Only signed installers go public
Unsigned artifacts are restricted to development and private QA. A public installer must come from the trusted release workflow and pass Windows signature verification before it appears on this website.
Release integrity
Code signing policy.
Public Windows installers are built from this repository, signed through an approved release process, and verified before they are distributed.
Clear ownership and approval
The Mayhempedia repository owner is the release approver. Contributions from non-maintainers are reviewed before merge, and everyone with repository or signing access is required to use multi-factor authentication.
Verifiable build origin
Release candidates are built by a controlled GitHub Actions workflow from the tagged repository source. The matching version, release notes, and artifact are checked before any signing approval.
Open-source signing application
Mayhempedia has applied for SignPath Foundation signing. If accepted, releases will state: Free code signing provided by SignPath.io, certificate by SignPath Foundation.