# TagLauncher 8.4.0 App Store PKG Preflight

Date: 2026-08-28
Version: 8.4.0
Build: 20260828.2219

## Package

- Upload package: `Upload/TagLauncher-8.4.0-build20260828.2219.pkg`
- Local rollback DMG: `Archive/TagLauncher-8.4.0-build20260828.2219.dmg`
- Upload package SHA256: `0d374a03b25c11a4bf9bad19238defd7c3043b72386ee70f7857e01f4f9d6318`
- DMG SHA256: `1dc42dc6577721ef27985243e9f7b40537f3bcac6f340b8e330be7bf8ce4e4d6`

## Signing

- App signing identity: `3rd Party Mac Developer Application: Hainan Wanxing Technology Co., Ltd. (CR3J54M8BQ)`
- Installer signing identity: `3rd Party Mac Developer Installer: Hainan Wanxing Technology Co., Ltd. (CR3J54M8BQ)`
- Embedded provisioning profile: `TagLauncher Mac App Store 20260707`
- Provisioning profile UUID: `3ee49163-ef5c-4467-8971-f93cc1fc6b6d`

## Entitlement Match Gate

Signed app entitlements:

- `com.apple.application-identifier`: `CR3J54M8BQ.com.taglauncher.app`
- `com.apple.developer.team-identifier`: `CR3J54M8BQ`
- `com.apple.security.app-sandbox`: `true`
- `com.apple.security.files.user-selected.read-write`: `true`

Embedded provisioning profile entitlements:

- `com.apple.application-identifier`: `CR3J54M8BQ.com.taglauncher.app`
- `com.apple.developer.team-identifier`: `CR3J54M8BQ`

Result:

- PASS: signed app application identifier matches embedded provisioning profile.
- PASS: signed app Team ID matches embedded provisioning profile.

## Payload Metadata

- `CFBundleShortVersionString`: `8.4.0`
- `CFBundleVersion`: `20260828.2219`
- Bundle ID: `com.taglauncher.app`
- Team ID: `CR3J54M8BQ`

## Permission Gate

Expanded package payload check:

```bash
find "$APP" \( -type d ! -perm -005 -o -type f ! -perm -004 \) -print
```

Result:

- PASS: no app bundle directories are restricted from non-root search/read access.
- PASS: no app bundle files are restricted from non-root read access.

## Verification

Commands completed successfully:

```bash
pkgutil --check-signature Upload/TagLauncher-8.4.0-build20260828.2219.pkg
pkgutil --expand-full Upload/TagLauncher-8.4.0-build20260828.2219.pkg <preflight-tmp>/expanded
codesign --verify --deep --strict --verbose=2 <preflight-tmp>/expanded/com.taglauncher.app.pkg/Payload/TagLauncher.app
hdiutil verify Archive/TagLauncher-8.4.0-build20260828.2219.dmg
shasum -a 256 -c SHA256SUMS.txt
```

## Apple Server Validation

Completed on 2026-08-30:

- PASS: `xcrun altool --validate-app`
- PASS: `xcrun altool --upload-package --wait`
- PASS: `xcrun altool --build-status --delivery-id 482c12a7-543d-4dab-afac-aa4e1b4bb6d0`

Apple result:

- Delivery UUID: `482c12a7-543d-4dab-afac-aa4e1b4bb6d0`
- Import status: `VALID`
- Processing state: `VALID`
- Build status: `BETA_INTERNAL_TESTING`
- Build audience type: `APP_STORE_ELIGIBLE`

## Non-Gate Note

Direct local launch/open smoke is not treated as a blocker for this App Store signed upload package. The user-facing local acceptance build was already verified via local DMG; this package is for Transporter/App Store Connect validation.