During March 2025, Florent Thevenet developed an external code signing hook for the JetBrainsRuntime repository, enhancing the JDK build system to support automated, auditable code signing of native binaries. By integrating scripting and build system expertise, Florent enabled the use of external scripts to sign executables and dynamic libraries immediately after linking, streamlining compliance and security in the release pipeline. The solution, implemented using gmk and m4, ties signing actions directly to specific commits, improving traceability and reproducibility. This work laid the foundation for cross-platform adoption and reduced manual intervention, reflecting a focused, in-depth engineering contribution.