# Code Signing

Draft for review by qualified legal counsel. Not final legal advice.

GGSight release artifacts should be signed with a protected code-signing certificate.

Signing keys must not be stored in the repository, desktop app, installer, logs, or public configuration files.

Builds should record artifact hash, signing identity, timestamp, version, release notes, and rollback version.


