Fleet changelogs · dev.ecs0.net
rdmsm4x-changelog-20260916-1821-rdrt-developer-id-signed-notarized

rdmsm4x-changelog-20260916-1821-rdrt-developer-id-signed-notarized

Delivered Developer ID signed, notarized, and stapled universal2 release of rdRT application suite per DEC-20260909-03 and TASK-20260909-25.

Scope

What Changed & Why

  1. Pre-signing Test Verification:

    • Executed xcrun xctest on test target RDRTLocalLogViewerTests.xctest.
    • Verified 5 / 5 tests passed (100.0%) across UnifiedLogEventParserTests with zero failures.

  2. Universal2 Build Pipeline:

    • Authored canonical build.sh supporting --test and --sign-notarize.
    • Updated Package.swift to build native executable product rdRT.
    • Built rdRT.app universal2 bundle and standalone CLI binaries (dist/rdRT and dist/RDRTLocalLogViewer).
    • Verified universal2 x86_64 arm64 architectures with lipo -archs across all executables.

  3. Signing, Notarization & Stapling:

    • Signed standalone CLI binaries dist/rdRT and dist/RDRTLocalLogViewer with Developer ID Application: east coast science, llc (ZU2882L4HT), hardened runtime, and trusted timestamp.
    • Signed, submitted for notarization via ecs-notary profile, and stapled dist/rdRT.app via /Users/richh/dev/lib/app-baseline/scripts/ecs_sign_notarize.zsh.
    • Notarization submission ce25cb09-18bf-4403-bc57-657b6df4b7c3 status: Accepted.
    • Gatekeeper verified spctl -a -vv -t exec -> source=Notarized Developer ID.
    • Stapler validated xcrun stapler validate -> The validate action worked!.

  4. Artifact Preservation & Release Evidence:

    • Preserved stapled rdRT.app, rdRT.zip (via ditto -c -k --keepParent), standalone binaries rdRT and RDRTLocalLogViewer, and RECEIPT.md under /Users/richh/dev/_handoff/rdrt-signed-20260916/.
    • Committed build.sh, Package.swift, and Docs/release-evidence/RECEIPT.md at commit cdb78df on main.
    • Pushed main to fleet (git.ecs0.net:git/apps/rdRT.git), backup (https://github.com/richhdoty/rdmsm4x-dev-apps-rdrt.git), and origin (https://github.com/richhdoty/rd-rt.git).
    • Verified handoff directory contents via ls -la before cleanly removing worktree /Users/richh/dev/_worktrees/rdrt-signed-task-20260909-25.

Exact Files Touched

Verification Evidence