aaronrene / knowtation public
2026-08-10-kn-apple-t1-complete.md markdown
41 lines 1.7 KB
Raw
sha256:4215cecbbabf5591b1ff69053cc938b4b6c800f0d487be40618c1d4254d8b67b security: npm audit fix pre-bridge 2026-09-05 Human 1 day ago

KN-APPLE Operator T1 — complete — 2026-08-10

Verdict: T1 COMPLETE — land + APPLE_CLIENT_ID configured + live providers.apple: true. Product PRIMARY may advance to Scooling APPLE-4-live.

Prior (same day)

Land + route-only evidence: docs/reviews/2026-08-10-kn-apple-land-t1-partial.md (at that time apple:false / 503 NOT_CONFIGURED).

Operator T1 env + client registration

Check Result
Apple Developer App ID Scooling Apple = com.scooling.apple registered
Netlify knowtation-gateway APPLE_CLIENT_ID Set to com.scooling.apple (production context)
Redeploy Production rebuild after env set
Xcode signing Team Aaron Carvajal; auto-manage; Bundle ID com.scooling.apple; Ready
Xcode Display Name Scooling (not “Apple”)
Xcode capability Sign in with Apple present on target

Live probes (api.knowtation.store)

Observed after env redeploy (2026-08-10T14:42Z UTC):

Probe Result
GET /api/v1/auth/providers {"google":true,"github":true,"apple":true}
POST /api/v1/auth/native-apple-exchange with forged identity_token HTTP 401 APPLE_ASSERTION_INVALID (not NOT_CONFIGURED)

Explicit non-claims

  • CapabilityGates in scooling-apple remain hard-false (no Auto flip)
  • No vault-write authorize; no APPLE-6; no App Store submit
  • Forged probe ≠ successful SIWA login; live AuthenticationServices authorize is APPLE-4-live (T1+T2+T15 package on the Scooling/Apple client side)

NEXT

Scooling product PRIMARY → APPLE-4-live Operator tip: authorize T1+T2+T15 together only with written evidence (or DEFER again).

File History 2 commits
sha256:4215cecbbabf5591b1ff69053cc938b4b6c800f0d487be40618c1d4254d8b67b security: npm audit fix pre-bridge 2026-09-05 Human 1 day ago
sha256:9eaa2a7ec9aaf5866cd03d0deadf843cca97778299d1857b5452f71d92a1880a feat(f24): flip DOCS_NOTION_HUB_KEY_AUTHORIZED=true (Tier 3) Human minor ⚠ 15 days ago