Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Status: the application to the SignPath Foundation open-source program is in progress. Releases up to and including 1.0.1 are not signed. This page describes how Windows releases are signed once it is approved; the notes of each release say whether its files are signed.

What is signed

Only files built from the DeltaF Studio repository by its public release workflow on GitHub-hosted runners:

• dfstudio.exe (desktop app) and dfs.exe (command-line solver), signed before they are packed;
• the Windows installer, DeltaF_Studio-<version>-windows-x64-setup.exe;
• the portable zip contains the same signed executables.

CoolProp.dll is a third-party library (CoolProp, MIT licence) and is shipped unsigned, as published by its authors. The macOS and Linux packages are not part of this program.

How a release is signed

1. A maintainer pushes a version tag. The release workflow builds the program from that commit, without build caches, and runs the tests.
2. The workflow submits the unsigned files to SignPath, which checks that they were built by this repository's workflow and that their product name and version match the release.
3. An approver reviews and approves the signing request. Nothing is signed without this manual approval.
4. The signed files are published on the releases page with their SHA-256 checksums.

The signing key is kept by SignPath in a hardware security module; the maintainers never hold it.

Team roles

DeltaF Studio is maintained by one person, who holds all three roles.

• Committers and reviewers (change the source code; review every pull request from other contributors): dafer238
• Approvers (approve each signing request): dafer238

All team members use multi-factor authentication on GitHub and SignPath. Contributions from anyone else reach the repository only through reviewed pull requests.

Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. DeltaF Studio has no telemetry, no update check and no account. Its only network access is opening a web page in your browser when you click a link. The bundled CoolProp library computes fluid properties locally and does not use the network either.

Installation and removal

The installer lists what it changes (install folder, Start menu entry, PATH, file associations) and lets you turn each optional change off. It registers an uninstaller under Settings › Apps › Installed apps, which removes the program, its PATH entry and its file associations. The portable zip changes nothing on the system.

Reporting a problem

If you find a signed file that was not built from this repository, or any other misuse of the certificate, open an issue or contact SignPath Foundation.