# PrivacySweep (CLI prototype)

Secure file deletion with a proof-of-erasure report. Working prototype of
the core engine — see ../plan.md for the full product plan (browser/app
cache cleanup and the encrypted vault are still on the roadmap; this build
is the secure-delete + reporting engine only).

## Build from source

Requires Go 1.24+, no external dependencies.

    go build -o privacysweep .

Cross-compile for another platform:

    GOOS=windows GOARCH=amd64 go build -o privacysweep.exe .
    GOOS=darwin  GOARCH=arm64 go build -o privacysweep .

## Usage

    privacysweep shred <path> [<path> ...] [--passes N] [--apply] [--report FILE]

Without --apply this is a dry run: files are hashed and listed, nothing is
touched. With --apply, each file is overwritten with random data for
--passes rounds (default 3, fsync'd each round) and then removed, and a
JSON proof-of-erasure report is produced (path, size, SHA-256 of the
content before it was erased, pass count, UTC timestamp).

This cannot be undone. There is no quarantine mode for shred — that's the
point of a secure-delete tool. Test on a throwaway directory first.

## Prebuilt binaries

See ../downloads/ for prebuilt binaries (Windows/macOS/Linux) and
CHECKSUMS.txt for their SHA-256 hashes. These are unsigned indie builds —
Windows SmartScreen and macOS Gatekeeper will warn on first run, which is
expected until a code-signing certificate is in place (see the build
plan's risk section).