jockoshop 0.1.15

macOS builds are signed and notarized

They open normally — no right-click → Open, no "unidentified developer" warning.

Verified on the downloaded .dmg rather than from a green build:

• spctl reports accepted, source=Notarized Developer ID
• stapler validate finds the ticket attached to the bundle, so it holds up offline too
• authority chain to Apple Root CA, hardened runtime set, secure timestamp present

Windows and Linux builds are unsigned — SmartScreen shows "More info" → "Run anyway".

What was wrong

APPLE_ID held 10 bytes where the address is 21 — the team ID had been pasted into the wrong secret. Apple answered 401 to a username that is not an account, which is what it had been saying all along.

0.1.12 and 0.1.13 lost their macOS builds to this while it was being chased; 0.1.14 shipped signed but unnotarized. Use this one.

From 0.1.12

The top-left is now the app's own icon rather than the word "jockoshop". Clicking it opens an About box with the version, the commit it was built from, and links to the repository and the release builds.

Still unverified

The FTP upload from 0.1.10 has never touched a real server — tested end-to-end against a mock board speaking Synchronet's dialect, but no live BBS.