Writing intelligence that never leaves your machine.

mae is the CLI for writing-fingerprint extraction, dynamic redaction-at-rest, and signed publish pipelines. Composes with verum for custody. Composes with appmaestro for the visual surface.

Install CLIbash, one line Open Obsidian extensionappmaestro.ai

Install on macOS or Linux

curl -fsSL https://mae.sh/install | bash

Or brew install ramene/tap/mae. Or build from source. The CLI is the runtime. The Obsidian extension at appmaestro.ai is the visual surface.

Voice-fingerprint extractor

5-layer privacy pipeline locks your literary voice across 8 modes at first draft. Stylometric drift detected per save. Authorship is provable, not asserted.

Dynamic redaction-at-rest

PHI and entity patterns scrubbed on disk in real time. The vault file you read is the vault file the audit chain promises. No unredacted intermediates.

Signed publish pipeline

Touch ID write-gate before publish. Every commit a cryptographic claim. Reader verifies against your public profile. Editor handoff revocable end-to-end.

Problems we solve

Writing, framed three ways.

What mae actually delivers — the writing primitives that compose into a publish pipeline.

Fingerprint

Voice-fingerprint extractor
5-layer privacy pipeline. 8 voice modes locked at first-draft. Pattern-anchor map persisted with operator signature.
Voice-mode locks
First-draft literary fingerprints captured per mode. Stylometric drift detected on every save.
Corpus-anchored claim
Every artifact ties back to a signed corpus snapshot. Authorship is provable, not asserted.

Redact

Dynamic redaction-at-rest
PHI and entity patterns scrubbed on disk in real time. The vault file you can read is the vault file the audit chain promises.
Encrypted summary, decisions, audit
safeStorage crypto module + @noble/ciphers. Three encryption envelopes for the three artifact classes.
Bulk override with redaction
Multi-select operator UI for batch redaction passes. Every override signed, logged, and rollback-recoverable.

Publish

Signed publish pipeline
Touch ID write-gate before publish. Every commit a cryptographic claim, every claim a verifiable signature.
Editor pre-publish handoff
Share the manuscript with an editor without sharing the substrate. Revocable, audit-trailed, never platform-mediated.
Signed claim export
Export a portable, verifiable proof-of-authorship envelope. Reader checks the signature against your public profile.

Audit

Operator-owned audit log
Hash-chained SHA-256 entries for every read, write, redact, publish. The log lives in your repo, not a vendor database.
On-chain anchor
Chain head anchored to an Ethereum-compatible chain via verum. Auditor verifies independently of you.
Corpus viewer with claim provenance
Inspect every artifact with its full audit history. Who signed, when, with which key, against what chain head.

Composes with

mae is the writing layer. verum holds the keys. appmaestro paints the surface.

verum

Cryptographic custody substrate

Visit

mae writes, verum encrypts. age recipients + Secure Enclave unlock, no key on disk in plaintext.
mae produces the artifact, verum signs the claim. Operator-bound authorship, reader-verifiable against a public profile.
mae redacts at rest, verum chains the entry. Every redaction is a SHA-256-linked audit record, anchored on-chain.

appmaestro

Obsidian extension and product surface

Visit

mae is the CLI runtime. appmaestro is the visual surface. Same vault, same signed publish, same audit chain.
Use mae directly from terminal, or open appmaestro for the Obsidian-native editor experience.
Editor handoff, mobile companion, publish pipeline all land in appmaestro. mae stays the writer-facing scriptable layer.

mae is the local-first writing layer of an operator-owned stack. The CLI lives at github.com/ramene/mae. The custody substrate lives at verum.sh. The Obsidian extension and product live at appmaestro.ai.