`apps/mobile/device-proof-evidence/SUBMIT-GATE-CHECKLIST.md`

42 lines
# Submit Gate — run the moment the 2.1 recording exists (TK-10279)

Final pre-send verification before replying to Apple's **Guideline 2.1 · Information Needed**.
Do NOT reply/attach until every box is checked. Sending is Steve's gated console action.

## 1. The recording (the item that was blocking)
- [ ] A `.mov`/`.mp4` exists in `device-proof-evidence/` from the **physical iPhone 17 Pro Max**, iOS 26.6.1 (not a simulator).
- [ ] It shows the full shot-list journey: cold launch → Opportunities list → open a listing showing **Max Bid / Valuation / Cost / Scores** → Settings → **connection test** → (optional) **Sign in with Apple availability** (never tapped).
- [ ] Playback is clean end-to-end, no crash, no blank/error state.
- [ ] `./verify-recording.sh <recording.mov|recording.mp4>` returns **PASS** before upload.
- [ ] Manual frame review confirms **no notifications, private apps, names, messages, phone numbers, email addresses, or other personal content** appears anywhere.
- [ ] The recording remains inside GovArbitrage and visibly completes the promised detail/settings journey; codec validation alone is insufficient.
- [ ] After that manual review, create the bound sidecar: `shasum -a 256 <recording> > <recording>.privacy-reviewed.sha256`; `readiness-probe.sh` must report recording `PASS` and privacy review `PASS`.

## 2. Live backend the reviewer will exercise (re-verify same-day — was PASS 2026-09-02)
```sh
for p in "" /privacy /api/listings; do
  curl -sS -o /dev/null -w "%{http_code} %{time_total}s  https://auctions.agentabrams.com$p\n" --max-time 20 "https://auctions.agentabrams.com$p"
done
```
- [ ] All three return **200**. `/api/listings` still serves rows (was total=2613).

## 3. ASC artifact state (re-verify same-day)
```sh
ASC_KEY_PATH=/Users/macstudio3/.appstoreconnect/private_keys/AuthKey_72Y2TZT54R.p8 \
ASC_KEY_ID=72Y2TZT54R node ~/.claude/skills/ipa-status/scripts/ipa-status.mjs --ready
```
- [ ] GovArbitrage still shows build + description + screenshots present (SUBMIT-READY line).

## 4. The reply text
- [ ] `../ASC-PASTE-KIT.md` → "Guideline 2.1 Reply (paste)" covers all 6 disclosures Apple asked for
      (auction source, backend `auctions.agentabrams.com`, Sign in with Apple via expo-apple-authentication,
      third-party listing photos, all-territories consistency, public-records / no-regulated-material).

## 5. Send (Steve — gated console step, only after 1–4 all checked)
- [ ] App Store Connect ▸ **Resolution Center** ▸ reply to the 2.1 review.
- [ ] Paste the reply text + **attach the recording**.
- [ ] Submit the reply. (No new binary needed — this is an info+video response, not a resubmit.)

## Gates (unchanged)
❌ No ASC write until box 5 · ❌ Do not complete Sign in with Apple (availability only) · ✅ read-only re-verify above.