krz/domain-dig

local-first ios domain inspection toolkit. dns, web, ownership, monitoring, reporting, audit. takes a point-in-time snapshot of a domain, normalizes it into a DomainReport, and keeps data on device unless you export, share, or sync it.

• inspects dns records, email security, tls certs, http headers, redirects, ip geolocation, reachability, open ports, rdap, ownership, subdomains, availability
• DomainReport output used by the ui and exports
• history snapshots with change summaries, risk scoring, notes
• dashboard, watchlist, monitoring, workflows, batch results, integrations, data portability
• audit mode: sessions, checklists, reviewer notes, findings, evidence snapshots, timelines, markdown/json/pdf export
• backup and restore for tracked domains, history, audit sessions, workflows, monitoring, settings, feature metadata
• optional local api for automation-compatible output

app data lives in on-device storage. network requests go out only to run the checks you asked for or the resolver you configured. no hosted backend required.

needs xcode with a current ios sdk and a simulator or device.

git clone https://github.com/krazywarez/domain-dig.git

open DomainDig.xcodeproj, pick the DomainDig scheme, build and run.

build check:

xcodebuild -project DomainDig.xcodeproj -scheme DomainDig \
  -destination 'platform=iOS Simulator,name=iPhone 16' build

deterministic core coverage lives in DomainDigTests:

xcodebuild test -project DomainDig.xcodeproj -scheme DomainDig \
  -destination 'platform=iOS Simulator,name=iPhone 16' \
  -only-testing:DomainDigTests

the scheme's test action also runs the DomainDigUITests accessibility audit.

./Scripts/audit-a11y.sh          # oldest supported + newest
./Scripts/audit-a11y.sh floor    # oldest only (~85s)

findings are reported, not enforced. optional pre-push hook:

git config core.hooksPath .githooks

local api:      Docs/local-api.txt
data migration: Docs/data-migration.txt
accessibility:  Docs/ACCESSIBILITY.txt
security:       SECURITY.txt

0bsd. see LICENSE.

• root@krz.sh