diff --git a/CHANGELOG.md b/CHANGELOG.md
index bdc1b95..bb07826 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## Unreleased
+
+- **New Mac app identifier:** the desktop app's identifier is now `com.extantape.onetaxonomy`. macOS treats it as a new app, so the first launch after updating starts with default settings and asks again for any permissions it needs. This happens once. Your files are untouched. The shared OneOrigin guidelines now say every tool's identifier is `com.extantape.<tool>`.
+
 ## 0.1.0-alpha.4
 
 - **New home and package names:** the packages now publish under `@extantape`: `@extantape/onetaxonomy-core`, `@extantape/onetaxonomy-import`, `@extantape/onetaxonomy-layout`, `@extantape/onetaxonomy-react`, `@extantape/onetaxonomy-education` and `@extantape/payload-plugin-onetaxonomy` (still not on npm). The repo now lives at [ExtantApe/OneTaxonomy](https://github.com/ExtantApe/OneTaxonomy). The old names of the five published packages are deprecated, with a pointer to these. To move, change the scope in your `package.json` and imports; nothing else in the API changes. EXTANT APE owns and licenses the tools, and the license is unchanged.
diff --git a/apps/studio/src-tauri/tauri.conf.json b/apps/studio/src-tauri/tauri.conf.json
index aadb0a8..2e212de 100644
--- a/apps/studio/src-tauri/tauri.conf.json
+++ b/apps/studio/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "OneTaxonomy",
   "version": "0.2.0",
-  "identifier": "org.captiveorigins.onetaxonomy",
+  "identifier": "com.extantape.onetaxonomy",
   "build": {
     "beforeDevCommand": "pnpm dev",
     "devUrl": "http://localhost:1420",
diff --git a/brand/oneorigin.lock b/brand/oneorigin.lock
index 1174c33..a9447aa 100644
--- a/brand/oneorigin.lock
+++ b/brand/oneorigin.lock
@@ -4,13 +4,13 @@
     "repo": "https://github.com/ExtantApe/OnePhylogeny",
     "branch": "main",
     "path": "docs/oneorigin",
-    "commit": "42cf273b07c7f67b3f6736124bd72cb7a7937a43"
+    "commit": "2df2fb64583635b60569f83da32d671aa7588827"
   },
   "copy": "brand/oneorigin",
   "files": {
     "README.md": "sha256:f8afbcd53fe2d32e5e85947cab9e0542e44073fe01e2fd1047ef6209276d5994",
     "brand.md": "sha256:d0ae807c738efecd6235444037d73f9f1a26d9495493e597a911a022a657a6ac",
-    "guidelines.md": "sha256:6f537a0aa4d30dbff6f9004b33d4dfe1f0a51ece985e0707a51b8d80ac80bddb",
+    "guidelines.md": "sha256:6fb2814b66e44ed27d75f723a835c9d16772c925476fbe8da9434485284d221c",
     "icons/block.svg": "sha256:0ebfc31700e1e6ae1ed4c795fc83741503dcb42d73675d120ba3d6d9a0106c12",
     "icons/connector.svg": "sha256:3de223d5c838932db727dd05cd7b5469ef2a41f63b1c8e1543419dc19990f85f",
     "icons/heart-badge.svg": "sha256:65bad1c87b8537e6f7db0854a12ee83fb1b8be10ce9a48d103ca6503c96589db",
diff --git a/brand/oneorigin/guidelines.md b/brand/oneorigin/guidelines.md
index b858329..667017e 100644
--- a/brand/oneorigin/guidelines.md
+++ b/brand/oneorigin/guidelines.md
@@ -192,7 +192,7 @@ Each decision with alternatives gets an ADR. Limitations are kept current, and n
 
 - Tag `desktop-vx.y.z` builds a universal app and publishes a GitHub release with a DMG, plus `latest.json` once the tool has a signing key.
 - Each tool has **its own** updater key in `~/.tauri/<tool>.key`, stored as the repo secret `TAURI_SIGNING_PRIVATE_KEY`. Keys are never shared between tools or committed.
-- App identifiers are `org.captiveorigins.<tool>`.
+- App identifiers are `com.extantape.<tool>`.
 - Notarization is a shared goal, and when one tool adds it, the other apps follow.
 
 ## 8. Working together