Delivered: GPL-3.0 licence, CLA, notarized release tooling, and signing wizard #20

Closed
opened 2026-08-22 04:17:21 +00:00 by kayg · 0 comments
Owner

Current state

Delivered in commits d978b31 and 9c08672. The repository now carries GPL-3.0-or-later licensing, a CLA with a relicensing grant, hardened-runtime signing and notarized release scripts, and a human-facing signing setup wizard. The release path verifies the signing identity and runtime flag, submits and staples the notarization, and checks Gatekeeper acceptance. The diagnostics name keychain/private-key ACL and non-TTY failure modes.

Acceptance criteria

  • GPL-3.0-or-later and CLA files are present and documented for contributors.
  • Release tooling signs with hardened runtime and a trusted timestamp when available.
  • The release path verifies the configured identity before building, submits and staples notarization, and validates Gatekeeper acceptance.
  • The setup wizard guides the human-only Developer ID Application and App Store Connect API-key steps and requires a TTY.
  • The delivered behavior is represented by commits d978b31 and 9c08672.
## Current state Delivered in commits `d978b31` and `9c08672`. The repository now carries GPL-3.0-or-later licensing, a CLA with a relicensing grant, hardened-runtime signing and notarized release scripts, and a human-facing signing setup wizard. The release path verifies the signing identity and runtime flag, submits and staples the notarization, and checks Gatekeeper acceptance. The diagnostics name keychain/private-key ACL and non-TTY failure modes. ## Acceptance criteria - GPL-3.0-or-later and CLA files are present and documented for contributors. - Release tooling signs with hardened runtime and a trusted timestamp when available. - The release path verifies the configured identity before building, submits and staples notarization, and validates Gatekeeper acceptance. - The setup wizard guides the human-only Developer ID Application and App Store Connect API-key steps and requires a TTY. - The delivered behavior is represented by commits `d978b31` and `9c08672`.
kayg 2026-08-22 04:17:25 +00:00
  • closed this issue
  • added the
    delivered
    label
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/hermternal-apple#20
No description provided.