SecureTest v1.4.0

Secure Test v1.4.0

Built from 5dd8d32 on main. Requires macOS 26.4 or later.

Not yet notarized — install through Jamf. Apple's notary service is refusing submissions for the district team (an agreement issue Apple is investigating). The pkg and app are Developer ID-signed with the hardened runtime, which is all a Jamf / AutoPkg install needs. A copy downloaded in a browser and opened by hand will be blocked by Gatekeeper until the notarization goes through; this release will be notarized as soon as Apple's service accepts it, without replacing the file.

What changed since v1.3.5

• Read-aloud for test content. For students granted Text-to-Speech, a Speak button reads each question (with its answer choices) and each passage or source, with Pause / Resume / Stop, three speeds, and the current word highlighted. Math is read as words.
• Read my answer. For students granted Text-to-Speech (Student Responses), a button under each typed answer reads it back, highlighting each word in the answer.
• Speech-to-text. For students granted Speech-to-Text, a "Speak my answer" button under short-text and essay answers types what the student says. Recognition runs on the Mac; no audio is recorded or sent. English only; not available in tables yet.
• Microphone permission. A student granted speech-to-text is asked for microphone and speech-recognition permission the first time on each Mac, before the test locks. If they decline, the test still opens, the student sees "Speech-to-text isn't available on this Mac — tell your teacher.", and the teacher sees a note on the Monitor. Students without the grant never see a prompt.
• No minimize during a test. The yellow window button is disabled and a title-bar double-click no longer minimizes the window (a minimized test window could not be brought back inside a locked session).
• New entitlement: com.apple.security.device.audio-input (microphone), used only for granted students.

Hand-run before release: the speech-tools and MIN-1 rows in client/MANUAL-CHECKS.md, including real Automatic Assessment Configuration sessions on a Release build (2026-10-01).

Requires configuration profile

The app reads its configuration from managed preferences; a pkg alone launches into "This Mac isn't set up for Secure Test yet." The profile already scoped for earlier releases carries over unchanged (keys did not change).

Preference domain	Key	Type	Value
net.psd401.securetest.client	ServerURL	string	https://<origin>
net.psd401.securetest.client	GoogleClientID	string	<native-oauth-client-id>