# Code Signing Policy

Free code signing provided by [SignPath.io](https://about.signpath.io), certificate by [SignPath Foundation](https://signpath.org).

## Team Roles

- **Committers and reviewers:** [AnInsomniacy](https://github.com/AnInsomniacy)
- **Approvers:** [AnInsomniacy](https://github.com/AnInsomniacy)

## Signing Scope

Only artifacts built from this repository's official CI pipeline ([GitHub Actions](https://github.com/AnInsomniacy/motrix-next/actions)) are submitted for signing. We do not sign third-party binaries.

## Upstream Dependencies

The bundled [Aria2 Next](https://github.com/AnInsomniacy/aria2-next) sidecar binary is a maintained aria2-compatible engine built by the project maintainer using public GitHub Actions workflows.

## Privacy Policy

See [PRIVACY.md](PRIVACY.md).