mirror of
https://github.com/multica-ai/multica.git
synced 2026-07-27 13:06:20 +02:00
Windows Security flags multica.exe inside app.asar.unpacked as Trojan:Script/Wacatac.B!ml and quarantines it. The !ml suffix is a machine-learning heuristic verdict, not a signature match: our Windows builds are not Authenticode-signed (release.yml sets CSC_IDENTITY_AUTO_DISCOVERY=false and no certificate is configured), and an unsigned, low-prevalence Go binary that spawns background processes and opens sockets is the classic false-positive profile. Add a Desktop docs section (en/zh/ja/ko) covering how to verify the binary against checksums.txt, restore it from quarantine, exclude both the install directory and %APPDATA%\\Multica (Desktop re-downloads the CLI there, so excluding only the install dir loops), and report the false positive to Microsoft. MUL-5216 Co-authored-by: Bohan-J <bohan@devv.ai> Co-authored-by: multica-agent <github@multica.ai>