Fleet changelogs · dev.ecs0.net
rdmsm4x-changelog-20260916-1813-receiptroo-developer-id-signed-notarized

rdmsm4x-changelog-20260916-1813-receiptroo-developer-id-signed-notarized

Delivered Developer ID signed, notarized, and stapled universal2 release of ReceiptRoo application suite per DEC-20260909-03 and TASK-20260909-27.

Scope

What Changed & Why

  1. Pre-signing Test Verification:

    • Audited test infrastructure: confirmed 0 test suites configured in ReceiptRoo.xcodeproj scheme ReceiptRoo-macOS.
    • Verified developer measurement harness Tools/measure_classifier/Harness.swift compiles cleanly with Swift compiler.

  2. Universal2 Build Pipeline:

    • Updated project.yml with ARCHS: "x86_64 arm64" and ONLY_ACTIVE_ARCH: NO under ReceiptRoo-macOS.settings.base to generate native dual-architecture project configuration.
    • Authored canonical build.sh supporting XcodeGen generation, Release build, CLI build, and --sign-notarize.
    • Built ReceiptRoo.app universal2 bundle and standalone CLI dist/receiptroo.
    • Verified universal2 x86_64 arm64 architectures with lipo -archs across both executables (ReceiptRoo.app/Contents/MacOS/ReceiptRoo and dist/receiptroo).

  3. Signing, Notarization & Stapling:

    • Signed standalone CLI dist/receiptroo with Developer ID Application: east coast science, llc (ZU2882L4HT), hardened runtime, and trusted timestamp.
    • Signed, submitted for notarization via ecs-notary profile, and stapled dist/ReceiptRoo.app via /Users/richh/dev/lib/app-baseline/scripts/ecs_sign_notarize.zsh.
    • Notarization submission 85196a90-2b45-4183-816d-8d1b899f1da7 status: Accepted.
    • Gatekeeper verified spctl -a -vv -t exec -> source=Notarized Developer ID.
    • Stapler validated xcrun stapler validate -> The validate action worked!.

  4. Artifact Preservation & Release Evidence:

    • Preserved stapled ReceiptRoo.app, ReceiptRoo.zip (via ditto -c -k --keepParent), standalone binary receiptroo, and RECEIPT.md under /Users/richh/dev/_handoff/receiptroo-signed-20260916/.
    • Committed build.sh, project.yml, ReceiptRoo.xcodeproj/project.pbxproj, and docs/release-evidence/RECEIPT.md at commit 7bcf68f on main.
    • Pushed main to fleet (git.ecs0.net:git/apps/ReceiptRoo.git) and backup (https://github.com/richhdoty/ReceiptRoo.git).
    • Verified handoff directory contents via ls -la before cleanly removing worktree /Users/richh/dev/_worktrees/receiptroo-signed-task-20260909-27.

Exact Files Touched

Verification Evidence