SentryScreen 0.4.1

Security and privacy fixes. Recommended for everyone on 0.4.0; the installer upgrades in place and keeps your settings and the Screen Recording permission.

Install: download SentryScreen-0.4.1.pkg below (Developer ID signed and notarized) and open it from an administrator account.

• A standard account can no longer stop protection from starting by putting a
  special file (such as a named pipe) where the app writes its logs. The app
  now skips any log file that is not a plain file and starts anyway, and the
  background watchdog moves the bad file aside and records it as tampering.
• The watchdog no longer changes permissions on a log folder after handing it
  to the user, which a user could have redirected to another file.
• If macOS refuses to hide the app's own covers from screen capture, the app
  keeps retrying every 30 seconds instead of giving up, and records the failure
  so it shows in the parent's status and in diagnostics.
• The parent's view of another account now says "detector failing" when
  detection has stopped working there, instead of "protecting".
• Docs: the privacy section names the developer-only option that saves image
  crops (never used by the installed app); the diagnostics page says plainly
  that two reports from the same Mac can be matched by their contents; the
  install-from-source steps include the setting an ad-hoc build needs.
• The package now includes the full Apache License 2.0 text for the YOLOX-based
  detector.

Verify the download: shasum -a 256 SentryScreen-0.4.1.pkg (compare with SHA256SUMS.txt) and spctl -a -vv -t install SentryScreen-0.4.1.pkg (source=Notarized Developer ID).