Release security

Apple release trust

The application and its DMG are signed with the CYBEXO LLC Developer ID identity. Both are submitted to Apple, accepted with zero notarization issues, and stapled so Gatekeeper can validate the ticket.

Independent package verification

Intel and Apple silicon packages pass separate architecture, signature, entitlements, runtime, privacy, contents, and release-policy checks. The current release passed 716 of 716 controls for each architecture.

File integrity

Published SHA-256 fingerprints let technical users verify that the downloaded bytes match the locked release artifacts.