mifrd, verifies checksum and cdhash, installs ~/.mifr/bin/mifr, and starts the LaunchAgent. It then walks you into Apple attestation. Linking the Mac to your account is a separate step. When install finishes, run:
~/.mifr/account.json.
Daily serve:
mifr start without a TTY opens a model picker. Piped install skips the picker and starts qwen3-4b so curl | sh never hangs.
The service is a per-user LaunchAgent. It starts at login and restarts on crash. For an always-on headless Mac, enable automatic login so that user session exists after a reboot. A login-less boot would need a root daemon, which the per-user Secure Enclave key rules out.
From a checkout, developers who want to build instead of download can run scripts/mifr-provider install. That path needs the pinned Xcode and Metal toolchain. Operators should use the curl installer.