README: macOS builds are now signed and notarised

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: stoatworks-labs

README.md

@@ -251,15 +251,12 @@ See [docs/architecture.md](docs/architecture.md) for the source/output/
 crosspoint model and how the relay-vs-generated source distinction is meant
 to extend later without changing the core engine.
 
-## Unsigned builds — Gatekeeper, SmartScreen & Defender Firewall
+## Windows SmartScreen & Defender Firewall
 
-The release binaries are **not code-signed or notarized** — that needs paid Apple
-and Microsoft developer certificates this project doesn't carry. The downloads are
-fine; the OS just can't identify the publisher, so it warns you the first time.
+macOS builds are **Developer ID-signed and notarised by Apple** — they open
+normally, with no Gatekeeper warning and no quarantine step. The Windows
+binaries are **not** code-signed, so Windows still warns you the first time.
 
-- **macOS** — *"cannot be opened because the developer cannot be verified"*.
-  Right-click the app → **Open** → **Open**, or clear the flag:
-  `xattr -dr com.apple.quarantine "/Applications/SRT Router.app"`
 - **Windows** — SmartScreen shows *"Windows protected your PC"* →
   **More info** → **Run anyway**.
 - **Windows Defender Firewall** — first launch pops *"Allow SRT Router to communicate on