Brewfile: drop toggleMute

Ad-hoc signed, no TeamIdentifier, and spctl rejects the bundle as modified
since signing, so it only runs with its quarantine flag cleared. A setup script
that every machine runs is the wrong place to put an unverifiable binary past
Gatekeeper, so the xattr step goes with it and install.sh now says it clears no
quarantine flags at all. QuickMD stays: Developer ID, notarized.

1 files changed, 12 insertions, 16 deletions

diff --git a/Brewfile b/Brewfile
index 800741f..eac03d9 100644
--- a/Brewfile
+++ b/Brewfile
@@ -41,23 +41,19 @@ cask "neovide-app"
 cask "keepingyouawake"     # menu-bar toggle that stops the Mac sleeping
 cask "jordanbaird-ice"     # Ice: hides and arranges the menu bar itself
 
-# Neither of these is in homebrew-cask, so they come from their authors' own
-# taps, with what that means: nobody reviewed the cask, and the tap can change
-# what it installs between two runs of install.sh, which applies this file
-# again every time. brew will not load a cask from an unofficial tap until it
-# is trusted, once per machine, which cannot be expressed here -- install.sh
-# does it, so the decision sits in a tracked file rather than in a README
-# someone pastes from.
-tap "satrik/togglemute"
+# Not in homebrew-cask, so it comes from the author's own tap, with what that
+# means: nobody reviewed the cask, and the tap can change what it installs
+# between two runs of install.sh, which applies this file again every time.
+# What earns it that: the app is signed with a Developer ID and notarized
+# (checked 2026-10-01), so macOS can still say who shipped it.
+#
+# toggleMute was here too and was dropped: ad-hoc signed, no TeamIdentifier,
+# and `spctl -a` rejecting the bundle as modified since signing. It only runs
+# with its quarantine flag cleared, and nothing in a shared setup script should
+# quietly put an unverifiable binary past Gatekeeper on every machine.
 tap "b451c/quickmd"
-cask "satrik/togglemute/togglemute"  # menu-bar mic mute, and it follows the
-                                     # hardware mute button on a headset.
-                                     # Ad-hoc signed, no Developer ID, and
-                                     # spctl calls the bundle modified, so it
-                                     # only opens once install.sh clears its
-                                     # quarantine flag -- see the note there
-cask "b451c/quickmd/quickmd"         # qmd.app: native markdown viewer, live
-                                     # preview, AppKit rather than Electron
+cask "b451c/quickmd/quickmd"  # qmd.app: native markdown viewer, live preview,
+                              # AppKit rather than Electron
 
 # Only where no Ghostty is installed yet: a machine running the ghostty@tip
 # build would collide with a second cask over /Applications/Ghostty.app.