From c8ad684f1623b8623e25778798ca18c94a148053 Mon Sep 17 00:00:00 2001 From: rogu3bear Date: Tue, 12 May 2026 09:23:23 -0500 Subject: [PATCH] docs(pointer): surface artifact-bound evidence in audit --- apps/macos/Scripts/north-star-audit.sh | 3 ++- apps/macos/Tests/PointerDesignerTests/IdentityTests.swift | 3 +++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/apps/macos/Scripts/north-star-audit.sh b/apps/macos/Scripts/north-star-audit.sh index 8995f8e..3fa771a 100755 --- a/apps/macos/Scripts/north-star-audit.sh +++ b/apps/macos/Scripts/north-star-audit.sh @@ -79,7 +79,8 @@ echo "- APP-3 Negative preset and custom color: apps/macos/REQUIREMENTS.md -> ch echo "- APP-4 dynamic contrast permission truth: apps/macos/REQUIREMENTS.md -> check-app-ui-contract.sh, CursorStateControllerTests, MANUAL_RELEASE_CHECKS.md" echo "- APP-5 unsupported helper and system-wide replacement unavailable: apps/macos/REQUIREMENTS.md -> check-app-ui-contract.sh, IdentityTests, CursorStateControllerTests" echo "- APP-6 app bundle, DMG, and mounted app match: apps/macos/REQUIREMENTS.md -> make preflight, make dmg, make dmg-install-check, make dmg-artifact-match-check" -echo "- APP-7 signing, notarization, Gatekeeper, release metadata, and install instructions: apps/macos/REQUIREMENTS.md -> make release-readiness and make release-metadata-check" +echo "- APP-7 signing, notarization, Gatekeeper, release metadata, install instructions, and artifact-bound human evidence: apps/macos/REQUIREMENTS.md -> make release-readiness, make release-metadata-check, manual-release-evidence-check.sh" +echo " Manual evidence must match the same DMG digest, commit, release tag, mounted app bundle ID, app version, app build, and app executable SHA-256." echo "- APP-8 local-first, website-boundary, and distribution-boundary product truth: apps/macos/REQUIREMENTS.md -> check-monorepo-references.sh, check-website-boundary.sh, check-distribution-boundary.sh, check-local-first.sh, IdentityTests" echo "- Website: NORTH_STAR.md -> No canonical Cursor Designer website exists." echo "" diff --git a/apps/macos/Tests/PointerDesignerTests/IdentityTests.swift b/apps/macos/Tests/PointerDesignerTests/IdentityTests.swift index 4cd3525..c98703d 100644 --- a/apps/macos/Tests/PointerDesignerTests/IdentityTests.swift +++ b/apps/macos/Tests/PointerDesignerTests/IdentityTests.swift @@ -495,6 +495,9 @@ final class IdentityTests: XCTestCase { XCTAssertTrue(script.contains("APP-8")) XCTAssertTrue(script.contains("release-readiness")) XCTAssertTrue(script.contains("release-metadata-check")) + XCTAssertTrue(script.contains("artifact-bound human evidence")) + XCTAssertTrue(script.contains("mounted app bundle ID")) + XCTAssertTrue(script.contains("app executable SHA-256")) XCTAssertTrue(script.contains("check-website-boundary.sh")) XCTAssertTrue(script.contains("check-distribution-boundary.sh")) XCTAssertTrue(script.contains("check-compatibility-boundary.sh"))