new scripts

This commit is contained in:
Mark Gregory
2026-10-19 14:11:01 +01:00
parent 7cde037a4b
commit 26a2b448a5
17 changed files with 401 additions and 191 deletions
+2 -2
View File
@@ -45,7 +45,7 @@ Background automation remains active while the application is running, including
This project targets Developer ID signed/notarised direct distribution, not the Mac App Store. Current hardening includes Hardened Runtime, validated rsync executables, protected advanced rsync arguments, non-interactive SSH with timeouts/keepalives, normal SSH host-key verification, private-key/agent authentication only, unattended `--delete` authorisation, local source/destination overlap protection, sanitised/capped run logs, configurable history retention, a privacy manifest, and persistent-store recovery mode.
See `Docs/RELEASE.md` and run `Scripts/security-check.sh` before producing a release archive.
See `Docs/RELEASE.md` and run `Scripts/old/security-check.sh` before producing a release archive.
## Professional reliability features
@@ -54,4 +54,4 @@ The production build includes job preflight health checks, destination-volume id
## Commercial direct-distribution build
On the release Mac, `Scripts/release.sh` creates the Developer ID signed, notarized and stapled DMG plus its SHA-256 checksum. The script never publishes automatically. See `Docs/COMMERCIAL_RELEASE_STAGE2.md`.
On the release Mac, `Scripts/old/release.sh` creates the Developer ID signed, notarized and stapled DMG plus its SHA-256 checksum. The script never publishes automatically. See `Docs/COMMERCIAL_RELEASE_STAGE2.md`.