Code signing policy

This page describes how AppBlips builds and signs its release binaries.

​

Free code signing

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

​

What gets signed

Every signed release is built automatically from the TechMitten/app-blips repository by the Desktop workflow, then signed before it is published. Signing covers the Windows installer and the application executable.

​

Team roles

• Committers and reviewers: repository contributors
• Approvers: the project owner, @TechMitten

Each signing request is reviewed and approved by a project owner before it is submitted, and every release is built from reviewed source in the repository above.

​

Privacy

AppBlips does not transfer any information to other networked systems unless you specifically request it — for example, when you connect an AI provider in Settings → AI. See the FAQ for details.