---
id: "GOAL-008"
type: "goal"
title: "Security check module (SIP, Gatekeeper, XProtect, FileVault)"
status: "locked"
date: "2026-03-22"
depends_on: []
unlocks: []
---

New check module from landscape research finding 0006. Check csrutil (SIP status), spctl (Gatekeeper), XProtect definition freshness, FileVault encryption status. Simple, high-value, low-effort.
