diff --git a/Casks/nifro.rb b/Casks/nifro.rb
index b28f593..aa1b070 100644
--- a/Casks/nifro.rb
+++ b/Casks/nifro.rb
@@ -4,10 +4,6 @@
 #   brew trust --cask PathGao/tap/nifro
 #   brew install --cask nifro
 #
-# The `brew trust` line is needed because of the postflight block below: Homebrew will not load a
-# cask from outside its own repositories until the user says they trust it, since a cask can run
-# code after installing. Leave it out and `brew install` refuses.
-#
 # version and sha256 are written back by .github/workflows/release.yml after every release, as a
 # pull request somebody still has to merge. Do not edit them by hand.
 #
@@ -36,15 +32,6 @@
 
   app "Nifro.app"
 
-  # ⚠️ This block is only needed for builds that are not notarized.
-  # Once the release pipeline has a Developer ID certificate and starts notarizing (path A in
-  # docs/RELEASE.md), delete the whole postflight block.
-  postflight do
-    system_command "/usr/bin/xattr",
-                   args:         ["-dr", "com.apple.quarantine", "#{appdir}/Nifro.app"],
-                   must_succeed: false
-  end
-
   # Sandboxed app, so user data lives in the container. The last entry is only insurance: a proper
   # sandboxed build never writes there, but a build that lost its entitlements while being signed
   # does, and a user may well have installed one of those.
diff --git a/docs/RELEASE.md b/docs/RELEASE.md
index 0ca22cb..1ef5486 100644
--- a/docs/RELEASE.md
+++ b/docs/RELEASE.md
@@ -33,8 +33,8 @@ Provide either notarization credential set as environment secrets:
 
 An API key takes precedence when `NOTARY_KEY_P8` is set; an incomplete API key configuration
 fails instead of silently switching methods. Do not put credentials in chat, source files or logs.
-As of the 2026-09-16 setup, the signing certificate is configured but notarization credentials
-are still required. No notarized release has been verified by this configuration change.
+Version 0.9.1 was published on 2026-09-16. Both downloaded DMGs passed checksum, signing
+certificate and stapled-ticket verification; Gatekeeper accepted both apps as `Notarized Developer ID`.
 
 ## Local builds