Installation and behavior details

Current distributed version: 0.1 · Updated July 21, 2026

Halothane is signed and notarized by Apple. Installation requires your administrator approval. The installer does not silently add unrelated software.

What is installed

/Applications/Halothane.app — the menu-bar interface.
/Library/LaunchDaemons/com.sfoln.Halothane.Helper.plist — a privileged system helper that monitors process memory across login sessions.
/Library/LaunchAgents/com.sfoln.Halothane.GUI.plist — starts the menu-bar interface for logged-in users.
/Library/Application Support/Halothane/ — local configuration.

Why a privileged helper is needed

macOS process ownership boundaries prevent an ordinary menu-bar app from supervising every user's processes. The root helper reads process memory usage and performs only the process-control actions exposed by Halothane. The menu-bar app communicates with it through a local, code-signature-validated XPC connection.

What process control means

Halothane samples each process's physical memory footprint and can warn when a configured size or growth threshold is crossed. Automatic threshold pausing is off by default. If enabled, Halothane pauses the affected process tree with the standard POSIX SIGSTOP signal. Resume sends SIGCONT, allowing the process to continue where it stopped.

At critical macOS memory pressure, the current version may automatically pause the largest non-exempt process to protect system stability. It does not automatically force-quit processes. You can exempt apps or use custom thresholds.

Every paused process is listed in the Halothane menu with its memory size. Resume, Quit, and Force Quit are deliberate actions you choose there; Resume lets the process continue exactly where it stopped.

Turning automatic action off without uninstalling

Automatic threshold pausing stays off unless you enable it, globally or per app.
The critical-pressure action is controlled by the Settings toggle “Pause largest process when system memory is critical.”
Pause monitoring in the menu disarms all warnings and automatic pauses for 15 minutes, 1 hour, 4 hours, or until you resume monitoring.
Individual apps can be exempted from all automatic action with per-app rules.

What Halothane does not do

It does not inject code into other applications.
It does not download or execute additional software.
It does not collect credentials or keystrokes.
The app has no telemetry and does not send process names, memory usage, or personal data off your Mac.

Verification and source review

The distributed installer is signed with an Apple Developer ID Installer certificate and carries an accepted Apple notarization ticket. The application inside is signed with an Apple Developer ID Application certificate. The source is available for review on GitHub under the PolyForm Noncommercial License 1.0.0.

Removal

See the complete uninstall instructions, including an inspectable removal script and manual path list.

← Back to halothane.app