Code signing policy

Free code signing for the Windows installer is provided by SignPath.io, with a certificate by SignPath Foundation.

What is signed

Only Annie-Setup.exe, the Windows installer attached to each GitHub Release. It is built from this repository’s source by the Windows installer GitHub Actions workflow (.github/workflows/windows-installer.yml) on GitHub-hosted runners. Release builds are signed. Pull-request builds never are.

The installer bundles third-party binaries, each downloaded from its upstream release and checked against a pinned SHA-256 (installer/windows/fetch-deps.ps1):

  • uv by Astral

  • CPython (python-build-standalone)

  • FFmpeg (GPL shared build by BtbN; licence and source pointers ship in the ffmpeg folder)

Team roles

  • Committers and reviewers: fodorad

  • Approvers (each signing request is approved by hand): fodorad

Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.

The installer and Annie connect to the internet only to:

  • download Annie and its Python dependencies from PyPI (during setup);

  • check PyPI for a newer Annie at start and from the Check for updates menu, and download it.

Annie sends none of your data anywhere. It runs on your computer and serves its pages only to your own browser (127.0.0.1).