RejectProof: A Preflight Check for App Store Rejection

Field notes

The scan runs locally in a browser Web Worker rather than through a file-upload endpoint. Before transmission, the page lets users inspect the JSON summary; it says values outside a small Apple-key allowlist are redacted and that executable strings are represented through keyword counts and short snippets. The checks also inspect embedded framework folder names, privacy-manifest keys, profile expiry, team ID, and Apple entitlements.