Build, notarize and publish v0.3.0 #169

Activity

1. sudoHG

   added

   ready-for-humanRequires the maintainer (real data, devices, accounts)Requires the maintainer (real data, devices, accounts)

   on Oct 8, 2026
2. sudoHG

   added a commit that references this issue on Oct 8, 2026

   Prepare the v0.3.0 release (#170)

   ...

   142a839
3. luoji-bot commented on Oct 10, 2026

   

   luoji-botBot

   on Oct 10, 2026

   More actions

   Release receipt (planner, on the maintainer's Mac with the maintainer's approval at each gated step). Signing identity, Team ID, notarization credentials and library contents are kept off this issue.

   • Released commit: 3db3fa4, annotated tag v0.3.0. Push CI for that commit: both build-and-test and basic-ui-flows succeeded. The tag was moved twice before publication (from 425e29e and 312fcab) after pre-release fixes; no release existed for those.
   • Pre-release review: independent read-only review of v0.2.0..main, findings fixed in Fix v0.3.0 pre-release review findings in agent group writes #171 (PR Fix agent group write privacy, transactions and cancellation #172). The approval cards were reworked in Make agent approval cards readable at a glance #173/Show which components change in a modify approval #174 (PR Make agent approval cards readable at a glance #175) and returned to the v0.2 layout in Restore the v0.2 approval card style for every card #177 (PR Restore the v0.2 approval card style for every card #178) after device review.
   • Build: build-app.sh Release; release gate passed. Version 0.3.0, hardened runtime. Installed at /Applications/Ask Key.app; tested CDHash fd680cad…, identical to the app inside the published DMG.
   • Device checks (maintainer present): 请旨 shown as the display name; create, modify, organize (9 steps incl. group create, rename, delete), delete ×3, read (value injected, not printed) and a 30-minute allowance (second read ran without a prompt) through the installed helper; Touch ID entries in the app (unlock, reveal/copy, revoke timed allowance, permanent delete, settings); focus returned to the previous app after every agent approval (front-app log); Claude Code connected and read the new {credentials, groups} catalog in a fresh session; Codex MCP enabled.
   • Package: package-release.sh --notary-credential (two approved askkey run submissions). App and DMG notarized, stapled and accepted by Gatekeeper (Notarized Developer ID).
   • Release: v0.3.0 with bilingual notes and four assets. AskKey.dmg and AskKey-0.3.0.dmg are byte-identical, SHA-256 a2b1b1df72e68b1e5b567ae9b8c6e3c0fdafe34e4b12139ec849cf2dea93c253; releases/latest/download/AskKey.dmg re-downloaded anonymously and verified with shasum -a 256 -c.

   Follow-ups: #176 (card polish), #158, #137; a duplicate-name create returns a generic internal_error instead of a specific error (to be filed).
4. sudoHG

   closed this as completedon Oct 10, 2026