# Review changes from another Mac

> Review synced rules and API requests before they run on your Mac, answer the "Did you do this?" prompt about your account's computers, and fix sync issues.

Source: https://docs.subcloak.com/cloak-proxy/cloud/review-changes/

Added in Cloak Proxy 0.6.0.

Some synced changes could hurt you if they ran on your Mac without you knowing: a script, a rule that reads local files, a request that now sends your saved credentials to a different server. Personal Cloud holds those back until you review them on each Mac. It also asks you directly when your account's list of computers changes in a way none of your other computers can vouch for.

Everything you need to look at collects under **Settings › Cloud › Sync issues**. Click **Review…** to open the list.

{/* TODO(screenshot): cloud-settings-roster-question-light (This Mac with the "Uploads paused: did you do this?" row and Answer…, and the Sync issues section). */}

## The Sync Issues list

The list has four columns: **Item**, **What happened**, **Devices** (the computer the change came from) and **When**. Select an item to see what happened and what you can do.

| What happened | Meaning | What you can do |
|---|---|---|
| **Did you do this?** | Another computer changed your account's computers or keys. Uploads from this Mac are paused. | **Yes, I did this** or **No**. See [Did you do this?](#did-you-do-this) |
| **Review changes** | An API client item changed on another Mac. It's used here without your variables and credentials until you approve it. | **Approve Change** or **Keep Reviewing**. See [API requests](#api-requests-and-other-workspace-items) |
| **Changed on two computers** | A conflict, or a rule from another Mac that waits to be switched on. | **Keep This Mac's**, **Keep Other** or **Keep Both**. |
| **Couldn't apply here** | A change couldn't be written on this Mac, or this Mac is waiting for the account's current key. | Usually clears by itself. See the item's text. |
| **Refused by the server** | The server didn't take an upload, for example because it's over your plan's storage. | See [Troubleshooting](https://docs.subcloak.com/cloak-proxy/cloud/troubleshooting/). |
| **Another computer** | One of your computers hasn't synced in a week, or hasn't confirmed a removal. | Open Cloak Proxy on that computer. |
| **Integrity warning** | Something the server sent didn't check out. Sync stops for what's affected. | Contact support. See [Integrity warnings](#integrity-warnings). |

## Rules that act on your Mac

Scripts, Map Local, Map Remote, DNS Spoofing, Rewrite rules, mock sets and failure scenarios can run code, read files on your Mac, send traffic elsewhere or answer for a server. When one of them is new or changed on another Mac, it arrives here **switched off**. The item says, for example, "Review changes from MacBook Air: this Map Local rule is off on this Mac until you switch it on."

To use it:

1. In **Settings › Cloud › Sync issues**, click **Review…** and select the rule. The **OTHER COMPUTER** column shows what arrived.

2. Check what it does: the file a Map Local rule reads, where a Map Remote rule sends traffic, what a script runs.

3. Click **Keep Other** to switch it on here. **Keep This Mac's** or **Keep Both** leave it off and clear the item.

You can also switch the rule on yourself in the [Tools window](https://docs.subcloak.com/cloak-proxy/tools/overview/). A rule moved by another Mac out of a folder that's off here stays off too, with the same kind of item.

An external proxy that another Mac adds or changes also arrives off: "Review changes from MacBook Air: the external proxy is now proxy.example.com:8080. It's off on this Mac until you switch it on".

{/* RECHECK(round 6): the re-review asked for Block List, Allow List, breakpoints, Network Conditions and alerts to arrive
    switched off too (today they arrive in the state the other Mac set). Update this section if that lands. Also check whether
    rule reviews get their own "Review changes" row with Approve Change, instead of showing as "Changed on two computers". */}

## API requests and other workspace items

When a request, folder, collection, environment, dataset or spec changes on another Mac, it gets its own **Review changes** item: "Review changes from MacBook Air: *Get order* changed there. Until you review it here, it's used without variable values or stored credentials, and monitors and scheduled flows wait."

Until you approve it, sending that request on this Mac uses no environment, global, `.env` or vault values and none of this Mac's stored credentials. That way, a request whose URL was changed somewhere else can't carry your tokens to a new server.

1. Select the item. It shows the **Item**, which computer it was **Changed on** and when it **Arrived**.

2. Open it in the API client and check where it sends data and what its scripts do.

3. Click **Approve Change** to use it normally on this Mac, or **Keep Reviewing** to move on to the next item and come back later.

Each change is its own item. Approving one never approves another, or a later change to the same request.

