Every integration—what works now and what remains limited.
Choose an authorized signal source and an execution route. Each destination below links to its setup, device requirement, supported lifecycle, and current limitations. The dependency register then shows what cannot be completed by code alone.
CI requires a valid Authenticode signature on the app and installer unless a release is explicitly marked unsigned, and always publishes versioned and stable SHA-256 files. No publisher certificate has been supplied yet, so current installers are unsigned and Windows shows an Unknown publisher warning.
Required next
1Complete publisher identity validation
2Purchase an appropriate code-signing certificate
3Sign installer and update binaries in CI
4Publish signature verification steps
Completion evidence
Windows shows a verified publisher, CI verifies the signature, and both published SHA-256 sidecars match.
distribution
Apple and Google store distribution
Needs independent party
Native wrappers are not described as store-approved until the stores complete review.
Required next
1Provide developer-account credentials
2Complete privacy/data-safety disclosures
3Submit signed builds
4Resolve store review findings
Completion evidence
A public listing from the relevant official store.
trust
Independent security assessment
Needs independent party
Internal tests and hardening are not an independent audit or penetration test.