32052706661
97%

Ran 17 Aug 2026 06:02PM UTC

Jobs 1

Files 93

Run time 1min

Badge

Embed ▾

Committed 17 Aug 2026 05:58PM UTC coverage: 97.972% (+0.001%) from 97.971%

Build # 32052706661

Build Type

push

github

Committed by

web-flow

Commit Message

drop the Debug-only hardened-runtime exceptions from the shipped app (#450)

allow-jit, allow-unsigned-executable-memory and disable-library-validation had been in the entitlements file since the first scaffold commit, which set hardened runtime with an ad-hoc identity so library validation rejected every nested binary. Developer ID signing six days later narrowed that to Debug, and the file was never revisited.

Release now signs from agterm/agterm.entitlements with the seven TCC keys only; Debug signs from the new agterm/agterm-debug.entitlements, which adds the three back for the ad-hoc stub, agterm.debug.dylib and the hosted .xctest. The post-build re-sign reads CODE_SIGN_ENTITLEMENTS instead of a literal path.

Two CI assertions pin the result: the Release set must be exactly the seven TCC keys, compared as key=value through tojson so neither a <false/> nor a <string>true</string> passes as granted, and the Debug file must be that same set plus exactly the three exceptions, derived from the shipping file so the copies cannot drift.

The seven TCC entitlements are unchanged.

Coverage Stats

8018 of 8184 relevant lines covered (97.97%)

4985958.69 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	32052706661.1	17 Aug 2026 06:02PM UTC	93	97.97	GitHub Action Run

umputun / agterm / 32052706661
97%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32052706661

umputun / agterm / 32052706661 97%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32052706661

umputun / agterm / 32052706661
97%

README BADGES
x