The M7 U1 workflow re-enabled CI, but manually re-signing *Runner.app with codesign --options runtime stripped the xctrunner entitlements that xcodebuild generates for the UI test runner. The hardened ad-hoc runner then rejected XCTest at dyld load time. - Remove the *Runner.app loop from .gitea/workflows/macos.yml. - Keep xattr -cr and codesign --options runtime on ICCery.app only, explicitly passing Resources/ICCery.entitlements. - Update M7-MEGAPLAN.md and M7-RISK-REGISTER.md to match. - Append PROP-M7-CI-RUNNER-SIGN-FIX to PROPOSED_CHANGES.md. Generated with Devin