Before changing anything, the script prints this plan and asks Continue? [y/N].

It will

• Install Xcode Command Line Tools and Homebrew if missing, and add one line to ~/.zprofile
• Install only the apps you picked, with Homebrew (already-installed ones are skipped)
• If you enabled them: set your Git name and email, create ~/.ssh/id_ed25519 only if you don't have one, and change the macOS settings you ticked (originals backed up first)
• At the end, offer to save this Mac's app list (Homebrew package names only) to a private page. Press Enter to save, type n to skip, or run it with --no-sync

It will never

• Delete or overwrite your files
• Run sudo itself (Homebrew may ask for your password for some apps)
• Send anything except that app list: no hardware IDs, usernames or files

Checks that back this up

• The launcher verifies the script's SHA-256 fingerprint and refuses to run it if it changed in transit
• Every release is tested by running the script in a sandbox with every option on, and failing the build if it runs any command, writes any file or contacts any server outside a short allowlist

Read it and verify it yourself

• The installer, launcher, app catalog and these safety tests are open source (MIT): github.com/initmac-app/initmac
• Line 2 of your script names the exact commit it was built from. Check it with python3 verify_script.py initmac-install.py (instructions in the repo's README)

Undo

• macOS settings: run the same command with --restore-defaults
• Apps: brew uninstall <name> (or --cask for apps)
• Saved app list: --forget-device