`verification/TK-11230/native-build8/cloud-signing-proof.json`

61 lines
{
  "ticket": "TK-11230",
  "timestamp": "2026-09-11T18:33:35.975141+00:00",
  "intent": "Unblock Boomer Calc build8 distribution export using existing Apple cloud signing",
  "riskTier": "R3",
  "authorization": "Steve: unblock; scoped non-email actions authorized",
  "baseline": "Local export failed because no local Distribution private key; archived code previously verified",
  "artifact": {
    "ipa": "/Users/macstudio3/Projects/boomer-calculator/artifacts/TK11230-BoomerCalc-8-cloud-export/App.ipa",
    "sha256": "9b0b2b49789ca3432668d4772eb7e5a71d307418bcd65800b6748ab27fe323c4",
    "size": 5695703,
    "bundle": "com.boomercalc67.app",
    "version": "1.0.1",
    "build": "8",
    "zipIntegrity": "PASS",
    "embeddedFilesMatched": 39,
    "mismatches": []
  },
  "checks": [
    {
      "name": "Authenticated cloud signing",
      "verdict": "PASS"
    },
    {
      "name": "Local IPA export using system PATH",
      "verdict": "PASS"
    },
    {
      "name": "codesign --verify --deep --strict",
      "verdict": "PASS",
      "authority": "Apple Distribution: Steven Abrams (3VAV3KMNZK)"
    },
    {
      "name": "App Store profile",
      "verdict": "PASS",
      "getTaskAllow": false,
      "appIdentifier": "3VAV3KMNZK.com.boomercalc67.app"
    },
    {
      "name": "Apple validate-only check",
      "verdict": "PASS",
      "errors": 0,
      "warnings": 1,
      "evidence": "apple-validation.json"
    },
    {
      "name": "Existing certificate inventory preserved",
      "verdict": "PASS"
    },
    {
      "name": "Exact build physical-device journey",
      "verdict": "SKIP",
      "reason": "Not yet exercised; preflight interrupted before installation"
    }
  ],
  "retry": "Authenticated export passed signing but failed IPA packaging when Apple rsync selected incompatible Homebrew server; command-local PATH=/usr/bin:/bin:/usr/sbin:/sbin resolved it. No global PATH edit.",
  "sideEffects": "Xcode export created AWAITING_UPLOAD buildUploads metadata for build8; no binary upload or submission performed. No email send action executed.",
  "retained": "Signed IPA and archive retained under gitignored artifacts; signed binaries and provisioning information excluded from git.",
  "verdict": "SIGNING AND EXPORT UNBLOCKED; native verification and App Store submission remain incomplete."
}