#+title: domaindig

* what
local-first ios domain inspection toolkit. dns, web, ownership,
monitoring, reporting, audit. takes a point-in-time snapshot of a
domain, normalizes it into a DomainReport, and keeps data on device
unless you export, share, or sync it.

* does
- inspects dns records, email security, tls certs, http headers,
  redirects, ip geolocation, reachability, open ports, rdap,
  ownership, subdomains, availability
- DomainReport output used by the ui and exports
- history snapshots with change summaries, risk scoring, notes
- dashboard, watchlist, monitoring, workflows, batch results,
  integrations, data portability
- audit mode: sessions, checklists, reviewer notes, findings,
  evidence snapshots, timelines, markdown/json/pdf export
- backup and restore for tracked domains, history, audit sessions,
  workflows, monitoring, settings, feature metadata
- optional local api for automation-compatible output

* privacy
app data lives in on-device storage. network requests go out only
to run the checks you asked for or the resolver you configured. no
hosted backend required.

* build
needs xcode with a current ios sdk and a simulator or device.

#+begin_src sh
git clone https://github.com/krazywarez/domain-dig.git
#+end_src

open DomainDig.xcodeproj, pick the DomainDig scheme, build and run.

build check:

#+begin_src sh
xcodebuild -project DomainDig.xcodeproj -scheme DomainDig \
  -destination 'platform=iOS Simulator,name=iPhone 16' build
#+end_src

* tests
deterministic core coverage lives in DomainDigTests:

#+begin_src sh
xcodebuild test -project DomainDig.xcodeproj -scheme DomainDig \
  -destination 'platform=iOS Simulator,name=iPhone 16' \
  -only-testing:DomainDigTests
#+end_src

the scheme's test action also runs the DomainDigUITests
accessibility audit.

#+begin_src sh
./Scripts/audit-a11y.sh          # oldest supported + newest
./Scripts/audit-a11y.sh floor    # oldest only (~85s)
#+end_src

findings are reported, not enforced. optional pre-push hook:

#+begin_src sh
git config core.hooksPath .githooks
#+end_src

* docs
#+begin_example
local api:      Docs/local-api.txt
data migration: Docs/data-migration.txt
accessibility:  Docs/ACCESSIBILITY.txt
security:       SECURITY.txt
#+end_example

* license
0bsd. see LICENSE.

* contact
- root@krz.sh