# MDM release evidence

- Version / build ID / source commit:
- macOS architectures, minimum OS, package receipt:
- Windows architectures, minimum OS, MSI product/upgrade code:
- SHA-256 / CycloneDX SBOM / provenance verified:
- Manifest Ed25519 key ID and signature verified:
- macOS executable/package signature, notarization, and staple verified:
- Windows executable/MSI Authenticode publisher verified:
- Clean install / silent activation / detection:
- Upgrade / authorized rollback / failed-install recovery:
- Repair / deactivation / uninstall / reinstall:
- Standard-user policy, update, removal, tamper attempts:
- Direct / system proxy / explicit proxy / private CA / offline tests:
- Gatekeeper / WDAC / AppLocker tests:
- Real MDM vendor, assignment context, deployment ring, result:
- Security / release engineering / support / customer IT approvals:

Unsigned CI artifacts are structural test fixtures and never satisfy production signature rows.
