fix(workout): make mobile verification fail closed

Make workout mobile-verify reject non-HTTPS origins and release kits that omit detected external signing/toolchain blockers, so verification checks objective release preconditions instead of pretending to predict store approval.

req: examples/006
This commit is contained in:
slhx agent
2026-06-12 12:31:19 +02:00
parent 32fa1a4952
commit 2b9979e339
2 changed files with 64 additions and 4 deletions
+5 -2
View File
@@ -29,8 +29,11 @@ target/hemx-mobile/workout/
ios/README.md
```
Use `workout mobile-verify` to check the generated kit and release binary. Use
`workout doctor` when you only want to see missing external inputs.
Use `workout mobile-verify` to check the generated kit and release binary. It
fails on a non-HTTPS production origin, missing/inconsistent Android or iOS
metadata, or external toolchain/signing blockers that were not written into the
manifest and `BLOCKERS.md`. Use `workout doctor` when you only want to see
missing external inputs.
## Production configuration