Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Windows releases of Margin are built from the public repository by its release workflow on GitHub Actions and signed there. Nothing is built or signed by hand. Signing is being set up, so releases made before it is in place are unsigned; a signed margin.exe shows SignPath Foundation as its publisher.

#Team roles

Committers and reviewers: arxhr007
Approvers: arxhr007

Each signing request for a release is approved by hand in SignPath before the signed file is published.

#Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. See the privacy policy.

#Checking a signed release

powershell

Get-AuthenticodeSignature .\margin.exe | Format-List Status, SignerCertificate

Status should be Valid, with SignPath Foundation as the signer.