jumble of scripts from "it works!" to "this is ready for users to install and have a good time." I'll keep my progress updated here — and am having an agent write / maintain it (CLI support is awesome). Consider this a living status report.


I'm new overall to Linux contribution. So if you see anything concerning, let me know. I'd love to learn.



🟢 Complete · 🟡 In progress · 🔴 Blocked · ⚪ Planned, not started


Supported targets


Latest — September 7

v0.1.3 packages are live: one build, signatures/downloads verified. Larger press-to-cancel target and honest xART diagnostics; reporter confirmation pending. Omarchy upgrade: omarchy update.


14,2 now has reported Touch Bar, enrollment/verify, sudo and lock success. Camera untested; lid resume failed. Sustained relay restarts tracked separately in #14.


Open: import #9, cancel #10, diagnostics #12, optional Omarchy package #6. GitHub release page remains draft under the CLI-only posting constraint. Suspend/resume remains unsupported.

T1Bridge

Feature Status Latest update
Foundations and architecture 🟢 Implemented — distro-neutral T1Bridge owns T1 hardware; Omarchy integration and reusable fingerprint UI remain separate.
T1 USB, network, and display kernel support 🟢 Candidate reboot verified All four loaded DKMS modules match the signed candidate after reboot on MacBookPro13,3.
iBridge lifecycle and service coordination 🟡 Final matrix pending Candidate boot recovered after one known relay retry; no failed services. Full lifecycle matrix remains.
FaceTime camera 🟡 Final-candidate capture pending Candidate UVC module loaded after reboot; earlier camera evidence is retained, not a new capture pass.
Touch ID enrollment and authentication 🟡 Candidate match proven Existing fingerprint matched after reboot without re-enrollment. Fresh enrollment/deletion tour retains earlier dogfood acceptance.
Machine-data importer 🟡 Implemented — live checks pending v0.1.2 fixes import temporary storage. Multi-ESP discovery remains #9; explicit same-machine EFI/FDR backup is the workaround.
Authentication broker and PAM 🟡 Final fallback checks pending PAM stayed unchanged. Sudo fallback has prior proof; final-candidate Polkit/lock broker-down checks remain.
Touch Bar renderer and controls 🟢 Current-session controls accepted Controls and HUDs work. Fixed missing Omarchy session environment locally; next-login persistence still needs checking.
Ambient-light sensor ⚪ Planned — post-v1 Expose the iBridge sensor through Linux IIO after v1; automatic brightness stays consumer-owned.
Native Linux fingerprint APIs 🟢 Signed pair — match verified Published pair: libfprint 1.94.100-11 + fprintd 1.94.5-8. Revisions changed; fingerprint protocol did not. Earlier live verification retained.
General Secure Enclave keys ⚪ Planned — post-v1 research Prove P-256 operations first, then design an authenticated generate, public-key, sign, derive, and delete broker under a separate threat model.
Packaging and distribution 🟢 Public prerelease available v0.1.3: one build; install/upgrade/removal checks passed. Public package/database signatures and bytes verified.
Release and security 🟡 Phase 5 — stable gate open Repository and signed Arch packages are public. Remaining hardware/security checks stay open.

Next validation

  • Confirm broader 14,3 coverage; investigate the reported 14,2 relay loop and lid failure.
  • Prove automatic/backup import, including idle versus in-flight authentication.
  • Finish Polkit/lock broker-down password fallback, seat revocation and cross-machine xART checks.
  • Check the HUD startup correction after next login; finish security/provenance review and tagged stable-release work.

Planned Omarchy installer PR

Installer preservation/onboarding stays a separate PR. Optional Omarchy runtime integration is being extracted as its own package (#6); the reusable fingerprint TUI stays separate from both.

Change Status Latest update
Supported-model detection 🟢 Complete — implemented privately Detection accepts only MacBookPro13,2, 13,3, 14,2, and 14,3 with the exact Apple vendor string.
Apple EFI source discovery and hard stop 🟢 Complete — implemented privately The installer scans every local disk read-only and opens recovery guidance when no valid EFI/APPLE source exists.
Whole-disk layout 🟡 In progress — private implementation The plan preserves every target Apple ESP and creates a separate 2 GiB Omarchy ESP plus root in the largest safe region.
Free-space and unattended installs 🟢 Complete — implemented privately Existing Apple ESPs stay untouched, and cidata or deferred installs use the same protection checks.
Pre/post preservation proof 🟡 In progress — private implementation The installer compares geometry, PARTUUID, and raw SHA-256 before and after without logging or persisting them.
First-boot machine-data import 🟢 Complete — implemented privately Private Omarchy wiring runs one automatic import and offers one failure-only retry.
Recovery and retry UX 🟢 Complete — implemented privately Failures name unavailable T1 features and offer one deterministic retry; success stays silent.
Validation and PR readiness 🟡 In progress — migration implemented Fresh setup and legacy PAM migration are private and test-clean; real-install preservation proof and owner review remain.
Publication ⚪ Later — separate PR Omarchy installer/onboarding remains private and separate; it does not block public T1Bridge prerelease downloads.

Xudong Guo External contributor

Does this task already have a PR or a corresponding code repository?

Boyd Vintage Apples

Xudong There's a private repo, not public yet. Want to have it at an installable state where Touch ID and the Touch Bar "just work".

Close to that, but not quite there yet. I have my agent update the status as we go.

Xudong Guo External contributor

Boyd Can I join in this repo? Perhaps my machine and agent could accelerate the process.

Boyd Vintage Apples

It's coming together now and will be public shortly. I'll be posting it here first rather than making a big splash so that I can get feedback. Yours would be genuinely appreciated.

It's been so in flux I haven't wanted to waste anyone's time building on shifting sand, but it's starting to firm up.

I have it working with native Linux fingerprint enrollment, etc. I want it to feel like a nice "all-in-one" solution for the T1 owners out there.

Not trying to be withholding. Just want to make sure what I present is worth the time for other people to try to build on.