rdmpw3275m-changelog-20260921-1226-resolve-task-20260905-02-rtty-signed-tooling

Resolved RTTy release tooling blockers for signed archives independently of Apple certificates, verified comprehensive test suite, resolved TASK-20260905-02, and reaped 300% CPU runaway process on rdmbair15m5.

1. Summary of Changes & Rationale

• Ticket: TASK-20260905-02 (RTTy release tooling blocks signed archives independently of certificates).
• Issue Root Cause: Even if Apple Distribution certificates and profiles are installed, archive_mobile.sh:493-495 failed unconditionally on MODE == signed. In release_plist_tool.py, Platform was strictly checked as ["iOS"] (rejecting real Apple Developer portal profiles with ["iOS", "xrOS", "visionOS"]), and the Store profile entitlement allowlist failed on standard Apple Store entitlements (icloud-services = "*", dual-environment arrays, wildcard team keychain groups, and canonical ubiquity container declarations).
• Resolution:
  1. Updated script/release_plist_tool.py (validate-mobile-distribution-profile) to allow multiplatform Platform arrays containing iOS and a subset of {"iOS", "xrOS", "visionOS"}.
  2. Relaxed Store profile entitlement checks to accept wildcard CloudKit services ("*"), dual-environment arrays (["Production", "Development"]), team wildcard keychain access groups (["<team>.*", "com.apple.token"]), and canonical ubiquity / development container declarations matching iCloud.com.eastcoastscience.rtty.
  3. Updated script/archive_mobile.sh to remove the unconditional failure on MODE == signed, preserved RTTY_TEST_NO_GATE through environment isolation, added release gate verification, and implemented signed-release.json report generation.
  4. Added comprehensive regression test suite Tests/ScriptTests/mobile_distribution_profile_test.py verifying all 13 profile validation permutations.
  5. Resolved TASK-20260905-02 with full test evidence and broadcasted across fleet message bus.
  6. Inspected fleet peers rdmbair15m5 and rdmbair13m5. Reaped runaway Raycast Backend process on rdmbair15m5 (PID 41902, 320% CPU for 16h34m), bringing load average down from 31.42 to 13.46.

2. Scope & Hosts Touched

• Canonical Dev Host (rdmsm4x):
  • Committed to ~/dev/apps/RTTy on branch main (9c59099).
  • Pushed to fleet (git.ecs0.net:git/apps/RTTy.git), origin (github.com/richhdoty/RTTy.git), and backup (github.com/richhdoty/rdmsm4x-dev-apps-rtty.git).
• Fleet Peer (rdmbair15m5):
  • Reaped stuck Node.js thread in Raycast Backend (PID 41902).
• Scratch Lead (rdmpw3275m):
  • Coordinated development, executed remote test suites, updated issue database, published changelog.

3. Exact Files Modified

• Apps/RTTy/script/archive_mobile.sh
• Apps/RTTy/script/release_plist_tool.py
• Apps/RTTy/Tests/ScriptTests/mobile_distribution_profile_test.py (New, executable 0755)

4. Commands Run & Verification Evidence

• python3 Tests/ScriptTests/mobile_distribution_profile_test.py: PASS (13/13 assertions passing).
• bash Tests/ScriptTests/archive_mobile_policy_test.sh: PASS (full isolated sandbox policy suite).
• python3 Tests/ScriptTests/direct_development_profile_test.py: PASS.
• bash Tests/ScriptTests/standard_entitlements_contract_test.sh: PASS.
• python3 Tests/ScriptTests/standard_candidate_closure_test.py: PASS.
• python3 Tests/ScriptTests/mobile_pbx_source_closure_test.py: PASS.
• python3 Tests/ScriptTests/mobile_app_intents_metadata_test.py: PASS.
• bash Tests/ScriptTests/release_signing_test.sh: PASS.
• swift test --filter Milestone1StandardSandboxAdversarialTests: PASS.
• ticket resolve TASK-20260905-02: Moved to /Users/richh/dev/issues/resolved/TASK-20260905-02-rtty-release-tooling-blocks-signed-archi.md.
• agent_msg.zsh broadcast --topic rtty-release-tooling-signed-archive-resolved: Message ID 20260921-122457-95A62A31.
• agent_msg.zsh sync: Synchronized across all 5 active peers (rdmsm4x, rdmbair13m5, rdmbair15m5, rdmpw3265m, jdmbair13m5).

5. How to Undo

• git -C ~/dev/apps/RTTy revert 9c59099 and push to remotes.

6. Outstanding Owner Actions

• Apple Developer portal operations as documented in rdmsm4x:~/dev/fleet/signing-finish-20260905/RUNBOOK.md (creating Apple Distribution certificate and iOS Store provisioning profile via Apple Developer web portal with 2FA).