Release integrity

Code signing policy.

Mayhempedia publishes its Windows beta through GitHub Releases with a clear release source and checksum. Code-signing approval is still pending, so the current beta is transparently marked as unsigned.

01

Current beta status

The current Windows beta is not yet code-signed. Windows may display an “Unknown publisher” warning. Download it only from the official Mayhempedia page or the matching GitHub Release, and compare the SHA-256 checksum before running it.

02

Clear ownership and approval

The Mayhempedia repository owner is the release approver. Contributions from non-maintainers are reviewed before merge, and everyone with repository or signing access is required to use multi-factor authentication.

03

Verifiable build origin

Release candidates are built by a controlled GitHub Actions workflow from the tagged repository source. The matching version, release notes, and artifact are checked before any signing approval.

04

Code-signing application

Mayhempedia has applied for SignPath Foundation signing. If accepted, future releases will state: Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Read the full policy on GitHub