{/* TODO(screenshot): cloud-issues-change-review-light */}

### Secret values and the active environment

Two workspace changes are held for review even though they don't change a request:

- **A secret value changed on another Mac.** The environment, globals or request that holds it is marked, and the review names which secrets changed and on which computer. Until you approve it, that environment isn't used and monitors and scheduled flows that use it wait. That way a secret such as a webhook URL can't be pointed at a new server behind your back.
- **The active environment was switched on another Mac.** The review says **Active environment**, with the old and new environment and who switched it. Until you approve it, no environment values are used on this Mac.

Each review names the other computer with its short id from your account's verified list of computers, for example "MacBook Air (id 1a2b3c4d)", and warns if two of your computers use the same name.

### Scripts and MCP commands

If another Mac changed scripts, script packages or MCP server commands in a workspace, they're turned off on this Mac. The API client shows **Scripts in this workspace are turned off until you trust it**. Read the changes, then click **Trust**. Code that's exactly what you trusted before keeps running.

## Did you do this?

Your account's list of computers decides who can read your data. If another computer adds a computer, removes one, changes the account key or replaces your Recovery Kit, your Mac checks that one of your other computers saw the same change. When none of them can confirm it, your Mac asks you.

**Settings › Cloud › This Mac** shows **Uploads paused: did you do this?** at the top, with **Answer…**. Click it, or open **Review…**, to see **Your account's computers changed**. The text names each computer with the name it chose, a short ID and when it was added, for example: "MacBook Air (id 3f9c21a0, added Oct 25, 2026 at 9:14 AM) removed Studio Mac (id 8b02e4d1, added Oct 25, 2026 at 9:02 AM), changed the account key."

{/* TODO(screenshot): cloud-issues-roster-question-light */}

| Answer | What it does |
|---|---|
| **Yes, I did this** | Confirms only the change shown. Uploads resume. If the change grows before you answer (another computer added, another removal), you're asked again. |
| **No** (the default) | Uploads from this Mac stay paused and its data stays as it is. Downloads still work. Contact support. |

Answer **Yes** only if you made the change yourself, on one of your own computers, and recognize every computer named. Computer names are chosen by the computers themselves, so check the IDs and dates too.

> **If you didn't do it:**
> Choose **No**, keep the Mac you're on, and contact support. Someone may have one of your computers, or the server may be showing your Macs different things. Don't add or remove computers until it's sorted out. If you think a computer was stolen, [remove it](https://docs.subcloak.com/cloak-proxy/cloud/remove-a-mac/) from a Mac you trust, or [use your Recovery Kit](https://docs.subcloak.com/cloak-proxy/cloud/recovery-kit/#get-back-in-with-the-kit).

### Waiting for another computer

If one of your other computers can confirm the change but hasn't yet, you get an integrity item instead: "Uploads paused: MacBook Air removed Studio Mac, changed the account key, and Mac mini hasn't confirmed it yet. Your changes wait here until it does: open Cloak Proxy there." Open Cloak Proxy on the computer it names, and uploads resume once it has synced. Your changes wait on this Mac meanwhile.

## Integrity warnings

Your Macs check everything the server sends: each change's signature, the order of the change log, and the list of computers. When something doesn't add up, sync stops for what's affected rather than guess, and an **Integrity warning** says what happened. Examples:

- "Sync stopped: the server showed this Mac a different history from MacBook Air's (a fork). Contact support."
- "Sync stopped: another Mac has seen changes the server doesn't show this Mac (withheld changes). Contact support."
- "Sync stopped at an item that failed verification: … Contact support if this keeps happening."
- "Uploads paused: another Mac, or the account's keys, show a newer device list than the server gives this Mac. Your changes wait here. Contact support if this lasts."

A red **Check your account's computers** row at the top of **This Mac** means a removal or approval was stopped for the same kind of reason. Its text says what happened.

These are rare. They mean the server, or something between you and it, isn't behaving as it should. Your data on each Mac is unaffected. Contact support at `hello@subcloak.com` with the text of the warning.

## Notes about your other computers

Items under **Another computer** don't stop sync:

- "MacBook Air hasn't synced since …": it hasn't been online for a week.
- "MacBook Air hasn't confirmed that a device was removed from the account. The server may be hiding the removal from it…": open Cloak Proxy there and check **Settings › Cloud**.

## Related

  - [What syncs](https://docs.subcloak.com/cloak-proxy/cloud/what-syncs/): What stays on each Mac and how conflicts merge.
  - [Remove a lost or stolen Mac](https://docs.subcloak.com/cloak-proxy/cloud/remove-a-mac/): Take a computer off your account.
  - [Security and privacy](https://docs.subcloak.com/cloak-proxy/cloud/security/): Why your Macs check the server.
  - [Troubleshooting](https://docs.subcloak.com/cloak-proxy/cloud/troubleshooting/): Fix sign-in, sync and billing problems.