- codesign -f -s - every fetched Mach-O, then codesign -dvv verify —
an unsigned sidecar now fails the script (#165)
- Replace the 8-cusp reference_gamuts stub with the real v0.8.5
src/assets/sRGB.gam (448 verts / 892 faces) used by the Stage 5
gamut overlay (#185)
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Implements issue #6 (M1).
PathSecurity.sanitizeBasename— rejects/,\,.., empty; never invents a default basename (#60).PathSecurity.resolveSafeCwd— explicit dir → Documents → Home → app-data; never returns empty (#59).AtomicFileWriter—.tmp+replaceItemAt/move; parent dirs created (#213 convention).ArtefactProbe—verify_stage_artefacts(.ti1/.ti2/.ti3/profile +profilePath),.icm-over-.iccresolution with.iccmacOS default (#69), artefact enumeration covering.tif,.N.tif,_NN.tif,_passN.ti3, and theCAL_namespace.FileDialogService—NSOpenPanel/NSSavePanelwrappers: directory (Documents default),.ti1/.ti2/existing-target,.ti3,.icc/.icm,.cal, save panel.Also includes the #3 follow-up commit: ad-hoc sign+verify in
fetch-argyll.sh, and the real 448v/892fsRGB.gam.Verified: 40/40 tests pass.
Closes #6