Trust model
Security
MapLink separates release signing, code signing, licensing signing and local runtime secrets so compromise of one layer does not automatically expose every other layer.
Release signing
Ed25519 private release signing material lives only in the release pipeline. Installations and this website use the pinned public key for verification.
Windows code signing
Public EXE publication is designed to require an Authenticode certificate and timestamp. This is separate from the Ed25519 update signature.
License signing
A separate Ed25519 keypair signs license leases. Its secret key belongs only on the protected web backend, never in the downloadable installer or Dashboard.
Local-only administration
Control Center and Broker use loopback by default. The website is not a remote control plane for DayZ servers.