Code signing policy

FrameScale AI is free, open-source software (GPL-3.0-or-later). This page explains how its release files are built and signed, who decides what gets signed, and what the app sends over the network.

Signing status

• Windows: free code signing through the SignPath Foundation (for open-source projects) is being set up. Until it's in place, the Windows installer is unsigned, and SmartScreen asks you to confirm it (More info → Run anyway).
• macOS: ad-hoc signed and not notarized (notarization needs a paid Apple developer account). Install it with curl -fsSL https://framescale.org/install.sh | bash, or see the README.
• Linux: the AppImage, .deb and .rpm are not signed.

What gets signed

Only files built from this project's own source code, by the automated release build:

• the Windows installer (FrameScale.AI_FrameScale AI_<version>_x64-setup.exelt;versionFrameScale AI_<version>_x64-setup.exegt;_x64-setup.exe);
• the programs it installs: FrameScale AI.exe and its worker process fs-worker.exe.

The installer also contains open-source programs and data built by their own projects, which stay as their authors published them: FFmpeg (BtbN's builds, GPL) and the AI models listed in the third-party notices, each pinned by URL and SHA-256. Everything in the installer is under an OSI-approved open-source license. The one model that isn't (CodeFormer, used by Face Fix, non-commercial license) is not in the installer: the app downloads it only if you turn Face Fix on and agree to its license.

How releases are built

• Every release is built by GitHub Actions from a tagged commit of the public repository. Nothing built on a personal computer is signed.
• Third-party downloads used by the build are pinned by URL and SHA-256 in third_party/manifest.toml.
• Build scripts and workflow files are part of the source code and reviewed like it.
• Each release is approved by hand before it is signed and published.

Team roles

FrameScale AI currently has one maintainer, who holds every role. All members use multi-factor authentication for GitHub and SignPath.

• Committers and reviewers: seldin-puce (maintainer). Outside contributions arrive as pull requests and are reviewed before merging.
• Approvers (approve each signing request): seldin-puce.

Privacy policy

FrameScale AI will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.

• Your videos are processed entirely on your own computer. Nothing is uploaded.
• There is no telemetry, analytics, crash reporting, advertising or account.
• The app connects to the internet only when you ask it to: when you turn Face Fix on and choose to download the CodeFormer model, it is downloaded from GitHub (GitHub's privacy statement applies to that request).
• Links you click (GitHub, Ko-fi) open in your web browser.
• The one-line macOS installer downloads the latest release from GitHub when you run it.

To uninstall: on Windows, use Settings → Apps; on macOS, move FrameScale AI from Applications to the Bin; on Linux, remove the package or delete the AppImage.

Questions or problems

Report anything that looks wrong with a release or its signature in the issue tracker.