GPG-authenticated Ricochet v1.0.0 source and Linux packages, plus audited Windows and macOS packages with explicit platform signing-status reports. Verify SHA256SUMS.txt.asc before installation; Windows Authenticode and Apple notarization are included when project certificates are available.