> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usepitboard.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Code signing policy

> Which Pitboard files are signed, who approves a signature and how a signed file is built.

## What is signed

| Files | Signed by |
| - | - |
| The macOS app and command line | A Developer ID of team `D7HJ5TFYCU`, and notarised by Apple |
| Windows files Pitboard builds, from the first signed release on | SignPath, with a certificate issued to SignPath Foundation |
| Windows pre-releases published before that | Not signed |
| Linux files | Not signed |
| Files Pitboard did not build | Their own publishers, or not signed |

There is no Windows release, so SignPath has signed no Pitboard file. [Verify a download](/install/verify) checks the macOS signatures.

Free code signing provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org).

## Roles

| Role | Responsibility | Members |
| - | - | - |
| Committers and reviewers | Change the source code without another person's review, and review every pull request from anyone else before it merges | Ngo Quoc Dat, [`datlechin`](https://github.com/datlechin) on GitHub |
| Approvers | Approve or refuse each signing request | Ngo Quoc Dat, [`datlechin`](https://github.com/datlechin) on GitHub |

Each member signs in to GitHub and to SignPath with multi-factor authentication.

## How a Windows file is signed

The release workflow, [`release.yml`](https://github.com/datlechin/pitboard/blob/main/.github/workflows/release.yml), builds each Windows release on GitHub-hosted runners, from the commit its `v*` tag names, with no cache. SignPath checks where the files came from, and signs them only after an approver approves the request.

## Privacy

[Security and privacy](/security) is Pitboard's privacy policy: it lists each request Pitboard makes and what the request carries. What Pitboard sends Anthropic, OpenAI and GitHub also falls under [Anthropic's privacy policy](https://www.anthropic.com/legal/privacy), [OpenAI's privacy policy](https://openai.com/policies/privacy-policy/) and [GitHub's privacy statement](https://docs.github.com/site-policy/privacy-policies/github-general-privacy-statement).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.