A lightweight macOS detection sidecar that hooks into Santa’s Endpoint Security telemetry, runs CEL detection rules locally, and only ships signals to a tiny backend. basically a poor man’s macOS EDR for home and small fleets!