​
Compiled runtime

telekit self-update --check
telekit self-update
telekit self-update --force
Asks https://telekit.io/api/v1/bridge/version, verifies the tarball against SHA256SUMS, then runs that release’s install.sh. The daemon is restarted onto the new binary if it is loaded. GitHub access to the private releases repo is not required for the customer door on telekit.io.

​
Source checkout

self-update refuses. Pull git, then: 
telekit restart
or send /restart in chat (owner).

​
Unsigned binaries

Channel binaries are unsigned (house norm). If Gatekeeper quarantines a download: 
xattr -d com.apple.quarantine /path/to/telekit-bin