v26.828.1

Documentation and a test script — no functional change to the app. It exists mainly to prove the in-app updater works now, which it could not do before 26.828.0 was signed.

Both READMEs still walked you through Gatekeeper calling the app damaged, and through System Settings → Open Anyway. Since 26.828.0 neither happens, and an instruction that is wrong costs more than one that is missing.

scripts/vm-verify.sh also stopped clearing the quarantine flag before testing a downloaded build. Surviving that flag is exactly what notarisation buys, so clearing it asserted nothing — it now looks for a stapled ticket and, finding one, makes Gatekeeper's own verdict the assertion. A locally built DMG is still ad-hoc, so that path keeps the old behaviour and says which one it took.

If you are on 26.828.0, this one should install itself.