The app bundle was ad-hoc signed (Xcode's automatic default), so trusting
the sttlab-apps cert wouldn't have done anything for Gatekeeper on the
outer .app — only the embedded audiotee binary was actually signed with
it. Switch the Release config to sign with sttlab-apps too, matching what
audiotee already does, so the two documented install paths in README.md
(trust the cert, or bypass Gatekeeper per-download) both actually work.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
sttlab-tech