Drop a package, review exactly what it would change, and install it through pacman as a real Arch package. When something is not compatible, the exact blocker is shown before anything changes.
Foreign files never land on the system directly. The payload is inspected in a sandbox, rebuilt into a validated native package, and installed through pacman with a root-owned manifest written first.
Drop a .deb or .rpm and see name, size, readiness and every change before installing.
Packages are inspected in bubblewrap with no network, no home access and strict limits.
The payload is rebuilt into an Arch package and installed, updated and removed through pacman.
Reads ELF and interpreter data directly; no ldd and no vendor code runs during inspection.
A root-owned manifest is written before pacman runs, so every file is accounted for.
Per-user login startup or a background service, both off by default and tracked by hash.
