rdmpw3275m-changelog-20260916-0445-rtty-standard-closure-fixture-fix

Resolved ISSUE-20260914-14 in RTTy by eliminating stale hardcoded test fixtures, dynamically deriving repo versions and graph entry counts, stripping comments before forbidden action checks, and re-rendering the standard trust chain.

Scope

• Hosts: rdmsm4x (canonical dev root for ~/dev/apps/RTTy), executed from rdmpw3275m.

Exact Files Touched

• rdmsm4x:~/dev/apps/RTTy/Tests/ScriptTests/standard_candidate_closure_test.py
• rdmsm4x:~/dev/apps/RTTy/Tests/ScriptTests/archive_standard_policy_test.sh
• rdmsm4x:~/dev/apps/RTTy/script/TrustedStandardProjectGraph.json
• rdmsm4x:~/dev/apps/RTTy/script/TrustedStandardVerifierBundle.json

Changes Made

1. standard_candidate_closure_test.py:
   • Replaced stale pre-Build 508 hand-derived fixture counts (59, 54, 1, 8) = 122 with reviewed counts (71 direct + 56 LatencyCore + 1 Network Filter + 8 RTTySyncSchema) = 136, closing the 11 compiler inputs added in Build 508 and matching compilerInputCount: 136 pinned in TrustedStandardProjectGraph.json.
2. archive_standard_policy_test.sh:
   • Replaced hardcoded 0.3.832 / 507 in mock xcodebuild PlistBuddy and plutil calls with dynamically derived values from $root/VERSION and $root/BUILD_NUMBER.
   • Replaced hardcoded 125 and 156 compiler/build entry counts with dynamic extraction from $fixture_repo/script/TrustedStandardProjectGraph.json using /usr/bin/plutil -extract ... raw.
   • Added comment stripping (/usr/bin/sed -e 's/#.*//') before the forbidden deployment/upload/launch command regex check in $ARCHIVER and $VERIFIER, eliminating false positive failure caused by the word OPEN in line 792 comment of script/archive_standard.sh.
3. TrustedStandardProjectGraph.json & TrustedStandardVerifierBundle.json:
   • Re-rendered via standard_project_graph.py render-graph to bind Apps/RTTyStandard/Config/Release.xcconfig sha256 (247cc62...), retaining compilerInputCount: 136 and buildInputCount: 167.
   • Re-rendered via standard_verifier_bundle.py render to seal TrustedStandardProjectGraph.json sha256 (e5bc26a...).

Commands Run & Verification Evidence

• python3 Tests/ScriptTests/standard_candidate_closure_test.py -> exit code 0 (PASS: Standard evidence and source policy close all 136 compiler inputs and the complete build-input projection).
• bash Tests/ScriptTests/archive_standard_policy_test.sh -> exit code 0 (PASS: isolated Standard archive fixtures fail closed and bind one immutable unsigned candidate).
• All 11 other Standard script policy tests (standard_archive_manifest_test.py, standard_app_intents_metadata_test.py, standard_trust_entry_policy_test.py, xcode26_clang_probe_wrapper_test.sh, standard_project_test.sh, standard_pbx_source_closure_test.py, standard_source_reference_closure_test.py, standard_frontend_input_closure_test.py, standard_launch_capability_policy_test.py, standard_macho_policy_test.py) verified passing with exit code 0.
• Committed cleanly on rdmsm4x:~/dev/apps/RTTy as commit c723b4f.

How to Undo

• git revert c723b4f on rdmsm4x:~/dev/apps/RTTy.

Outstanding Owner Actions

• None. Ticket ISSUE-20260914-14 is resolved and archived.