Peliarch BB 1.0.0 signed release

Publisher: Alaric McKenzie-Boone. Signatures use SHA-256 and RFC 3161 timestamps.
Signed-release artifacts retain version 1.0.0 and the same gameplay payloads.
Original unsigned releases remain available at their original immutable URLs.

With Windows SDK SignTool, verify the archive and world:
  signtool verify /pa /v /c RELEASE.cat BBLauncher-AP-1.0.0-signed-win-x64.zip
  signtool verify /pa /v /c bloodborne.apworld.cat bloodborne.apworld

To verify an extracted first-party executable or DLL:
  signtool verify /pa /v path-to-file

SIGNATURES.json lists individually signed files and before/after payload hashes.
Third-party runtime files retain their original bytes and signatures, if any.
The ER upstream MapForGoblins DLL remains unsigned; the AP adapter is signed.
The signed release catalog additionally authenticates the complete ZIP bytes.
SHA256SUMS.txt provides transport checksums, not an independent trust identity.
VirusTotal submission is pending; no clean scan is claimed by this document.
Code signing identifies the publisher and protects integrity. It does not
guarantee antivirus acceptance, SmartScreen reputation, or absence of bugs.

Corresponding ER client/dependency source is unchanged:
https://downloads.peliarch.ca/er/releases/v1.0.0/ER-Archipelago-1.0.0-client-source.zip
The BB package includes its corresponding source and dependency notices.