Security & the download warning

On download or first run, Windows SmartScreen may show "Windows protected your PC / unknown publisher". This appears because the current builds are not yet code-signed — it is expected for any unsigned executable, not a sign that the file is unsafe.

To proceed on a build you trust: click "More info" → "Run anyway".

How to verify integrity in the meantime: the in-app auto-updater checks a SHA-256 checksum for each release before applying it, and licensing tokens are cryptographically signed (Ed25519) and verified locally.

We're moving to signed releases (Authenticode via a trusted code-signing certificate), which removes the warning entirely once a signature has built reputation with SmartScreen.