SecureTest v1.6.1

Secure Test v1.6.1

Built from 703a18f2914 on main. Requires macOS 26.4 or later.

Not yet notarized — install through Jamf. Apple's notary service is still refusing submissions for the district team (the agreement issue since v1.4.0). The pkg and app are Developer ID-signed with the hardened runtime, which is all a Jamf / AutoPkg install needs. A copy downloaded in a browser and opened by hand will be blocked by Gatekeeper until the notarization goes through.

What changed since v1.6.0 (two fixes from beta reports on 2026-10-08)

• Slow Macs can start a test. On some Macs the secure session takes longer than 20 seconds to start; the app used to give up at 20 seconds and send the student back to Your tests ("Couldn't start a secure session"), over and over. It now waits up to 60 seconds, and after 20 seconds the screen says "Still starting the secure session… This Mac is taking longer than usual." The test still opens only once the Mac is locked.
• After handing in, the test closes. When instant feedback is Off, the test used to stay on screen — still editable, on an unlocked Mac — after the student handed in, and anything typed after that was lost and showed "Needs attention" on the teacher's Monitor. The test is now replaced by a "Handed in — Your answers are saved" page with a Done button, writes after a hand-in are ignored, and the teacher no longer sees a false "Needs attention". Instant feedback On is unchanged.

Hand-run before release: the hand-in rows under simulated lockdown (feedback Off, Done, typing after hand-in, feedback On unchanged), then this exact build in a real Automatic Assessment Configuration session against the live server (normal start, hand-in, the "Handed in" page after the lock lifted). See client/MANUAL-CHECKS.md, "SS-1" and "RD-1".

Requires configuration profile

The app reads its configuration from managed preferences; a pkg alone launches into "This Mac isn't set up for Secure Test yet." The profile already scoped for earlier releases carries over unchanged (keys did not change).

Preference domain	Key	Type	Value
net.psd401.securetest.client	ServerURL	string	https://<origin>
net.psd401.securetest.client	GoogleClientID	string	<native-oauth-client-id>