rdmsm4x-changelog-20260908-1800-rtty-build502-fleet-deploy-appstore-readiness

RTTy Build 502 (0.3.827, c246807) built from main with every merged fix, passed all ten release gates, and was deployed to five of six fleet Macs with Build 501 armed as rollback; App Store submission remains blocked on certificates only Rich's Apple ID can create.

Session 2026-09-08 17:22:29 → 2026-09-08 18:00:33 EDT on rdmsm4x (claude@rdmsm4x/dev-a9, session_01CjzsPrG917wKjS4Sz3UbQh). Rich: "build latest RTTy to the fleet, merge as needed, increment the build number, deploy", then "ready RTTy macOS for App Store submission tonight", then "jdmbair13m5 may be low on disk, use other hosts".

Scope

Hosts changed: rdmbair15m5, rdmbair13m5, rdmpw3265m, rdmpw3275m, rdmsm4x (/Applications/RTTy.app replaced; previous build kept at /Applications/.RTTy.app.rollback-build501-c246807; archive left at /private/tmp/RTTy-direct-0.3.827-build502-c246807.zip). jdmbair13m5 untouched.
Repo ~/dev/apps/RTTy main: aa37a7e → 3f33fc7 (PR #36 + 3 docs commits), pushed to origin, backup, fleet.

What changed and why

Item	Detail
Build bump	BUILD_NUMBER 501→502; xcconfigs regenerated; policy-test literals; Standard trust chain re-rendered with the official renderers (one hash, `Release.xcconfig`)
Library pin	ECSSystem `cb26d9d`→`272b0e2` (README-only drift) so gate 1 is green
Gates	run 4 over `ssh richh@rdmsm4x`: 10/10 PASS, 75 assertions, 1041/1046 tests native + Rosetta, 0 failures, 17:45:22–17:47:48 EDT
Deploy	`deploy_build502_fleet.zsh` (from the Build 48 installer + 1 GiB free-space preflight): all five accepted in 56–70 s, ping children 4–5, nettop 0
Audit	accepted on four; rdmsm4x fails only the LaunchServices dev-registration tripwire (dist/, scratch clone, gate temp output). `lsregister -u` applied only to paths that no longer exist (1 + 5)
Records	`docs/release-evidence/build-502/fleet-deployment-2026-09-08.md`, RELEASE_HISTORY (also captures Build 501's unrecorded fleet state), CHANGELOG, SESSION-STATE, `docs/app-store/READINESS_STATE_20260908.md`, PROJECTS.md row, TASK-20260908-01 resolved

Three failed gate runs before the clean one (none a repo defect)

Gate 6 gitDirty true — I edited docs in the checkout during the build. My error.
Gate 5 open error -600 — race relaunching the same dist/ bundle right after pkill.
Gate 7 -1712 AppleEvent timed out — the session's responsible process is Terminal.app with an unanswered Automation consent for System Events. Over ssh the probe answers in 0 s.

App Store — what is true tonight

Apple Distribution identity 0, App Store profiles 0, network-filter App ID absent, no ASC API key, no Xcode account session. Candidate itself is ready (gate 4 builds the Standard target universal unsigned at 502). Rich's ~10-minute portal list is §2 of READINESS_STATE_20260908.md; runbook and CSRs in ~/dev/fleet/signing-finish-20260905/. After that: install_distribution_identity.zsh --execute, then Xcode Organizer.

Outstanding for Rich

Allow the pending Automation prompt Terminal → System Events on rdmsm4x (or gate 7 keeps needing the ssh loop).
Create the certificates/profiles/App ID (READINESS_STATE_20260908.md §2).
jdmbair13m5: disk 100% full (101 MiB free), Tailscale stopped; still on Build 501 and under the B5 hold.
~/.secrets/global.env gained an empty QA_RC_SECRET= line from the vault hook at 17:36:17 (false positive) — delete when convenient.

How to undo

Per host: quit RTTy, sudo mv /Applications/RTTy.app /Applications/.RTTy.app.rejected-502 && sudo mv /Applications/.RTTy.app.rollback-build501-c246807 /Applications/RTTy.app && open /Applications/RTTy.app. Repo: revert PR #36 (84bf74e) and re-render the trust chain.

Budget

Anthropic 7d 69% (conserve) — no subagents spawned; all work inline.