feat: verified macOS development DMG and deferred official signing (#49) - #70
Merged
Merged
Conversation
cam11505
changed the title
4 of 10 tasks
cam11505
marked this pull request as ready for review
September 27, 2026 04:27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope and user decision
Refs #49 (do not close). Immutable parity baseline:
v1.2.2/bb0197b0291707287517ba8bdfc3a10ce1ad1149.Prerequisite main:
061a3d830b1231ded9a4da27e10f07ab24acb380(PR #69 merged, #48 completed).On 2026-09-27 the user explicitly chose no paid Apple enrollment, official signing or notarization for now, and continued macOS development-build testing. Official #49 remains deferred/not passed; credential-free #50 integration may follow this PR's merge. #51 official RC/tag/release gates are unchanged. Physical Mac QA stays deferred, not passed.
Implementation
ArchiveLens-<version>-macos-arm64-development.dmgas a development CI artifact only after both verifications pass; recordrelease_eligible=false, unsigned/ad-hoc and not notarized.docs/MACOS_DEVELOPMENT.md; future paid setup explicitly deferred indocs/MACOS_SIGNING.md.Verification
Final head:
f8229269903deb6a31bf135a81db9df26a275cee.Local full suite:
260 passed, 4 skipped; Ruff check/format and git diff checks passed.macOS run 36294022303 succeeded: development app, native arm64 inspection, packaged self-test/Finder opens, development DMG mount/content/copy/launch, independent inventory/re-mount/self-test, and development artifact upload.
Downloaded DMG:
ArchiveLens-1.2.2-macos-arm64-development.dmg, 46,727,577 bytes; SHA-25664aaef26c9ccbbc668ef89275158b135d8cf3899fed992c2b05e45b9ab637698matched both manifest/checksum and independent report. Tested merge ref1da40dbf45cd884d1d1900406b767aae31f1aa76matches the head tree28029cf6954fb73bc2255e91abd213a219a86a7a. Manifest records 223 arm64 native files,development=true,release_eligible=false, and notarization not performed.Windows/Ubuntu run 36294022254 succeeded: source tests, license audit, portable and installer, exact-commit checksum/release-set verification and artifact upload. All current PR checks passed.
Remaining official gates (not waived)
Keep #49 open until the user resumes the official track and real Developer ID signing, Apple Accepted app/DMG notarization, staple/Gatekeeper and independent official artifact evidence pass. The current app version remains 1.2.2 during v1.3 development; exact tested source commit identifies each developer build. No v1.3 GitHub Release is created here.