Signed, notarized, self-updating
Universal binary for Apple silicon and Intel. Updates carry our signature on top of Apple's notarisation, because the two answer different questions: notarisation says the file came from us and is clean, the update signature says this particular update is the one we published — a swapped file is refused even when it is served from our own domain.



