eleven / ocho Public

Record live immediate-sending release and Apple build 8 verification

Co-Authored-By: Codex <noreply@openai.com>

Paul Campbell pushed by codex 1 month ago 2539a68c61e24a84931b3845da3f46372750f643 parent 3a34741

1 file changed, +12 −4

docs/infinity/status.md +12 −4

Intent

full ledger: infinity-v1

diff --git a/docs/infinity/status.md b/docs/infinity/status.md

index 9e9c75f..19aab20 100644

--- a/docs/infinity/status.md

+++ b/docs/infinity/status.md

@@ -1,4 +1,12 @@

-# 🤖 Ocho status — 2026-09-07

+# 🤖 Ocho status — 2026-09-08

+## September 8 update

+Release `3a34741a` is live on both Carlos apps, with `/api/version` body verification and the public `chat.js`, `outgoing.js` and stylesheet byte-matched to committed source. The home deploy watch timed out before adoption; a subsequent scoped restart and direct verification confirmed the new running version. No merge into main was performed.

+The web composer and account footer have no top divider; the composer area is transparent, the feed ends above it, and Send appears only for non-whitespace text. Web and native Apple clients show outgoing text immediately, keep pending sends in encrypted browser storage or Keychain, and offer Retry without changing message IDs or ciphertext. An owner-authenticated per-message server retry advances delivery backoff. `Sent` confirms delivery to the recipient instance, not a read receipt. Media attachments and link previews remain unimplemented in Ocho; reusable Eleven components are present in the inherited tree.

+Signed Mac 0.2.0 build 8 is installed and running from `/Applications/Ocho.app`. Signed iPhone build 8 is built locally; Paul's physical phone was unavailable, so its last verified installed build remains 7. Local checks passed: server tests/vet, Chromium/WebKit chat suites, JS protocol/outgoing tests, Go mobile race tests, actual Mac delayed-failure/retry/keyboard UI tests, and iPhone simulator UI tests. The live Chromium front-door run passed delayed failed sending, encrypted reload recovery, exact-ciphertext retry, newer-draft preservation and lost-success-response deduplication as well as signup, consent, profile and restored history. Live WebKit entry/name navigation passed; physical passkey ceremonies remain user-present verification.

## Current release work

@@ -6,7 +14,7 @@ The new onboarding is passkey-only. At ocho.chat, Sign up opens Name → Create

Invitations use a 22-character fragment with 128 bits of randomness. The server holds only an encrypted descriptor and derived lookup/redemption values. Preview decrypts locally, names the inviter and does not consume the link. Acceptance binds it to one recipient and opens a usable conversation even while the inviter's client is closed. Duplicate acceptance by that recipient is retryable; another recipient cannot reuse it. Name/avatar updates are encrypted and signed. Avatars are bounded embedded raster images.

-SwiftUI iOS/macOS and Kotlin/Compose Android remain fully native, sharing the Go/gomobile engine. The updated clients preserve invitation/profile state; the server prevents older clients from overwriting the newer encrypted vault format. Apple build 7 uses Team Tito Limited (`9U4A84C4WK`), identifiers `chat.ocho.app` and `chat.ocho.app.mac`; Android debug build 3 uses `chat.ocho.app`. Existing personal-team installations are preserved until account access in the new app is confirmed.

+SwiftUI iOS/macOS and Kotlin/Compose Android remain fully native, sharing the Go/gomobile engine. The updated clients preserve invitation/profile state; the server prevents older clients from overwriting the newer encrypted vault format. Apple builds use Team Tito Limited (`9U4A84C4WK`), identifiers `chat.ocho.app` and `chat.ocho.app.mac`; Android debug build 3 uses `chat.ocho.app`. Existing personal-team installations are preserved until account access in the new app is confirmed.

Apple notifications are opt-in and contain only a fixed Ocho activity alert. No sender, message, account, thread or ciphertext goes to Apple. Durable per-device wake delivery retries through the Carlos scheduler. The provider key is sealed on the home service only; personal instances hold scoped wake capabilities. Real-device APNs delivery and physical passkey ceremonies still need user-present verification.

@@ -23,9 +31,9 @@ Apple notifications are opt-in and contain only a fixed Ocho activity alert. No

Dedicated Carlos account `ocho`, apps `infinity-home` and `infinity`, channel `canary/infinity`. Public alias ocho.chat is managed in DNSimple's Eleven Messenger team (`eleven`, account 176940). Deploy binaries sequentially and verify `/api/version` response bodies: version headers can lead process adoption. No user tenant database or WAL is reset.

-Both Carlos apps serve release `6d125ff7`, verified from `/api/version` response bodies after sequential deploys and scoped restarts. The final live front-door test passed passkey-first signup, lost-success-response retry, cancelled/unsupported-provider no-allocation checks, browser Back navigation, short invitations, inviter-offline immediate DMs, display-name/avatar synchronization, passkey restoration of identical keys/history and same-recipient invite retry. WebKit verified public entry/name navigation; physical passkey ceremonies remain user-present checks.

+On September 7, both Carlos apps served release `6d125ff7`, verified from `/api/version` response bodies after sequential deploys and scoped restarts. The final live front-door test passed passkey-first signup, lost-success-response retry, cancelled/unsupported-provider no-allocation checks, browser Back navigation, short invitations, inviter-offline immediate DMs, display-name/avatar synchronization, passkey restoration of identical keys/history and same-recipient invite retry. WebKit verified public entry/name navigation; physical passkey ceremonies remain user-present checks.

-Team Tito iPhone build 7 is installed and verified by device app metadata; the older personal-team installation remains intact. Its final installation includes trusted-home enforcement and persisted-handshake resumption. Signed Mac build 7 and Android debug build 3 are available locally, with final build/lint checks passing. Go/Swift interoperability and interrupted-handshake tests pass. The dedicated Android review emulator was stopped after its successful Compose test. Temporary APNs credential files were removed after the key was sealed on the home service.

+Team Tito iPhone build 7 is installed and verified by device app metadata; the older personal-team installation remains intact. Its final installation includes trusted-home enforcement and persisted-handshake resumption. Signed Mac build 7 was superseded by build 8 above; Android debug build 3 remains available locally, with final build/lint checks passing. Go/Swift interoperability and interrupted-handshake tests pass. The dedicated Android review emulator was stopped after its successful Compose test. Temporary APNs credential files were removed after the key was sealed on the home service.

No App Store Connect record, TestFlight upload, team invitations or Android store release has been created in this session. Android push has no FCM configuration.

Source lives on isolated branch `infinity-v1` at https://amadan.net/eleven/ocho. Main and the original Eleven checkout remain unmerged. Build commands are in the Apple/Android READMEs; architecture and metadata limits are in `simple-onboarding.md`, `push.md` and the design documents.