以 coder2@mindraw 身份完成 MD-H8-03:正式候选包生成与 release metadata 收口。优先复用 Build202606282019 signed / notarized candidate;不得触碰 m4c、不得做 fresh machine QA、不得安装或覆盖 /Applications/Mindraw.app、不得进入 PM-H8-GATE 或对外发布。
MD-H8-02 QA 证据、PM release notes draft、candidate manifest、构建索引和 CHANGELOG.md。Build202606282019 可复用为 H8 formal RC signed / notarized candidate,未重新打包。v1.0.0-Build202606282019,tag target 为实际 DMG source commit 9eab3ec40c00ec5ab575c40f6bb2f174bf3f227a。03-O/C2.builds/releases/Build202606282019/release-manifest.json,补入 tag、tag target、MD-H8-03 finalization 和后续边界。02-P/qa/mindraw-h8-release-candidate-metadata-check.md 与 .json。03-O/C2.builds/README.md、INDEX.md、CODEGRAPH.md 和 02-P/plan-progress.markdown。0502ef70a33604f6ba99a48ddcc204f6ff62f5a992c1f35ebfdc1f61ae421510,签名、公证、staple、Gatekeeper、DMG verify 和 metadata 均通过。MD-H8-03 tag/finalization 元数据更新为 d2f536e7bd3fbaeae152b92f229145673860811d704b30f2093c8b2944ccecca。CHANGELOG.md 已有 1.0.0 - 2026-06-28 H8 RC 边界说明,本轮没有源码、功能或运行时行为变化,不新增 changelog 条目。MD-H8-02 signed-RC-missing 占位;本轮只在 QA / 台账记录需 PM 后续更新,不直接修改 PM 草案或宣布对外文案。git status --short --branch:tracked worktree clean;仅保留既有无关 untracked 目录。git rev-parse v1.0.0-Build202606282019^{}:9eab3ec40c00ec5ab575c40f6bb2f174bf3f227a。shasum -a 256:DMG / manifest / build-info / notarytool-submit 均已记录。hdiutil verify:DMG checksum is VALID。xcrun stapler validate:通过。spctl --assess --type open DMG:accepted / Notarized Developer ID。codesign --verify --deep --strict App:通过。spctl --assess --type execute App:accepted / Notarized Developer ID。xcrun notarytool info d1c2a388-10d2-4e01-8c18-044c3ba9a6ef:Accepted。Mindraw.app 和 Applications symlink;App metadata 为 bundle id com.mindraw.desktop、version 1.0.0、build Build202606282019、URL scheme mindraw、.mindraw package document type。npm run doctor:mindraw -- --app src-tauri/target/release/bundle/macos/Mindraw.app --pretty:status=pass。M4C-H8-03:m4c signed RC consumer verification。MD-H8-04:fresh machine QA / handler repair path,仍依赖 USER-H8-LATER-01。PM-H8-RELEASE-NOTES 需更新草案并交 USER-H8-LATER-02 审阅。PM-H8-GATE 仍不可进入;fresh machine QA、m4c signed RC consumer verification、用户 release notes 审阅和最终 Gate 未完成。