Intercepts system processes for your approval
Version: 1MFP Interceptor allows you to see what processes on your Mac OS X computer are making system calls to change things on your disk, in real time, and deny the processes the ability to make these changes.
Operating System: Mac OS X
By "change", I mean add/delete/write; by "see things" I mean by process name, user ID, and by path.
The codename for this project is "interceptor". If you are into this kind of thing and are interested in alpha or beta testing this software, shoot me an e-mail at daver at geeks dot org, or post a comment. You should probably be pretty familiar with the underpinnings of OS X to participate.
There are some sharp caveats to be aware of with this software and some things it'll never do. But I think it's pretty cool, and of course I plan on making the source code available when it's ready. (Would you load a kext into *your* kernel without the source? I wouldn't).