Smart App Control (SAC) blocks my locally developed and correctly signed C++ *.exe - How can I run it without disabling SAC?

I am developing a small C++ application on Windows 11 Home using CMake and MinGW.

The application builds successfully, but when I try to execute it from PowerShell, Windows Smart App Control blocks it.

Error:

(.venv) PS ...\versioning_system\build> .\MyApp.exe
Program 'MyApp.exe' failed to run: An Application Control policy has blocked this fileAt line:1 char:1
+ .\MyApp.exe
+ ~~~~~~~~~~~.
At line:1 char:1
+ .\MyApp.exe
+ ~~~~~~~~~~~
    + CategoryInfo          : ResourceUnavailable: (:) [], ApplicationFailedException
    + FullyQualifiedErrorId : NativeCommandFailed

What I have already tried

I created a self-signed code-signing certificate using PowerShell:

• RSA 3072-bit key

SHA256

Code Signing certificate

• One-year validity

I then:

1. Exported the certificate as .cer and .pfx.
2. Imported the public certificate into:
   • Current User → Trusted Root Certification Authorities
   • Current User → Trusted Publishers
3. Signed MyApp.exe using Windows SDK SignTool.
4. Verified the signature using SignTool.
5. Checked the signature using PowerShell.

Results:

 (.venv) PS ...\versioning_system\build> Get-AuthenticodeSignature ".\MyApp.exe"       Directory: ...\versioning_system\build

SignerCertificate                         Status                                                  Path                                                   
-----------------                         ------                                                  ----                                                   
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx  Valid                                                   MyApp.exe    

SignTool verification also succeeds.

However, Smart App Control still blocks the executable.

I also inspected the Windows Code Integrity event logs and found Smart App Control-related events, including Event IDs 3077, 3089 and 3118.

My questions

1. Is there a supported way to allow my own locally developed C++ application to execute on my own Windows 11 PC while keeping Smart App Control enabled?
2. Does Smart App Control require a code-signing certificate issued by a Certificate Authority included in Microsoft's Trusted Root Program? Is a locally installed self-signed certificate insufficient?
3. Is there a free solution for an individual developer who only needs to run their own application on one PC?
4. Is there any supported developer workflow for repeatedly building, signing and running updated versions of an application without disabling Smart App Control?

My requirements

Windows 11 Home

Smart App Control must remain ON.

• I only need to run the application on my same PC.

I prefer a free solution.

• I do not want to disable Smart App Control or weaken Windows security.