rdmsm4x-changelog-20260927-1227-RTTy Build 528 purchase access

RTTy Build 528 purchase access — TASK-20260927-45

2026-09-27 12:27:43 EDT · rdmsm4x · Codex for rtty@rdmsm4x. Work began2026-09-27 11:40:47 EDT; deployment accepted12:22:57 EDT; final source synchronization12:26:57 EDT.

Removed app-version purchase bypass, related state/copy and prior tests; Standard now requires a verified subscription or lifetime IAP. Direct remains unlocked, and locked monitoring/permissions remain prohibited. Monthly$2.99/yearly$14.99/lifetime$39.99 unchanged. Version0.3.851/build528 includes signed BuildInfo correction ISSUE-20260924-12.

Scope: canonical source and installed Direct on rdmsm4x; source-only fast-forwards on rdmbair15m5 and rdmbair13m5. Gated artifact source7cd9549; final main 81e008b7ad742d3b1ef202921022be390ce3cf51, verified on origin/fleet/backup and both remote clones. No force push.

Verification: full qa_release.sh10/10 via Terminal.command12:06:04–12:20:54 EDT, exit0. Native and Rosetta each1,901 passed/8 skipped/0 failed; hosted StoreKit10/10; FEATURES70 rows/all264 cited tests passed per arch; strict codesign and universal2 for Direct/Store app/extension. Original first gate had two peer timing test failures; three isolated reruns and complete unchanged retry passed, receipts retained. No skips or weakened tests introduced.

Store package /Users/richh/dev/_handoff/rtty-freemium-20260926/export528/RTTy.pkg; SHA256 a536f0bd88bc645598af9c5094e55b1416c954c6ebe11f66d8862f3ffd75349c. Packaged BuildInfo releaseEligible=true/signingMode=release. Installed Direct hash af863bf025222ab5b6ed7d7aff5e7b28f529af3af76a8e9fe6bf126c57bbe0de, Developer ID signed, deliberately unnotarized. Runtime alive after20s; menu preference preserved.

Backup/rollback: old527 bundle at /Users/richh/Archive/RTTy-builds/0.3.851-527-54f34c1/RTTy.app; its hash matches the pre-gate baseline. To roll back, quit528, archive it, restore527 to /Applications/RTTy.app, verify and relaunch. Preferences, archives and Keychain are untouched by installer.

Commands: trusted Standard construct/export, qa_release.sh, hosted xcodebuild test, generated metadata/policy tools, explicit-path git commits, no-ff merges, three named pushes, clean clone fast-forwards, build_and_run.sh --stage with RTTY_NOTARIZE=0, existing deploy_rtty_direct.zsh, signature/hash/metadata readbacks.

Files changed: Apps/RTTyMobile/Config/RootMetadata.xcconfig Apps/RTTyStandard/Config/Release.xcconfig Apps/RTTyStandard/ProTests/ProStoreKitTests.swift BUILD_NUMBER CHANGELOG.md FEATURES.md HANDOFF3.md HANDOFF5.md ISSUES.md Project/SESSION-STATE.md Sources/RTTy/Services/ProStore.swift Sources/RTTy/Views/ProSheet.swift Tests/RTTyTests/ProEntitlementTests.swift docs/FEATURE_MATRIX.md docs/PRICING.md script/TrustedStandardLaunchCapabilityPolicy.json script/TrustedStandardProjectGraph.json script/TrustedStandardVerifierBundle.json

Full handoff and owner-only click list: /Users/richh/dev/_handoff/rtty-freemium-20260926/HANDOFF5.md (also committed in RTTy). Review screenshots paywall528-light.png and paywall528-dark.png use production views with local price fixtures. No ASC access, Apple upload, submission or notarization performed. Rich alone handles developer-reject522, Free app pricing, the three IAPs, upload and submission.