Security: update integrity + hardened install
- ZIP SHA-256: App ZIPs listed in \
version.json\\hashes.*_zip\; updater refuses mismatch - codesign --verify on staged and installed app
- Path lock: only \
/Applications/rNitro.app\or \~/Applications/rNitro.app\ - Admin update helper re-verifies signature after copy
Website: https://chopstickshq.com/rnitro/