/* code signing */
Code signing policy.
Signing proves the Mochiboard you download is the one I built, straight from the open source code, and that nobody changed it along the way.
Who signs it
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
How a release is signed
- Every installer is built automatically by GitHub Actions from the public source code in github.com/jessawolfe-ux/mochiboard. Nothing is built by hand.
- Only software built from Mochiboard's own source code is signed.
- A person approves every release before it's signed.
- Everyone on the team uses two-step login (multi-factor authentication) for GitHub and SignPath.
Team and roles
| Role | Who |
|---|---|
| Committers and reviewers | Jessa Wolfe |
| Approvers | Jessa Wolfe |
Changes from other contributors are reviewed by a committer before they're merged.
Privacy
Mochiboard doesn't send information to other networked systems unless you ask it to, except for checking for updates. Everything is explained in the privacy policy.
Last updated October 23, 2026 · Back to Mochiboard