Fleet changelogs · dev.ecs0.net
rdmsm4x-changelog-20260916-1744-xentropy-developer-id-signed-notarized

rdmsm4x-changelog-20260916-1744-xentropy-developer-id-signed-notarized

Delivered Developer ID signed, notarized, and stapled universal2 release of XEntropy per DEC-20260909-03 and TASK-20260909-37.

Scope

What Changed & Why

  1. Pre-signing Test Verification:

    • Ran swift test across the Xentropy package test targets.
    • Verified 345 / 345 unit tests passed (100.0%) across all test targets (XEntropyTests: 61, XEntropyGatewayTests: 19, XEntropyCoreTests: 202, XEntropyCLITests: 59, PasskeyDiscoveryTests: 4) in 16.5s.

  2. Universal2 Build Pipeline:

    • Added canonical root build.sh supporting --sign-notarize.
    • Built XEntropy and xentropyctl universal2 executables via swift build --package-path app -c release --product XEntropy --arch arm64 --arch x86_64 and --product xentropyctl.
    • Assembled dist/XEntropy.app bundle with Info.plist preserving required bundle ID app.xentropy.XEntropy, LSMinimumSystemVersion 14.0, version 0.2.0 (build 2), and bundled AppIcon.icns.
    • Verified universal2 x86_64 arm64 slices with lipo -archs on all executables.

  3. Signing, Notarization & Stapling:

    • Signed standalone dist/xentropyctl CLI binary with Developer ID Application: east coast science, llc (ZU2882L4HT) (1C07FCD80C36EAD5D9E3B73F7ACCCA5368DC73FB), hardened runtime, and trusted timestamp.
    • Signed, submitted for notarization via ecs-notary profile, and stapled dist/XEntropy.app via /Users/richh/dev/lib/app-baseline/scripts/ecs_sign_notarize.zsh.
    • Notarization submission 4756f431-c1fc-46fc-af31-3ddf3ecca5af status: Accepted.
    • Gatekeeper verified spctl -a -vv -t exec -> source=Notarized Developer ID.
    • Stapler validated xcrun stapler validate -> The validate action worked!.

  4. Artifact Preservation & Release Evidence:

    • Preserved stapled XEntropy.app, XEntropy.zip, standalone xentropyctl, and RECEIPT.md under /Users/richh/dev/_handoff/xentropy-signed-20260916/ and canonical dist/.
    • Committed build.sh and docs/release-evidence/RECEIPT.md at commit 94be029 on main.
    • Pushed main to fleet (git.ecs0.net:git/apps/Xentropy.git), origin (github.com:richhdoty/xentropy.git), and backup (github.com:richhdoty/rdmsm4x-dev-apps-xentropy.git).
    • Cleanly removed worktree /Users/richh/dev/_worktrees/xentropy-signed-task-20260909-37.
    • Resolved TASK-20260909-37 in ticket store.
    • Broadcasted resolution on agent_msg.zsh (20260916-174358-D4CFB036) and synced to 5 remote peer nodes.

Exact Files Touched

Verification Evidence