Should I run a benchmark first?
Yes. Run one before you change anything. Keel keeps it as your baseline, so after each change you can run it again and see exactly what improved on your Mac.
Why does Keel ask for my password?
Energy settings, the firewall and DNS need root. Keel batches every root step and asks once. With the optional helper installed, it doesn't ask at all.
What can the helper do?
Only a fixed list of operations, such as specific pmset keys, two sysctls, DNS servers, the firewall and Time Machine exclusions. It accepts requests only from Keel signed by the same developer and never runs a shell. Remove it from Settings at any time.
Does Keel need Full Disk Access?
No. With it, Cleanup can also measure the Trash, Mail downloads and device backups.
How do I undo everything?
Use Restore everything in Settings, or switch off each tweak that shows On. Keep ~/Library/Application Support/Keel/backups/ until you're done. Deleted caches are rebuilt by their apps.
How do I verify the download?
Compare the checksum on the release page, then ask Gatekeeper:
shasum -a 256 ~/Downloads/Keel-*.dmg
spctl --assess --type open --context context:primary-signature -vv ~/Downloads/Keel-*.dmg
Can I build it myself?
Yes. Clone the repository and run swift run Keel. The read me has the full steps.