Checksums
Aedelgard is a key-handling app, so verify the artifact before you install it. Download from the download page, compute the SHA256 of the file you received, and confirm it matches the value below. If it doesn't match, do not install — tell us.
What signing does and doesn't cover
The Windows build is EV code-signed by Millenion AB — the signature proves who built it; the checksum above proves what you received is byte-identical to what we published. The Linux AppImage carries no code signature — desktop Linux has no central signing authority — so the checksum above is its whole integrity story: verify it before you run. macOS will return when it can arrive signed and notarized. We say this plainly on the download page too; we won't imply a guarantee we haven't shipped.