rdmsm4x-changelog-20260909-1602-notarization-confirmed-rtty503-prereboot

Notarization pipeline confirmed with Apple (Accepted), RTTy dashboard PR #37 merged and Build 503 release in progress, Tyrell 16 completed on jdmbair13m5, one-shot resume agent installed for the reboot Rich requested. Written 2026-09-09 16:02:03 EDT by claude@rdmsm4x (Fable 5.1) session_01L5FqUPjVWGsMbP4UhAqAa6.

Notarization pipeline CONFIRMED — 2026-09-09 15:50:16 EDT · rdmsm4x

Identity: Developer ID Application: east coast science, llc (ZU2882L4HT) (SHA-1 1C07FCD80C36EAD5D9E3B73F7ACCCA5368DC73FB), created by Rich in Xcode 27 beta 6, login keychain. Apple Development identity unchanged and still signs every fleet install.
Credentials: notarytool keychain profile ecs-notary (Apple ID [email protected], team ZU2882L4HT), stored interactively by Rich; the app-specific password is in the keychain only, nowhere else.
Test: scratch copy of replicantdb-cli (Build 40) signed --options runtime --timestamp, zipped with ditto -c -k, notarytool submit --wait → submission 4bda0148-b843-451f-841e-0064d52b329e, status Accepted / Ready for distribution, issues: null. Submitted 14:52:01, accepted 15:49:46 (58 min — first submission on a new identity).
NOT done: no installed app is Developer-ID-signed or stapled. Migrating an app changes its designated requirement (Tyrell installer fails closed on that) and its TCC identity — per-app decision with a rollout. Apple Distribution (App Store) is a separate certificate type, also in the company name.

Pre-reboot handoff — 2026-09-09 16:01:45 EDT · rdmsm4x (Rich: "prepare for a reboot… auto resume our open tasks")

Resume: cd ~/dev && claude --resume 742a212e-0181-46c1-8b35-adde8e2189fa (a one-shot LaunchAgent com.eastcoastscience.resume-once opens Terminal and does this ~75 s after the next login, then deletes itself; log ~/Library/Logs/resume-once.log). If it did not fire, run the command by hand. State at reboot: every repo this session touched is clean and pushed (Tyrell, replicantDB, app-baseline, ramdisk, cvedb.io, eastcoastscience.com, RTTy main). fleet/ has 585 pre-existing dirty files (not this session's; on disk, survives reboot). Control-plane jobs stay disabled across reboot (launchctl disable persists): fleet-load-guard, fleet-realtime-guard, stormguard, resume-dispatcher, claude-quota-monitor. Cloud routines: both disabled. Notarization test: ACCEPTED (see section above) — nothing pending at Apple. Open items, in order:

RTTy Build 503 (+ overlap fix + new icon ~/Desktop/rtty_new_090926_exec-c9a466e7-….png) — the Opus worker was told to checkpoint and stop; its state is the LAST checkpoint in ~/dev/apps/RTTy/SESSION-STATE.md and the worktrees ~/dev/_worktrees/rtty-dashboard-applications-height-20260909 and ~/dev/_worktrees/rtty-flows-controls-overlap-20260909 (each had 1 dirty file at 16:00). Resume: finish per that checkpoint's "next command"; deploy 503 to six hosts per docs/release-evidence/build-502/fleet-deployment-2026-09-08.md; relaunch RTTy on the hub so Rich sees 503.
Notarization rollout (Rich: "resume notarization with apple"): the pipeline works (profile ecs-notary, Developer ID identity in the company name). Next is a per-app plan to move to Developer ID + stapling — Tyrell's installer fails closed on a DR change, RTTy/ReplicantDB change TCC identity. Draft the plan, get Rich's go per app.
Tyrell open issues from today: #71 (tyrellbar registers as the app and breaks the launch gate), #72 (deploy_fleet syncs only direct deps), #75 (no-op --execute-fleet sweeps rollbacks). #71 is the one that will bite the next install.
Xcode 26.6 at /Applications/Xcode.app stays until Xcode 27 GA (RTTy App Store archive pins it; App Store rejects beta SDKs); then install 27 GA via xcodes, repin RTTy, archive 26.6.
ReplicantDB daemons are disabled on all six hosts (old load guard); re-enabling is Rich's call. jdmbair13m5 tailscale stopped after its last reboot and needed Tailscale up — check it after this reboot too.
Anthropic weekly 72% → resets 2026-09-11 10:00 EDT; keep one Claude worker at a time until then; OpenAI budget untouched.

Also this afternoon

Tyrell 16 on all six hosts (jdmbair13m5 7→16 after its reboot; tailscale restarted with Tailscale up). Tyrell #74 resolved; #75 filed.
RTTy: PR #37 (dashboard Applications band sized from layout tokens; default window 1500 pt; 1,053 tests 0 failures) merged as 4202b54; overlap fix + new icon + Build 503 release handed to the worker, checkpointing for the reboot.
Xcode: 26.6 kept at /Applications/Xcode.app (RTTy App Store archive pins it; App Store rejects beta SDKs); Xcode 27 beta 6 is the runnable GUI and is selected.
Files: ~/scripts/resume_once_after_reboot.zsh, ~/Library/LaunchAgents/com.eastcoastscience.resume-once.plist (self-removing).

Undo

Remove the one-shot: launchctl bootout gui/$(id -u)/com.eastcoastscience.resume-once; rm ~/Library/LaunchAgents/com.eastcoastscience.resume-once.plist.
Notarization created nothing on disk except the scratch zip under the session scratchpad; the Developer ID certificate and ecs-notary profile are Rich's, in the login keychain.