mirror of
https://github.com/openswarm-ai/openswarm.git
synced 2026-08-25 05:52:22 +02:00
find-identity reports five entries all named "Developer ID Application: Haik Decie (Y26NUZH4NG)": one live cert and four copies of the one whose private key died with the old Mac. The dead copies still report valid and only fail at the moment they are asked to sign, so auto-discovery was a coin flip between a real build and a crash forty minutes into packing a 4.8 GB .app. Pin by SHA-1, then spend one scratch signature proving the key is actually usable. The profile check is the same lesson applied to a quieter failure. entitlements request keychain-access-groups, which macOS honors only when the embedded profile lists the very cert that signed the app. A profile issued for the previous cert signs without one complaint and then loses passkeys and Touch ID at runtime: a green build that ships broken. Verified with both controls, the old profile fails against the new cert and passes against its own. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