Reach an honest Untwine Mac release candidate

[kiku-jw]

Goal

Advance Untwine from the proof-ready Mac MVP on d9f0adc to the strongest honestly releasable candidate, including a real/trial Articulate export → Untwine repair → successful re-import receipt when an already accessible authenticated Articulate environment permits it.

Scope

• Revalidate current Articulate/manual-XLIFF and macOS distribution constraints against primary sources.
• Audit and close repo-controlled release gaps: UX/accessibility, native lifecycle/file flows, privacy/security, packaging, versioning, documentation, and release verification.
• Keep the Mac app a thin local-only shell around the canonical deterministic engine.
• Produce an auditable release-candidate artifact and sync public project truth.
• Inspect an already authenticated Articulate surface if available; use only public/test course material.

Acceptance

• All existing tests pass, generated WebKit runtime matches the canonical engine across the complete proof corpus, universal local app build verifies, and GitHub core/macOS CI is green.
• Native Mac acceptance covers launch, open, analyze, safe save, report save/redaction, reset, and repaired-file re-analysis.
• Accessibility and release-readiness findings are either fixed or documented as explicit non-blockers.
• One of these external-proof outcomes is recorded:
  1. successful real/trial Articulate re-import into the exact source course; or
  2. a single exact owner action naming the inaccessible account/device/legal gate after safe access paths are exhausted.
• Repository, Issue, and public project map agree on what is built, what is distributed, and what is still unproven.

Non-goals / owner gates

• No new account creation, payment, subscription, use of signing identities, commercial-license mutation, notarization/store submission, external outreach, or paid compatibility claim without the specific action-time authority required for that gate.
• No CAT/TMS, translation engine, backend, account system, telemetry, generic XLIFF editor, or XLIFF 2.0 repair expansion.

Stop conditions

Stop and request the one necessary owner action if completion requires new credentials, account creation/payment, a legal licensing choice, a signing identity, or a real Articulate course unavailable in the authenticated environment. Do not replace real re-import proof with fixtures or a local clean verdict.

[kiku-jw]

RC evidence — 2026-08-30

Published source: b7c1d2a

GitHub verification: Verify run 33299781837 passed both core and macos-app jobs.

Fresh local evidence:

• npm test: 8/8 passed.
• npm run build:macos: produced a universal arm64 + x86_64 Untwine.app, versioned Untwine-0.1.0-macOS.zip, and SHA-256 receipt.
• npm run verify:macos: passed sandbox entitlements, ad-hoc hardened-runtime flag, canonical engine parity across 22 proof cases, ZIP integrity/checksum, and extracted app-payload parity.
• A native thin arm64 build and the same verifier path also passed, matching CI topology.
• Independent adversarial review found no actionable defects.

Native Mac acceptance:

• The macOS accessibility tree exposes both original and translated inputs as named file-upload buttons.
• Keyboard-only Option-Tab + Return opened both native file panels, selected the public fixtures, and ran analysis.
• Safe repair saved successfully; its bytes matched the canonical CLI repair output, and re-analysis returned clean with zero issues.
• The local diagnosis report contained no filenames, filesystem paths, source text, or translated course text.
• Reset returned to an empty pair, and the visible keyboard focus ring was confirmed.

Public project truth was synchronized in kiku-jw/kikuai-project-map@322b347 without claiming a public signed release, real re-import, demand, or payment.

Current platform constraint: Articulate still documents manual XLIFF import for Standard-license Rise workflows and requires import into the exact source course, while built-in Localization is the platform substitute for multi-language workflows. The public Mac distribution gate remains separate: this machine has no Developer ID Application identity, so no notarized public artifact was produced.

One exact owner action still required

Confirm that Codex may submit the already prefilled existing Articulate account sign-in flow and, after the owner completes any password, 2FA, or CAPTCHA step, create one neutral Rise course named Untwine Import Proof, export its XLIFF, and upload the Untwine-repaired public test XLIFF back into that same course. This does not authorize a new account, trial signup, payment, subscription change, deletion, or use of an Apple signing identity.

Until that action is confirmed and succeeds, real/trial Articulate re-import remains unproven and this Issue stays open.