rdmsm4x-changelog-20260916-1829-datamob-developer-id-signed-notarized

Delivered Developer ID signed, notarized, and stapled universal2 release of dataMOB application suite per DEC-20260909-03 and TASK-20260909-07.

Scope

• Host: rdmsm4x (macOS 27.0 26A428, Apple M4 Max)
• Repositories: rdmsm4x:~/dev/apps/dataMOB
• Task: TASK-20260909-07 (parent: EPIC-20260909-01)

What Changed & Why

1. Pre-signing Test Verification:

   • Audited test infrastructure: confirmed 0 test suites configured in DataMob.xcodeproj.
   • Verified scripts/xcode_adder test suite executed and passed (1 / 1).

2. Universal2 Build Pipeline:

   • Preserved XcodeGen build gates (ARCHS: "x86_64 arm64", ONLY_ACTIVE_ARCH: NO) in project.yml.
   • Authored canonical build.sh supporting --test and --sign-notarize.
   • Built DataMob.app universal2 bundle and standalone CLI tool dist/DataMobCLI.
   • Verified universal2 x86_64 arm64 architectures with lipo -archs across all executables (DataMob.app/Contents/MacOS/DataMob, DataMobCore.framework, DataMobSafariExtension.appex, and dist/DataMobCLI).

3. Signing, Notarization & Stapling:

   • Performed inside-out signing on embedded DataMobCore.framework and DataMobSafariExtension.appex, and standalone CLI tool dist/DataMobCLI with Developer ID Application: east coast science, llc (ZU2882L4HT), hardened runtime, and trusted timestamp.
   • Signed, submitted for notarization via ecs-notary profile, and stapled dist/DataMob.app via /Users/richh/dev/lib/app-baseline/scripts/ecs_sign_notarize.zsh.
   • Notarization submission ede3c79b-58bd-4b51-88db-c620d4bd509b status: Accepted.
   • Gatekeeper verified spctl -a -vv -t exec -> source=Notarized Developer ID.
   • Stapler validated xcrun stapler validate -> The validate action worked!.

4. Artifact Preservation & Release Evidence:

   • Preserved stapled DataMob.app, DataMob.zip (via ditto -c -k --keepParent), standalone CLI DataMobCLI, and RECEIPT.md under /Users/richh/dev/_handoff/datamob-signed-20260916/.
   • Committed build.sh and docs/release-evidence/RECEIPT.md at commit 1a42db4 on main.
   • Pushed main to fleet (git.ecs0.net:git/apps/dataMOB.git), backup (https://github.com/richhdoty/rdmsm4x-dev-apps-datamob.git), and origin (https://github.com/richhdoty/rdmsm4x-dev-apps-datamob.git).
   • Verified handoff directory contents via ls -la before cleanly removing worktree /Users/richh/dev/_worktrees/datamob-signed-task-20260909-07.

Exact Files Touched

• /Users/richh/dev/apps/dataMOB/build.sh (new)
• /Users/richh/dev/apps/dataMOB/docs/release-evidence/RECEIPT.md (new)
• /Users/richh/dev/_handoff/datamob-signed-20260916/DataMob.app
• /Users/richh/dev/_handoff/datamob-signed-20260916/DataMob.zip
• /Users/richh/dev/_handoff/datamob-signed-20260916/DataMobCLI
• /Users/richh/dev/_handoff/datamob-signed-20260916/RECEIPT.md
• /Users/richh/dev/issues/resolved/TASK-20260909-07-datamob-next-build-signed-with-developer.md
• /Users/richh/dev/LLM/Claude/changelogs/rdmsm4x-changelog-20260916-1829-datamob-developer-id-signed-notarized.md

Verification Evidence

• Pre-signing Tests: 0 unit test suites configured in DataMob.xcodeproj; scripts/xcode_adder test passed (1 / 1)
• Codesign Strict Verification: dist/DataMob.app: valid on disk dist/DataMob.app: satisfies its Designated Requirement
• Gatekeeper spctl Assessment: dist/DataMob.app: accepted source=Notarized Developer ID origin=Developer ID Application: east coast science, llc (ZU2882L4HT)
• xcrun stapler validate: The validate action worked!
• xcrun notarytool info: status: Accepted (submission ID: ede3c79b-58bd-4b51-88db-c620d4bd509b)