ci: adopt artifact-driven SDLC gates - #84

Merged
IchenDEV merged 1 commit into
mainfrom
codex/ai-native-sdlc
Aug 25, 2026
Merged

ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom
codex/ai-native-sdlc

Conversation

@IchenDEV

@IchenDEVIchenDEV commented Aug 25, 2026•
edited
Loading

Copy link
Copy Markdown
Owner

Outcome

Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.

  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.

SDLC bundle and risk

  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:
    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.

Verification

  • GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  • Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  • Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  • Release workflow YAML and every shell run block parsed
  • Independent high-risk review — final result: no actionable findings
  • Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  • Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run

Residual risk and rollback

  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.

Reviewer focus

Please focus on:

  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.

@IchenDEV
IchenDEV marked this pull request as ready for review August 25, 2026 16:36
@IchenDEV
IchenDEV merged commit 7e0689a into mainAug 25, 2026
3 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
ci: adopt artifact-driven SDLC gates - #84
Merged
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Aug 25, 2026
Merged
ci: adopt artifact-driven SDLC gates#84
IchenDEV merged 1 commit into
mainfrom 
codex/ai-native-sdlc
Conversation
@IchenDEV
@IchenDEVIchenDEV
commented
Aug 25, 2026•

edited

Loading

Copy link


Copy Markdown

Owner
Outcome
Adopt a risk-scaled, artifact-driven SDLC for Utter and make PR/release evidence deterministic.
  • Adds machine-validated intent, spec, plan, and verification bundles.
  • Runs the artifact contract, repository checks, Swift tests, and a release-style app build behind the stable SDLC Gate.
  • Preserves the existing OpenType Signing self-signed release path without an ad-hoc fallback.
  • Requires certificate fingerprint matching, full mounted-App comparison, immutable asset round-trip, and checksums.
  • Applies Apple notarization, stapling, and Gatekeeper assessment only when the built app uses Developer ID.
  • Adds incident feedback, CODEOWNERS, issue/PR templates, review policy, and release controls.
SDLC bundle and risk
  • Bundle: docs/sdlc/changes/2026-08-25-ai-native-sdlc/
  • Risk: high
  • Human decisions still required:

    • activate the main ruleset and require SDLC Gate;
    • configure a required reviewer on the production environment;
    • decide if/when public distribution migrates from project self-signing to Developer ID.
Verification
  •  GitHub PR run 32871797612 — Contract & Tests, Release-style App Build, and SDLC Gate passed
  • python3 scripts/sdlc.py validate --base origin/main — 1 verified bundle covering 37 changed paths
  • bash scripts/ci-basic-checks.sh — 13 SDLC tests plus repository checks passed
  • DEVELOPER_DIR=/Applications/Xcode-beta.app/Contents/Developer swift test — 564 XCTest tests and 1 Swift Testing test passed; 8 environment-gated tests skipped
  •  Release-style app build — Xcode/Metal app build, arm64 app/helper, hardened-runtime ad-hoc signature, and artifact checks passed locally and on GitHub
  •  Current GitHub v0.0.43 self-signed DMG — Authority=OpenType Signing, no Apple team identifier, certificate SHA-256 match, full mounted-bundle comparison, and DMG verification passed
  •  Release workflow YAML and every shell run block parsed
  •  Independent high-risk review — final result: no actionable findings
  •  Real-window light/dark and narrow-width QA — not applicable; no product UI changed
  •  Privacy, permission, external-service, and failure paths — missing identities fail closed; ad-hoc apps fail self-signed verification; Developer ID notarization remains pending a protected live run
Residual risk and rollback
  • The PR workflow is green; the tag-triggered Release workflow has not been live-executed with the new dual-signing logic.
  • main and production are not currently protected by required review.
  • The retained self-signed release is not Apple-notarized and may require manual macOS approval; the workflow adds an explicit release warning.
  • Developer ID credentials and the notarization path are not configured or live-verified.
  • GitHub reports a non-blocking Node 20 deprecation annotation for actions/checkout@v4.
  • Roll back by reverting this commit. Do not replace an already published same-version release or weaken a failing gate inline.
Reviewer focus
Please focus on:
  1. self-signed versus Developer ID classification and certificate fingerprint binding;
  2. complete equality between the built app and the app mounted from the DMG;
  3. direct-push/PR diff coverage and minimum risk mapping;
  4. draft upload, checksum round-trip, and immutable release publication;
  5. the documented boundary between repository controls and GitHub settings that remain external.
@IchenDEV
IchenDEV
marked this pull request as ready for review
August 25, 2026 16:36
@IchenDEV
IchenDEV
merged commit 7e0689a
into
mainAug 25, 2026

3 checks passed

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@IchenDEV