Record verified Ocho deployment and native distribution artifacts
Record hosted encrypted-file verification, successful Apple exports and Android checks, physical-device and approval gates. Match Mac archives to the shipped arm64 engine.
Co-Authored-By: Codex <noreply@openai.com>
4 files changed,
+57
−6
docs/infinity/release-completion.md+17 −0docs/infinity/status.md+25 −5docs/infinity/tester-release.md+14 −0tools/infinity/archive-apple+1 −1
diff --git a/docs/infinity/release-completion.md b/docs/infinity/release-completion.md| index d242b2d..5e781c8 100644 |
| --- a/docs/infinity/release-completion.md |
| +++ b/docs/infinity/release-completion.md |
| @@ -72,3 +72,20 @@ come from the message's authenticated text, with credentials and unsafe schemes |
| rejected. Cards open only on an explicit click/tap. No remote thumbnail, favicon, |
| OpenGraph fetch or third-party request happens merely because a message arrived. |
| Rich title/image previews are not implemented by these destination cards. |
| + |
| +## Verified release checkpoint |
| + |
| +- `80c44170` runs on both Ocho Carlos apps; actual version bodies and published |
| + client bytes were checked after scoped restarts. |
| +- Hosted Chromium passes front-door file upload, cross-instance ciphertext |
| + delivery and exact decrypted download, alongside the existing signup, consent, |
| + retry, profile and passkey-restoration scenarios. WebKit entry/name passes. |
| +- Server/browser suites and server/mobile race checks pass. Seven Swift package |
| + checks and Go/Swift/Web Crypto interoperability pass. |
| +- Android debug build/lint and actual Compose/Keystore regression test pass. |
| +- Team Tito iPhone/Mac build 11 sign; iPhone installation and device-reported |
| + version are verified. iOS store archive/export pass. Mac Apple Silicon archive |
| + and App Store Connect export pass. Apple UI automation remains unverified (Mac automation timeout; iPhone |
| + simulator stalled before assertions), and physical passkeys/push await the user. |
| +- Automatic approval review blocked private-code push and TestFlight upload; |
| + explicit approvals were requested. Neither action was performed. |
diff --git a/docs/infinity/status.md b/docs/infinity/status.md| index cb874e9..8a57ccc 100644 |
| --- a/docs/infinity/status.md |
| +++ b/docs/infinity/status.md |
| @@ -24,14 +24,34 @@ configuration or real FCM delivery has yet been verified. The Team Tito 1Passwor |
| lookup timed out waiting for user authorization; no secret values were printed. |
| The Mac UI suite did not execute its assertions: macOS timed out enabling UI |
| -automation. This is a verification gap, not a passing native UI test. Android debug build/lint pass. Compose and iPhone simulator runs are tracked separately. |
| -The signed iOS Release archive is also built; App Store Connect export is being validated. Signed development builds are not TestFlight uploads or store releases. The |
| +automation. This is a verification gap, not a passing native UI test. Android debug build/lint and the actual Compose receive/send/Keystore persistence test pass. The iPhone simulator stalled before executing assertions; its test run was interrupted after more than eight minutes. Neither Apple UI automation suite is counted as passing. |
| +The signed iOS Release archive and App Store Connect IPA export both pass. The Apple Silicon Mac Release archive and App Store Connect package export also pass. Signed development builds are not TestFlight uploads or store releases. The |
| release checklist and remaining distribution inputs are in `tester-release.md`; |
| protocol/storage limits and exact pending work are in `release-completion.md`. |
| -Hosting remains on the previous September 8 versions until the new deployment is |
| -explicitly verified. September 13's live front-door version check returned |
| -`64d67031`. No merge into main has been performed. |
| +Both hosted services now report release `80c44170` from their actual `/api/version` |
| +responses. Each deployment initially advertised the new version while the old |
| +process still served; scoped Carlos restarts completed adoption. The published |
| +attachment/chat/retry/link-card/CSS assets byte-match committed source. A live |
| +Chromium front-door test passes signup, short invitations, inviter-offline chat, |
| +failed-send/exact retry, encrypted file upload and cross-instance download with |
| +identical bytes, profile sync and passkey history restoration. WebKit public |
| +entry/name navigation also passes. These use virtual authenticators and do not |
| +replace physical provider tests. |
| + |
| +Automatic approval review rejected both pushing the private branch and uploading |
| +the IPA to TestFlight pending explicit user authorization. No push, upload, tester |
| +invitation or merge occurred. Ownership checks confirm Paul owns `eleven/ocho` |
| +and the dedicated Codex account has the repository grant. Code is committed locally |
| +as `80c44170`; this record and the archive architecture correction follow it. |
| +The iPhone reports `chat.ocho.app` version 0.2.0 build 11. Android APK version 4's |
| +signing fingerprint matches the live Digital Asset Links declaration. The Mac |
| +package/archive targets Apple Silicon; Intel distribution is not provided. |
| + |
| +Artifacts are under `.build/distribution/`: `ios/Infinity.ipa`, `mac/InfinityMac.pkg`, |
| +`Ocho-Android-0.2.0-4.apk`, `Ocho-Mac-0.2.0-11.zip`, and `SHA256SUMS`. |
| +Physical Android USB authorization, on-device passkey/notification results, |
| +Firebase configuration and the explicit push/upload approvals remain open. |
| ## Native connection status — September 8 |
diff --git a/docs/infinity/tester-release.md b/docs/infinity/tester-release.md| index b024bb3..41b46be 100644 |
| --- a/docs/infinity/tester-release.md |
| +++ b/docs/infinity/tester-release.md |
| @@ -54,3 +54,17 @@ Apple requires creating new app records on the |
| the [Apps API](https://developer.apple.com/documentation/appstoreconnectapi/apps) |
| does not create them. These notes are prepared release material, not evidence of |
| an upload, external review approval, or completed physical-device verification. |
| + |
| +## Prepared artifacts |
| + |
| +`.build/distribution/ios/Infinity.ipa` passed App Store Connect export validation. |
| +The iPhone development build was separately installed over build 7 and reports |
| +build 11. `Ocho-Android-0.2.0-4.apk` is a debug-signed APK, with the same fingerprint |
| +as the live Android passkey association. `Ocho-Mac-0.2.0-11.zip` is a signed local |
| +development package for Apple Silicon, not a notarized public download. SHA-256 |
| +checksums accompany these artifacts. The Mac Release archive also targets arm64, |
| +matching the shared framework. Upload was rejected by automatic approval review |
| +pending the user's explicit authorization; export success is not upload success. |
| + |
| +The Mac archive also passed App Store Connect export validation; its package is |
| +`.build/distribution/mac/InfinityMac.pkg`. It has not been uploaded or submitted. |
diff --git a/tools/infinity/archive-apple b/tools/infinity/archive-apple| index 49c599b..643ac2a 100755 |
| --- a/tools/infinity/archive-apple |
| +++ b/tools/infinity/archive-apple |
| @@ -12,4 +12,4 @@ xcodegen generate --spec apple/project.yml |
| mkdir -p .build/distribution |
| xcodebuild -project apple/Infinity.xcodeproj -scheme "$scheme" -configuration Release \ |
| -destination "$destination" -archivePath ".build/distribution/$scheme.xcarchive" \ |
| - -derivedDataPath "apple/build-archive-$scheme" -allowProvisioningUpdates archive |
| + -derivedDataPath "apple/build-archive-$scheme" ARCHS=arm64 -allowProvisioningUpdates archive |