Reporting the Smart App Control signing problem on the Windows ARM64 build. Unlike the x64 reports here (“Part of this app has been blocked” for the language server or .node modules), on ARM64 the main IDE executable itself is blocked, so the IDE never opens.
Environment
- Windows 11 Pro 25H2, build 26200.9278, Snapdragon X Elite (ARM64)
- Smart App Control: On (VerifiedAndReputablePolicyState = 1)
- Antigravity desktop app 2.11.0 (Antigravity.exe) - runs
- Antigravity IDE 2.5.5 (User install, ARM64) - blocked
- The IDE last ran normally on 2026-08-28. Blocks started 2026-09-02 after a Code Integrity policy refresh on 08-29 and a reboot on 09-01. No binaries changed in between.
Symptoms
- Clicking the “Antigravity IDE” icon inside the desktop app does nothing visible except a Windows “How do you want to open this file?” picker. The desktop app’s main.log shows the real error:
Error occurred in handler for 'shell:open-external': Error: Failed to open: An Application Control policy has blocked this file. (0x11C7) - Launching from the Start Menu shortcut is also blocked.
Event Viewer (Microsoft-Windows-CodeIntegrity/Operational), Event IDs 3033 and 3077, repeated for every launch attempt:
Code Integrity determined that a process (…\Programs\antigravity\Antigravity.exe) attempted to load …\Programs\Antigravity IDE\Antigravity IDE.exe that did not meet the Enterprise signing level requirements or violated code integrity policy (Policy ID:{0283ac0f-fff1-49ae-ada1-8a933*****).
The same pair is logged with explorer.exe as the calling process when launched from the Start Menu.
Signature check (PE certificate table read directly; Get-AuthenticodeSignature agrees)
| File | Arch | Signed? |
|---|---|---|
| Antigravity IDE\Antigravity IDE.exe (2.5.5) | ARM64 | No - certificate table empty |
| Antigravity IDE\unins000.exe | x86 | No |
| Antigravity IDE\tools\inno_updater.exe | x86 | No |
| antigravity\Antigravity.exe (2.11.0) | ARM64 | No (currently allowed by SAC reputation) |
| antigravity\Uninstall Antigravity.exe | x86 | No |
| antigravity-updater\pending\Antigravity-arm64.exe (installer) | x86 | Yes - Google LLC, valid |
So the installer is signed, but nothing it extracts is. SHA256 of the blocked file, for reference:
Antigravity IDE.exe (196,314,624 bytes): C87B227761B0DD5697944FF8E1B621DD75C284BC3582874C69138A*****
Request
Please Authenticode-sign all shipped ARM64 binaries (main exe, updater, uninstaller, language server, native .node modules), not just the installer. Because Smart App Control cannot be re-enabled once turned off, disabling it is not a reasonable workaround for users.
Related threads: