rdmbair15m5-changelog-20260918-2335-voight-app-store-connect-testflight-production-readiness

Completed the Voight App Store Connect and TestFlight production distribution readiness initiative via the teamwork multi-agent swarm (teamwork_preview_orchestrator_5, 2 reviewers, 2 challengers, forensic auditor, and independent victory auditor teamwork_preview_victory_auditor_4), achieving audited macOS App Sandbox compliance, automated submission tooling, validated Universal2 distribution packaging, and complete App Store marketing and privacy metadata for macOS 15.0+.

Scope

• Host: rdmbair15m5 (with canonical hub sync to rdmsm4x).
• Repositories Touched:
  • /Users/richh/dev/apps/Voight (pushed to git.ecs0.net:git/apps/Voight.git on main at d890f54, fast-forwarded on canonical hub rdmsm4x:~/dev/apps/Voight).

Completed Work & Deliverables

1. Strict macOS App Sandbox Hardening & Entitlements Audit (R1)

• Audited all 16 telemetry samplers (CPU, GPU, Memory, Storage, Network, Thermals, Battery, Processes, ANE, Workstation PCIe/Afterburner) for crash-free sandboxed execution (com.apple.security.app-sandbox = true).
• Hardened entitlements/Voight.AppStore.entitlements:
  • Resolved com.apple.developer.ubiquity-kvstore-identifier to explicit ZU2882L4HT.com.eastcoastscience.Voight, eliminating ITMS-90164 unexpanded variable rejections.
  • Retained required network server entitlement for local peer-to-peer Tailscale/LAN telemetry mesh (port 18247).
  • Confined all local database storage strictly to sandboxed container paths (~/Library/Containers/com.eastcoastscience.Voight/ and group container group.com.eastcoastscience.Voight) with SQLite WAL limits (<500 KB).
  • Zero prohibited private SPIs.

2. Universal2 Packaging & Automated Submission Engine (R2)

• Rebuilt Universal2 distribution package dist/Voight.pkg (7.5 MB) via productbuild targeting macOS 15.0+.
• Sanitized package payload of all AppleDouble (._*) and .cstemp files (COPYFILE_DISABLE=1, recursive xattr -cr, clean cpio repacking).
• Mach-O fat binaries confirmed via lipo -archs (x86_64 arm64) for dist/Voight.app, dist/voight, and dist/Voight.pkg.
• Enhanced scripts/submit_appstore.zsh with automated preflight validation (--validate):
  • 7/7 preflight checks passed with exit code 0.
  • Supports authenticated altool validation and upload using App Store Connect API keys or app-specific passwords from environment or Keychain.

3. App Store Connect Metadata & Privacy Nutrition Labels (R3)

• Canonical metadata package in docs/app-store/APP_STORE_METADATA.md strictly verified against Apple App Store Connect character limits:
  • App Name: 6/30 chars (Voight)
  • Subtitle: 26/30 chars (Hardware & Fleet Telemetry)
  • Keywords: exactly 99/100 chars across 14 tokens without post-comma spacing (hardware,telemetry,system monitor,cpu,gpu,ram,fan,temp,usage,battery,mac pro,apple silicon,m5,smart)
  • Promotional Text: 164/170 chars
  • Primary Category: Utilities; Secondary Category: Developer Tools
  • Privacy Label: "Data Not Collected" zero-tracking declaration
  • Reviewer Notes: Explicit technical justification for peer mesh port 18247

4. High-DPI Retina Screenshot Generation Suite (R4)

• Upgraded scripts/generate_app_store_screenshots.swift with flattened 24-bit RGB pixel buffers (CGImageAlphaInfo.noneSkipLast, zero alpha channel).
• 4 native 2880x1800 8-bit RGB Retina marketing images generated in docs/app-store/screenshots/:
  • 01_per_core_equalizer.png: Signature Per-Core CPU Equalizer & MenuBar Monitor
  • 02_liquid_glass_popover.png: Translucent Liquid Glass Popover Dashboard
  • 03_visual_menubar_builder.png: Visual Menu Bar Builder & Customization
  • 04_workstation_perfection.png: Workstation Multi-GPU, PCIe Slot Inventory & Fleet Mesh

5. Multi-Agent Quality Gate & Independent Victory Audit

• Multi-Agent Quality Gate:
  • Gate 1 flagged keywords character overflow (107/100); orchestrator enforced binary veto and launched remediation cycle.
  • Gate 2 passed unanimously across 2 Reviewers, 2 Challengers, and Forensic Auditor.
• Independent Victory Audit (teamwork_preview_victory_auditor_4):
  • Phase A (Timeline & Provenance Audit): Verified.
  • Phase B (Anti-Cheating & Integrity Forensics): Clean. No hardcoded mock returns, bypasses, or test weakening.
  • Phase C (Independent Clean Build & Test Verification): 437/437 tests passing (100% pass rate) across VoightCoreTests (266), VoightUITests (163), and VoightE2ETests (8).
  • Verdict: VICTORY CONFIRMED.

Outstanding Actions

• None. Distribution package dist/Voight.pkg is ready for TestFlight upload whenever App Store Connect credentials are provided to scripts/submit_appstore.zsh --upload.