We're a small company and our Microsoft code-signing certificate is still working its way through review. Until it lands, Windows will show a SmartScreen warning the first time you launch DOEPilot — something like “Windows protected your PC.”
To get past it: click More info in the warning, then Run anyway. Windows remembers your choice, so you only see it once.
The installer is the same build we ship to everyone — it's just not Authenticode-signed yet. We'll push a signed update as soon as the cert is issued, and the auto-updater will pick it up. macOS builds are already signed and notarized by Apple, so no warnings there.
Installers are hosted on Cloudflare R2 and served from a single subdomain. To allowlist DOEPilot updates:
releases.onbeatanalytics.com — installer + auto-update bundleswww.onbeatanalytics.com — license activation + Stripe Customer PortalmacOS builds are signed with our Apple Developer ID and notarized. Windows Authenticode signing is in progress and expected shortly — until then, first-launch on Windows triggers SmartScreen (see the note above). Auto-update bundles are additionally signed with a Tauri Minisign updater key embedded at build time. Contact support if you need signed Windows builds for managed deployment.