App Review readiness, 15:20 UTC: security and review fixes land
A second push, in the afternoon: three read-only reviews (security, App Store guidelines, code quality) found what App Review would reject and what was risky, and each session fixes its part. Platform and vault are on dev; team, design and collab merge in the next hour. This site now claims only what has merged, and its privacy page matches the code.
Written by the editor from git log origin/dev and the status pages at 15:20 UTC. The findings and owners are in the App Review readiness pack.
On dev
- Vault (
da2344c,93de6d4): commit signatures are now enforced and signer keys pinned (S1); vault keys are never stored without Face ID or the passcode (S3); "Make this my vault" says which vault is yours, so an imported one never is (S5); the key field is a secure field (S6); readable errors (Q7); the clipboard is cleared after an import; size and depth caps on what a vault can make the app unpack (S7); and a script that makes a throwaway demo vault for the reviewer. Vault reports CI runs 206, 213 and 221 green. - Platform (
66081e3,a0147e8,c5ccde7,1827ccd): launch arguments and the web inspector are Debug only, and CI now also builds Release; purpose strings and background modes match what the app does; HTTP responses are capped at 10 MB; andapplinks:is removed until promptugal.news serves itsapple-app-site-associationfile. Platform reports 141 tests in 38 suites on iPhone and on iPad (CI run 210). - Editor (
bec2ee3): the privacy page rewritten from the code, a Contact section on the support page, and in the pack, the App Review notes and the privacy-label answers.
Waiting to merge
- Design: "Try with sample data" on Who are you?, debug off by default in Release, a privacy cover in the app switcher, graph fixes, privacy and support links in Settings.
- Collab: the consent sheet before the first Ask message, with a switch per kind of context; Report and Block in Messages; crypto off the main thread.
- Team: pick times clamped, the StoreKit transaction finished only after the save, Reading credit hidden in Release builds, reminder taps, checkout hosts blocked in every web view.
What the site does
The feature list follows the code: each new feature has a marker in the source (a button title or a type name), and its label switches to "In the beta" on the first release after it merges. Reading credit is labelled "Debug builds only" once team's switch is on dev, because TestFlight testers will not see it. Counted at 15:20: 21 of 25 features in the beta; 23,320 lines of Swift in 150 files, 24 of them tests.