RELEASE-RECORD.md
markdown
sha256:bd1eb24434d281fe65142038c1bf217493421f5a86880c22dff7e6037d2d4700
feat(companion): add production macOS distribution path
Human
minor
⚠ breaking
24 days ago
Knowtation macOS 0.1.0 (100) release record
State: UNRELEASED — source implementation only
W4 status: BLOCKED — no signed/notarized artifact or installed-caller evidence has been delivered
Sealed evidence: W4/C17 is unchanged; this operational record is outside sealed W4 evidence
Fixed release identity
- Product: Knowtation
- Version/build:
0.1.0/100 - Target: macOS 14+, arm64
- App:
store.knowtation.companion - Custody helper:
store.knowtation.companion.custody - CLI:
store.knowtation.cli - MCP:
store.knowtation.mcp - Installer:
store.knowtation.pkg, package version0.1.0.100 - Hosted native OAuth issuer:
https://mcp.knowtation.store/api/v1/auth/native
Source identity — pending integration
- Muse revision:
<PENDING_APPROVED_MUSE_MAIN_REVISION> - GitHub revision:
<PENDING_MERGED_MIRROR_REVISION> - Branch used for implementation:
feat/companion-phase-7-distribution - Source tree clean:
<PENDING>
Public signing identity — pending release action
- Developer ID Application common name:
<PENDING_PUBLIC_IDENTITY> - Developer ID Installer common name:
<PENDING_PUBLIC_IDENTITY> - Apple Team ID:
<PENDING_PUBLIC_TEAM_ID> - Custody provisioning profile UUID/expiry:
<PENDING_PUBLIC_METADATA> - Notary app submission ID/status:
<PENDING> - Notary package submission ID/status:
<PENDING> - Update key ID and public key:
<PENDING_PUBLIC_METADATA>
Exact deliverables — all pending
| File | SHA-256 | Bytes | Status |
|---|---|---|---|
Knowtation-0.1.0-100-macos-arm64.zip |
<PENDING> |
<PENDING> |
missing |
Knowtation-0.1.0-100-macos-arm64.pkg |
<PENDING> |
<PENDING> |
missing |
release-manifest.json |
<PENDING> |
<PENDING> |
missing |
release-manifest.sig |
<PENDING> |
<PENDING> |
missing |
SHA256SUMS |
<PENDING> |
<PENDING> |
missing |
sbom.spdx.json |
<PENDING> |
<PENDING> |
missing |
LICENSE |
<PENDING> |
<PENDING> |
missing |
THIRD-PARTY-NOTICES.txt |
<PENDING> |
<PENDING> |
missing |
Verification evidence — pending
- Source-to-build runtime manifest and release lock
- Complete SBOM and license closure
- Application/helper/CLI/MCP/runtime signature details and entitlements
- Installer signature and payload list
- App and installer notarization submissions, logs, and stapler validation
- Gatekeeper assessments, ZIP test, artifact checksums, architecture closure, secret-file scan
- Full tracked test log and bundled-runtime npm audit
- Installed lifecycle and helper registration log
- Signed CLI and MCP authenticated session evidence
- Unsigned caller, tamper/substitution, and rollback rejection evidence
- Second higher-build signed update-chain evidence
No field in this record may be changed from pending until it is supported by the exact delivered artifact or captured public evidence. Completion of this record alone does not qualify W4.
File History
1 commit
sha256:bd1eb24434d281fe65142038c1bf217493421f5a86880c22dff7e6037d2d4700
feat(companion): add production macOS distribution path
Human
minor
⚠
24 days ago