Single-file builds for macOS, Windows, and Linux. The macOS build is signed with a Developer ID Application certificate and notarized by Apple, so Gatekeeper opens it without a quarantine warning.
94619cbba4b00951395ab1954787b6059899bee2d58564376eb5c10da9559a286c64b8cc58da14fe6ce9e8025702c96a99355ffd07f0880c991ede5d2f468d29
a8e1607b72ac42ee9419d877bd42f1e446be5e752a0c15ad0ae64fd172a0e6a0
53b838f03c73749cb143d99cf324be7bc6bda818fb0c4ddcedc8a6da58cc5614
On Apple silicon you can install and keep rbterm
up to date straight from the tap — it pulls the same signed &
notarized build as the DMG above. brew upgrade tracks new
releases through the cask’s livecheck, which reads the same update
manifest the in-app updater uses.
brew install binrick/tap/rbterm
# later, to update to the newest release
brew upgrade --cask rbterm
After downloading, you can confirm the signature, the notarization ticket, and that Gatekeeper is happy. The DMG and the .app bundle inside it are both signed and stapled separately:
cd ~/Downloads
# 1. Gatekeeper accepts the DMG itself
spctl --assess --type install --verbose=2 rbterm-0.3.62-macos-arm64.dmg
# accepted
# source=Notarized Developer ID
# Mount it and assess the bundle inside.
hdiutil attach rbterm-0.3.62-macos-arm64.dmg
cd /Volumes/rbterm
# 2. Signing identity + hardened runtime
codesign -dv --verbose=4 rbterm.app 2>&1 | grep -E "Authority|flags"
# Authority=Developer ID Application: Richard Blundell (4L7XW5NPCX)
# Authority=Developer ID Certification Authority
# Authority=Apple Root CA
# CodeDirectory v=20500 size=… flags=0x10000(runtime) …
# 3. Notarization ticket is stapled on the bundle (works offline)
xcrun stapler validate rbterm.app
# The validate action worked!
# 3. Gatekeeper accepts it
spctl --assess --type execute --verbose=2 rbterm.app
# rbterm.app: accepted
# source=Notarized Developer ID
Every release on this page is reproduced verbatim
from a tagged commit in the source repository. On macOS the signed
build flow is make app-distributable; on Linux/Windows
the standard cmake -S . -B build && cmake --build build
reproduces the binary.