feat(install): Windows is unsigned too, and the path with no warning goes first

[eaitbrahim]

Follows #17. Companion to CodeGateSoftware/keel#465.

Windows signing is dropped as well

I flagged the number last time and did not carry it through. Azure Trusted Signing is ~$120/yr — more than Apple's $99 — and since 2024 it does not even buy an instant SmartScreen pass, because reputation is earned from download volume over time.

Paying more to still be warned about is the worst of the three options.

The note named only the Apple cost, which left a reader to assume Windows had simply been forgotten. It now names both and says which is which.

The no-warning path leads

It was at the bottom of the note — after the certificate explanation and the list of what the warning does not mean.

Someone reading this is deciding whether to click past a security warning, and "there is a route with no warning at all" is the most useful thing to hand them at that exact moment — not four paragraphs about what Apple charges. It is set apart at the top now, immediately under the heading.

Still honest about the trade rather than selling it: that route needs a terminal and Python 3.11+, which is precisely the friction the desktop app exists to remove.

And the steps are actually steps

"Click Open Anyway" is not instructions for someone who has never done it.

macOS now runs from opening the .dmg through both confirmations, and says that on Sequoia (15) and later the right-click → Open shortcut no longer works. Apple removed that path deliberately, and a page still recommending it sends people in a circle.

Windows gets the step that matters and is easiest to miss: Unblock the .zip in Properties before extracting. Skip it and Windows marks every extracted file, so the prompt returns on a later launch and the user concludes the first bypass did not take. It also says to extract somewhere the user owns and not into Program Files — keel does not need administrator rights and should not be given them.

The two lists are stacked rather than columned now; they are long enough that side-by-side would put step 6 of one beside step 2 of the other and read as a single list.

Verification

• astro check: 0 errors (77 files).
• Built with platform bundles present and asserted per locale: en / fr / ar each lead with the no-warning path, and each carries the Unblock and Program Files steps.
• All three revs moved together, so no locale is left stale.

One thing worth noting: the English Windows steps silently failed to apply on the first pass — an escaped-quote mismatch — and the build check is what caught it, not review.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate failed

Failed conditions
74.2% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud