Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

What is signed

Only strata-launcher.exe, the Strata launcher for Windows. It is built by GitHub Actions, on GitHub-hosted runners, from the code in its repository (build workflow), for every published version. No binary built on a development machine is signed or distributed.

The launcher then downloads Strata's files (JavaScript and CSS loaded by Discord) from the Strata releases, which are also built by GitHub Actions. They are not Windows executables and are not covered by this signature.

Roles

Author, reviewer and signing approver

DevRedious

Every outside contribution is reviewed before being merged. Every signing request is approved manually. Two-factor authentication is required on GitHub and on SignPath.

What the program does

The launcher installs, repairs or uninstalls Strata on the computer's Discord clients, at the user's request, with one button per action:

• it closes the Discord client concerned, after warning that an ongoing call will be cut;
• it renames resources\app.asar to _app.asar in Discord's folder, and writes in its place a tiny archive that loads Strata, like Vencord's official installer;
• "Uninstall" restores Discord's original file and deletes Strata's files;
• it requests no administrator rights, changes nothing outside Discord's folder and %APPDATA%\Strata, and leaves no program running in the background.

Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. Every connection is detailed in the privacy policy.