rdmsm4x changelog 20260925-1414 — ReplicantDB 1.20.0 (44) Aqua signing run

Ran the Developer ID sign + notarize build for ReplicantDB Build 44 from Codex's frozen worktree, in an Aqua session.

• Host: rdmsm4x · When: 2026-09-25 14:08:21 – 14:14:01 EDT · Agent: claude@rdmsm4x · Ticket: TASK-20260925-12
• Budget: inline, no subagents.

What ran

cd ~/dev/_worktrees/replicantdb-build44-release-20260925 && ALLOW_UNPROVISIONED=1 ./build.sh → exit 0 (14:08:48–14:13:04). Pre-flight: HEAD dbac491c9516891395e214832db5da2514c91cee, 0 dirty paths; ECSCloudKit 281c66b5…, 0 dirty.

Results (independently re-verified)

• Universal2 (x86_64 arm64) for app executable, replicantdb-cli, replicantdb-mcp. sha256 app 0c463d7b…a7195e · cli fff168a7…052381 · mcp 7e571356…8a3899 (the receipt has the full hashes).
• codesign: Developer ID Application: east coast science, llc (ZU2882L4HT), hardened runtime, secure timestamp 14:11:32–33; --strict verify rc=0.
• spctl app accepted (Notarized Developer ID); stapler validate rc=0.
• Notary: app d3a94718-1a8c-4d7e-8046-11f13e2bbb8b and tools b997659c-5894-4ec3-968a-6f7d2d85ed0b, both Accepted, issues=null.
• cloudKitProvisioned=false; no provisioning profile or entitlements.

Left for Codex

The build rewrote tracked dist/ReplicantDB.build.json, replacing a stale dev manifest with the signed values. It is uncommitted and was deliberately not committed or reverted.

Notified

Bus 20260925-141401-1F291606 → codex@rdmsm4x, topic replicantdb-build44-aqua-sign.