What code can finish—and what still needs someone else.
A connector is not “done” because a logo appears. Production status requires sanctioned access, a complete order lifecycle, reconciliation, and dated evidence. This register names the external dependency for every unfinished promise.
CI now blocks every public Desktop release unless both the app and installer have a valid Authenticode signature, then publishes versioned and stable SHA-256 files. The required publisher certificate has not yet been supplied.
Required next
1Complete publisher identity validation
2Purchase an appropriate code-signing certificate
3Sign installer and update binaries in CI
4Publish signature verification steps
Completion evidence
Windows shows a verified publisher, CI verifies the signature, and both published SHA-256 sidecars match.
distribution
Apple and Google store distribution
Needs independent party
Native wrappers are not described as store-approved until the stores complete review.
Required next
1Provide developer-account credentials
2Complete privacy/data-safety disclosures
3Submit signed builds
4Resolve store review findings
Completion evidence
A public listing from the relevant official store.
trust
Independent security assessment
Needs independent party
Internal tests and hardening are not an independent audit or penetration test.