mirror of
https://github.com/stablyai/orca.git
synced 2026-10-17 08:03:14 +00:00
electron-builder's CopyElevateHelper re-copies a pristine elevate.exe from its download cache on every NSIS pack, which clobbered the round-1 SignPath signature in v1.4.129-rc.4 (caught by the evidence gate). Overwrite the cached copy with the signed one before the rebuild so the clobber becomes a no-op, and make the evidence gate verify resources\elevate.exe in every release regardless of whether staging listed it (the persisted cache can carry an already-signed copy).