同印随舟，重签安渡 · Support re-signed macOS artifacts in 0.5.7

Highlights

• Allow downstream macOS packaging pipelines to re-sign the native addon and ONNX Runtime dylib with the same Developer ID as the host application.
• Keep descriptor bytes/SHA-256 as the primary integrity gate and use strict code-signature equivalence only for a mismatched macOS Mach-O.
• Accept identical TeamIdentifier signatures or the explicitly documented both-ad-hoc development case; reject different identities, unsigned mutations, non-Mach-O payloads, and malformed descriptors.
• Require no Electron configuration, postinstall hook, keychain access, or new dependency, while preserving every public API and non-macOS behavior.

Versions

• @arcships/light-ocr@0.5.7
• @arcships/light-ocr-runtime@0.1.7
• six native platform packages at 0.5.7
• Document compatibility facade 0.1.3 under next
• Tiny/Medium preview facades 0.1.6 under next
• unchanged Small 0.3.4 and Tiny/Medium 0.1.0 model packages

Verification

• Implementation and PR checks
• Final Core
• Final Native WebGPU
• Pre-release dry-run
• Registry publication and reinstall
• Stable promotion
• English release record / 中文发布记录