docs: Windows and Linux only, no macOS build

The Gitea CI has one Linux runner; the GUI's Windows package is cross-compiled
from it, but there is no path to a macOS build without Apple hardware and a
developer account.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

ROADMAP.md

@@ -6,6 +6,11 @@ Where Guará has been, where it is and where it is going. What is marked as done
 
 Legend: ✅ done · 🟡 partial · 🔜 planned · 🔭 long-term idea · ⛔ out of scope
 
+> Items marked done for macOS reflect what the GitHub CI used to build and test,
+> before the move to Gitea. The Gitea CI has one Linux runner; it builds and
+> tests Linux and Windows. macOS is not built or tested any more — see the
+> README's [Known limits](README.md#known-limits).
+
 ## Principles that do not change
 
 1. **The source is read-only.** Nothing in the core writes to the device being recovered.
@@ -138,7 +143,7 @@ Physical access is the differentiator of commercial tools like Cellebrite. It de
 | **Reproducibility:** replay the recorded procedure and get the same result | 🔜 |
 | PDF report (A4, built in) | ✅ |
 | **External validation:** NIST CFTT (Computer Forensic Tool Testing) tests and publication of the results | 🔭 |
-| Signed binaries (Windows and macOS) | 🔜 |
+| Signed binaries (Windows) | 🔜 |
 
 External validation is what makes a report accepted. Without it, Guará is good for triage, recovery and support, and the examiner must check the results by other means.
 
@@ -158,9 +163,9 @@ External validation is what makes a report accepted. Without it, Guará is good
 
 | Item | Status |
 |---|---|
-| CLI and interface for Windows, Linux and macOS | ✅ |
-| CI on three systems, automatic release by tag | ✅ |
-| Tests with real reference images on Linux, macOS and Windows | ✅ |
+| CLI (Linux) and interface for Windows and Linux | ✅ |
+| CI on Linux and Windows, automatic release by tag | ✅ |
+| Tests with real reference images on Linux and Windows | ✅ |
 | Update from inside the desktop app (signed packages, one click) | ✅ |
 | GUI: privileged helper process instead of restarting the whole app as administrator | 🔜 |
 | Signed and notarized binaries | 🔜 |