From 30d51278c9c4695f7ee81c23c9ad37049558d6be Mon Sep 17 00:00:00 2001
From: Yun Chan <yunchan@twentyoz.kr>
Date: Sat, 29 Aug 2026 19:07:16 +0900
Subject: [PATCH] build(release): forbid unsigned Windows artifacts

---
 apps/desktop/electron-builder.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/desktop/electron-builder.yml b/apps/desktop/electron-builder.yml
index 89a78b0..3d1601a 100644
--- a/apps/desktop/electron-builder.yml
+++ b/apps/desktop/electron-builder.yml
@@ -44,6 +44,8 @@ asarUnpack:
 # ────────────────────────────────────────────────────────────────────
 win:
   icon: build/icon.ico
+  # Stable artifacts must never silently fall back to an unsigned build.
+  forceCodeSigning: true
   target:
     - target: nsis
       arch: