Complete Phase 11E acceptance

Author: 3ckey

docs/IMPLEMENTATION_PLAN.md

@@ -40,12 +40,13 @@ Current baseline as of 2026-07-22:
   and the private Manifest-driven suite passed with X100VI RAF, JPEG, HIF,
   HEIC, and MOV representatives across Scan, Quick Look, duplicate detection,
   import, and SHA-256 integrity.
-- Phase 11E release automation is implemented: one repository-owned script
+- Phase 11E release automation is complete: one repository-owned script
   performs secret scanning, exact-toolchain Release build, ad hoc signature
   verification, ZIP/checksum/Manifest v1 generation, and extracted-app
   verification, while a pinned GitHub Actions workflow runs the deterministic
-  test gate and retains only those three files. Acceptance of an artifact
-  downloaded from Actions remains pending.
+  test gate and retains only those three files. The artifact from the first
+  manually dispatched run was downloaded, independently verified, launched,
+  and used for a successful curated representative import.
 - Live mode is wired through `LiveAssembly` to `MacFileSystem`,
   `MacMetadataProvider`, `MacContentHasher`, `MacImporter`,
   `MacDestinationFileLookup`, and an Application Support-backed
@@ -614,8 +615,8 @@ Add UI tests for:
 ### Phase 10E: Production readiness and live wiring
 
 **Status: complete for live application wiring as of 2026-07-18. Ad hoc release
-packaging remains Phase 11E work; Developer ID signing, notarization, and App
-Store distribution are deferred future work.**
+packaging was completed in Phase 11E; Developer ID signing, notarization, and
+App Store distribution are deferred future work.**
 
 Finalize production-oriented integration after the UI and tests are stable.
 
@@ -755,8 +756,7 @@ and content hashes remain outside Git.
 
 ### Phase 11E: Ad hoc-signed release packaging and automation
 
-**Status: automation implemented as of 2026-07-22; acceptance of an artifact
-downloaded from GitHub Actions remains pending.**
+**Status: complete as of 2026-07-22.**
 
 The current binary release target must not require Apple Developer Program
 membership, signing certificates, notarization credentials, or App Store
@@ -793,11 +793,11 @@ tests before calling that script on `macos-26`; its checkout and upload actions
 are pinned to immutable commit SHAs, permissions are read-only, and the artifact
 retention period is 30 days. It does not create a GitHub Release.
 
-The remaining phase gate is external acceptance: manually run the merged
-workflow, download its artifact, repeat checksum/signature/architecture and
-Info.plist checks, launch the app, complete one curated representative import,
-and record the result in `docs/RELEASE.md`. Until then, Phase 11E as a whole is
-not marked complete.
+External acceptance completed with manually dispatched run `29856922122` at
+source commit `ebe320194b815dca37c903729914fd3b8f7f7319`. Its artifact was
+downloaded and independently checked for checksum, signature, architectures,
+Info.plist, and Manifest v1. The extracted app launched and completed a curated
+representative import. `docs/RELEASE.md` records the full acceptance evidence.
 
 The following remain outside Phase 11E and are deferred until the distribution
 strategy changes:
@@ -874,13 +874,13 @@ known production-hardening gap into an accepted product decision.
 | 10B: Progress and cancellation | Complete at per-file granularity | Scan, duplicate checking, and import publish deterministic progress. Canceling import preserves completed copies and marks remaining selected items canceled. An individual synchronous copy is not byte-level cancelable. |
 | 10C: Cache settings | Complete | Aggregate stats, fixed-policy explanation, per-volume metadata and role counts, UUID details, confirmed clear-all/per-volume actions, localized notices, and recovery paths are implemented. |
 | 10D-2: New behavior UI tests | Complete for implemented scope | Progress cancellation, cache settings, cache failure recovery, and language switching are covered. |
-| 10E: Live wiring | Complete for local execution | Application Support SQLite, live services, bookmark persistence, destination conflict lookup, logging, safe startup failure, main bundle identifier, Hardened Runtime, and manual ad hoc signing are configured. Ad hoc packaging is Phase 11E work; formal signing and notarization are deferred. |
+| 10E: Live wiring | Complete for local execution | Application Support SQLite, live services, bookmark persistence, destination conflict lookup, logging, safe startup failure, main bundle identifier, Hardened Runtime, and manual ad hoc signing are configured. Ad hoc packaging was completed in Phase 11E; formal signing and notarization are deferred. |
 | 10F: Localization | Complete | English/Japanese copy, persisted selection, launch override, and runtime relocalization exist. |
 | 11A: Stable volume identity and import safety | Complete | Stable source/destination cache scopes, UUID-unavailable cache bypass, volume-root-relative cache paths, schema v2 invalidation, source-before-final-check import ordering, and typed late destination conflicts are implemented and tested. |
 | 11B: Fast Stage A and scale validation | Complete | Indexed same-size candidate detection, sparse Stage B hashing, the deterministic 1,000-item fixture, bounded Review presentation, cancellation latency, and UI performance metrics are implemented and tested. |
 | 11C: Cache lifecycle and volume settings | Complete | Fixed age/size maintenance, startup coordination, LRU SQLite compaction, volume summaries and clearing, metadata refresh, point-of-use destination validation, additive fixture data, and localized UI coverage are implemented. |
 | 11D: Representative real media | Complete | HIF and MOV metadata support, deterministic regression tests, private Manifest validation, Quick Look checks, import integrity, Git exclusion, and operating instructions are implemented. The required X100VI RAF, JPEG, HIF, HEIC, and MOV matrix passed on Xcode 26.6 and macOS 26.5.2. |
-| 11E: Ad hoc release automation | Automation implemented; downloaded-artifact acceptance pending | Release-only entitlement injection is disabled. The shared script enforces clean full-history source, redacted secret scans, Xcode 26.6, manual ad hoc signing, Hardened Runtime, Universal Binary output, strict bundle and extracted-app verification, checksum, and path-safe Manifest v1 packaging. The SHA-pinned `macos-26` workflow runs Core, PlatformMac, and app unit tests and uploads only the three versioned files for 30 days. Phase completion still requires downloading the merged-workflow artifact, re-verifying it, launching it, and recording one curated import. |
+| 11E: Ad hoc release automation | Complete | Release-only entitlement injection is disabled. The shared script enforces clean full-history source, redacted secret scans, Xcode 26.6, manual ad hoc signing, Hardened Runtime, Universal Binary output, strict bundle and extracted-app verification, checksum, and path-safe Manifest v1 packaging. The SHA-pinned `macos-26` workflow runs Core, PlatformMac, and app unit tests and uploads only the three versioned files for 30 days. Run `29856922122` succeeded; its downloaded artifact passed independent verification, app launch, and curated representative import, with evidence recorded in `docs/RELEASE.md`. |
 
 ### Additional completed behavior
 
@@ -943,11 +943,15 @@ hitches on the verification machine. The cancellation UI test also verified a
 return to the Source screen within two seconds after requesting cancellation
 during a deliberately delayed Stage B hash.
 
-The locally packaged ad hoc artifact is verified, but it is not the canonical
-GitHub Actions output. The phase remains open until a merged-workflow artifact
-is downloaded, independently checked, launched, and used for the curated import
-recorded in `docs/RELEASE.md`. Developer ID signing, notarization, and public
-Gatekeeper acceptance are not current release criteria.
+GitHub Actions run `29856922122` completed all Core, PlatformMac, app unit,
+release build, verification, and upload steps in 5 minutes 11 seconds. The
+downloaded `PicChronoImporter-1.0-build1` artifact contained exactly the ZIP,
+checksum, and Manifest v1. Its checksum was
+`114c350aae65e7eb976514c641b41efb6eef0fe0799b0f8aaa4730fd3f532513`;
+independent signature, architecture, Info.plist, and manifest checks passed.
+The extracted app launched and completed the curated representative import on
+the acceptance Mac. Developer ID signing, notarization, and public Gatekeeper
+acceptance are not current release criteria.
 
 ## 14. Known remaining gaps and constraints
 
@@ -960,10 +964,10 @@ Universal Binary before and after ZIP extraction, and emits the checksum and
 Manifest v1. GitHub Actions is the canonical clean build; the local script is
 the common implementation and fallback rather than a separate release process.
 
-Phase 11E still requires a post-merge manual workflow run and acceptance of the
-downloaded artifact. That acceptance includes repeating checksum and signature
-verification, launching the extracted app, completing one curated import, and
-recording the result in `docs/RELEASE.md`.
+Phase 11E acceptance is complete. The post-merge manual workflow run,
+downloaded-artifact checksum and signature verification, extracted-app launch,
+and curated import all passed on 2026-07-22. The durable acceptance record is in
+`docs/RELEASE.md`.
 
 Source publication is complete. The 2026-07-21 full-history and intended-tree
 `betterleaks` scans reported zero findings, and the audited source commit became
@@ -990,10 +994,12 @@ background automatic import, or additional windows.
 
 ## 15. Suggested next task
 
-The recommended next task after merging this automation is:
+No Phase 11E implementation or acceptance work remains. Select the next product
+phase explicitly before implementation. If a canonical tagged artifact is
+desired, the next separate release operation is:
 
 ```text
-Phase 11E: Run GitHub Actions and accept the downloaded ad hoc artifact
+Create v1.0 and verify the tag-triggered Actions artifact
 ```
 
 Do not include Developer ID signing, notarization, or App Store submission in

docs/RELEASE.md

@@ -160,9 +160,35 @@ requires a new schema version.
 
 ## Release acceptance record
 
-Phase 11E is not complete until an artifact downloaded from GitHub Actions has
-been independently verified and exercised on a Mac. Copy this template below
-for each accepted build:
+Phase 11E acceptance requires an artifact downloaded from GitHub Actions to be
+independently verified and exercised on a Mac.
+
+### 2026-07-22 — PicChronoImporter 1.0 (build 1)
+
+- Workflow run URL:
+  <https://github.com/3ckey/picchronoimporter/actions/runs/29856922122>
+- Artifact name and retention expiry: `PicChronoImporter-1.0-build1`,
+  `2026-08-20T18:27:25Z` (`2026-08-21 03:27 JST`)
+- Source commit and ref:
+  `ebe320194b815dca37c903729914fd3b8f7f7319`, `refs/heads/main`
+- Host Mac model / architecture: `Mac13,1` / `arm64`
+- macOS version and build: `26.5.2` / `25F84`
+- SHA-256 verification: passed,
+  `114c350aae65e7eb976514c641b41efb6eef0fe0799b0f8aaa4730fd3f532513`
+- Extracted `codesign --verify --deep --strict`: passed
+- Signature (`adhoc,runtime`, no Team ID, no `get-task-allow`): passed
+- Architectures and Info.plist: passed; `x86_64 arm64`, bundle identifier
+  `com.kofeincska.picchronoimporter`, version `1.0`, build `1`, minimum macOS
+  `26.0`
+- App launch: passed; confirmed by the repository owner
+- Curated representative import: passed; confirmed by the repository owner
+- Private `RepresentativeRealMedia` run and date: passed on `2026-07-22`,
+  including RAF, JPEG, HIF/HEIC, and MOV import-integrity coverage
+- Reviewer and notes: `3ckey`; Gatekeeper acceptance was not used as a release
+  criterion, and the artifact remains ad hoc signed and non-notarized
+
+This acceptance record completes Phase 11E. Copy the template below for future
+accepted builds:
 
 ```markdown
 ### YYYY-MM-DD — PicChronoImporter <version> (build <build>)
@@ -181,6 +207,3 @@ for each accepted build:
 - Private `RepresentativeRealMedia` run and date:
 - Reviewer and notes:
 ```
-
-Until that record is completed from a downloaded Actions artifact, the release
-automation is implemented but Phase 11E acceptance remains pending.