dodo v0.2.1

dodo v0.2.1

Verifying a download

sha256sum -c SHA256SUMS   # or: shasum -a 256 -c SHA256SUMS

Every archive also ships its own .sha256 sidecar.

macOS

dodo.app is code-signed with a Developer ID certificate, notarised by
Apple and stapled, so it opens straight from Finder — no Gatekeeper
prompt and no xattr incantation.

The plain -macos- archive (the bare binary, for terminal users) is signed
and notarised too, but a bare executable is not a format a notarisation
ticket can be stapled to, so Gatekeeper checks it against Apple online the
first time it runs.

Check what you downloaded:

codesign -dvvv dodo.app        # identity, team, hardened runtime
spctl --assess --type execute -v dodo.app
xcrun stapler validate dodo.app

Build provenance

Run dodo --build-info — every binary records the commit, tag,
build time, target and rustc version it was produced from.