MSIX, MSI, or EXE
Authenticode signed by a certificate that chains to a trusted root. Ark reads the product identity, recognises Inno Setup, NSIS, Squirrel, and WiX installers, and records their silent-install flags.
Up to 2 GB · x64 and ARM64 Windows · macOS
Desktop apps,
verified.
Every Windows build is Authenticode signed and every Mac build carries a Developer ID signature that Ark verified page by page. The file you download is the file the developer uploaded, and its SHA-256 is printed next to it.
01
What ships here
The first desktop releases are in review. Publishers upload from the dashboard or the CLI, and approved builds appear here.
DMG or ZIP with the .app
Signed with Developer ID and ideally notarized. Ark verifies every code page, the CMS signature, the resource seal, and the Team ID before the build can be approved.
Up to 2 GB · Universal, Apple silicon, Intel02
What Ark checks
The same gate protects every platform. A build that fails it is never published, and one that needs judgement waits for a person.
Signature chain
SHA-1 signatures and tampered builds never reach the catalogue. Unsigned builds are labelled as such and wait for an operator.
Identity pinned
The first approved build fixes the signer or Team ID; updates must match it.
Content addressed
Every file is stored by its SHA-256 and served exactly as uploaded.
Human review
Broad capabilities, risky entitlements, and missing notarization wait for an operator.