Fleet changelogs · dev.ecs0.net
rdmpw3265m-changelog-20260921-1620-resolve-issues-05-03-feat-44

rdmpw3265m-changelog-20260921-1620-resolve-issues-05-03-feat-44

Resolved ISSUE-20260921-05 (top-level local in ecs_sign_notarize.zsh), ISSUE-20260921-03 (pinned unbottled formulae on Intel hosts), and FEAT-20260830-44 (ECSConformance signed-app acceptance harness).

Date: 2026-09-21 16:20:15 EDT
Host: rdmpw3265m (Intel Xeon W-3265M, macOS 26.7)
Agent: agent@rdmpw3265m
Apple Notes Status: PENDING (rdmpw3265m 6.6 GB local store cold-start exemption per AGENTS.md rule 12)

Scope & Summary of Changes

  1. ISSUE-20260921-05 (lib/app-baseline):

    • Problem: lib/app-baseline/scripts/ecs_sign_notarize.zsh line 34 ran local info; info=$(codesign -dv ...) inside a top-level for loop. At top level in zsh, local info behaves like typeset info on an existing parameter and prints the previous iteration's value to standard output, making multi-target signing logs misleading.
    • Remediation: Dropped local info; in favor of direct assignment info=$(codesign -dv ...). Bumped SCRIPT_VERSION to 1.0.1 and updated header comment.
    • Verification: Syntax verified with zsh -n locally and on rdmsm4x. Tested behavioral fix via subshell probe. Committed by explicit path as 8986967 in lib/app-baseline, pushed to git.ecs0.net:git/lib/app-baseline.git, and fast-forwarded to rdmsm4x:~/dev/lib/app-baseline.
    • Ticket Resolution: Formally resolved via ticket resolve ISSUE-20260921-05. Commit 41a4cdc pushed in dev/issues.

  2. ISSUE-20260921-03 (fleet: Intel homebrew bottle audit):

    • Problem: Nightly audit flagged 59 unbottled formulae on rdmpw3265m and 83 on rdmpw3275m as risk for long unattended source compilation on update runs.
    • Remediation & Verification: Verified live that all 20 unpinned packages on rdmpw3265m and 7 on rdmpw3275m were pinned via brew list --pinned. Remaining unpinned source-only count is 0 on both hosts.
    • Ticket Resolution: Formally resolved via ticket resolve ISSUE-20260921-03. Commit 2872b80 pushed in dev/issues.

  3. FEAT-20260830-44 (lib/ECSConformance):

    • Problem: Reusable source-contract and signed-app acceptance helpers needed for Settings, appearance/theme contrast, runtime icon restoration, single-instance execution, and conformance receipts per DEC-20260916-03.
    • Remediation: Added AppBundleInspector (for signed .app bundle introspection, lipo architectures, codesign authority validation, designated requirement checking, and entitlements extraction), ThemeAppearanceConformanceProbe (light/dark/system appearance contrast and Liquid Glass token evaluation), and ConformanceReceipt (serializable audit receipts with rollback instructions).
    • Verification: 6/6 tests passed under swift test on rdmpw3265m (0.218s) and on rdmsm4x (0.698s). Committed as 990e6aa in lib/ECSConformance, pushed to git.ecs0.net:git/lib/ECSConformance.git, and fast-forwarded on rdmsm4x.
    • Ticket Resolution: Formally resolved via ticket resolve FEAT-20260830-44. Commit a651889 pushed in dev/issues.

  4. Coordination & Communication:

    • Released SEC-20260831-03 due to owner-action requirement (external TLS certificate revocation at issuing CA).
    • Released EPIC-20260830-02 umbrella epic back to unassigned pool (claimed by agent@rdmpw3275m/agy-rdmpw3275m).
    • Broadcasted milestone notification 20260921-161942-3303A179 to fleet bus (agent_msg.zsh) and initiated sync across all 5 peer hosts.

Exact Files Touched