Code signing policy

Free code signing for Windows is provided by SignPath.io, with a certificate by the SignPath Foundation (once Null's application is accepted; until then, Windows builds are not signed).

What is signed

Only null.exe as released on Null's GitHub releases page: built from the tagged source in this repository by its public release workflow on GitHub Actions, never on a person's own computer. Nothing from other projects is signed with Null's certificate.

Team roles

RoleWho
Committers and reviewersShortPlanet3058
Approvers (who approve each signing)ShortPlanet3058

Changes reach a release only through pull requests into dev, then into main, each built and tested by CI on macOS, Windows and Linux; a release is a tag on main.

Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. See Null's privacy statement for what it contacts when asked.