diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b72284d..9741cc4 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -89,13 +89,21 @@ jobs:
             for lib in release/Architect.app/Contents/MacOS/lib/*.dylib; do
               codesign --force --options runtime --timestamp --sign "$IDENTITY" "$lib"
             done
-            codesign --force --options runtime --timestamp --sign "$IDENTITY" release/Architect.app/Contents/MacOS/architect.bin
+            codesign --force --options runtime --timestamp --sign "$IDENTITY" \
+              --entitlements macos/Architect.entitlements \
+              release/Architect.app/Contents/MacOS/architect
+            codesign --force --options runtime --timestamp --sign "$IDENTITY" \
+              --entitlements macos/Architect.entitlements \
+              release/Architect.app
           else
             echo "No Developer ID cert available; applying ad-hoc signature for Gatekeeper"
             for lib in release/Architect.app/Contents/MacOS/lib/*.dylib; do
               codesign --force --sign - "$lib"
             done
-            codesign --force --sign - release/Architect.app/Contents/MacOS/architect.bin
+            codesign --force --sign - --entitlements macos/Architect.entitlements \
+              release/Architect.app/Contents/MacOS/architect
+            codesign --force --sign - --entitlements macos/Architect.entitlements \
+              release/Architect.app
           fi
           cd release
           tar -czf architect-macos-${{ matrix.arch }}.tar.gz Architect.app
diff --git a/Formula/architect.rb b/Formula/architect.rb
index 78590c8..ed2622a 100644
--- a/Formula/architect.rb
+++ b/Formula/architect.rb
@@ -46,20 +46,27 @@ def install
           <string>#{version}</string>
           <key>CFBundleShortVersionString</key>
           <string>#{version}</string>
+          <key>NSHighResolutionCapable</key>
+          <true/>
+          <key>NSAppleEventsUsageDescription</key>
+          <string>A program running in Architect would like to use AppleScript.</string>
+          <key>NSCameraUsageDescription</key>
+          <string>A program running in Architect would like to use the camera.</string>
+          <key>NSMicrophoneUsageDescription</key>
+          <string>A program running in Architect would like to use your microphone.</string>
+          <key>NSContactsUsageDescription</key>
+          <string>A program running in Architect would like to access your Contacts.</string>
+          <key>NSCalendarsUsageDescription</key>
+          <string>A program running in Architect would like to access your Calendar.</string>
+          <key>NSLocationUsageDescription</key>
+          <string>A program running in Architect would like to access your location.</string>
+          <key>NSPhotoLibraryUsageDescription</key>
+          <string>A program running in Architect would like to access your Photo Library.</string>
         </dict>
       </plist>
     EOS
 
-    (macos/"architect").write <<~EOS
-      #!/bin/bash
-      SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-      exec "$SCRIPT_DIR/architect.bin" "$@"
-    EOS
-
-    chmod 0755, macos/"architect"
-
-    (macos/"architect.bin").write (buildpath/"zig-out/bin/architect").read
-    chmod 0755, macos/"architect.bin"
+    install buildpath/"zig-out/bin/architect", macos/"architect"
 
     resources.install "assets/macos/#{app_name}.icns"
   end