tmk241/hemx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(workout): gate mobile verification on product tests

Browse Source 
Make workout mobile-verify rerun the Workout product tests before release-kit checks so app value, recovery, local state, and host capability boundaries fail closed with mobile artifacts.

req: examples/001

req: examples/006

req: host/002

req: local/001
This commit is contained in:
slhx agent
2026-06-12 12:35:41 +02:00
parent 2b9979e339
commit d4e99b6e73
3 changed files with 27 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/workout/README.md
+8 -5
View File
@@ -70,11 +70,14 @@ HEMX_WORKOUT_ORIGIN=https://workout.example.com \
```
The kit lands in `target/hemx-mobile/workout` unless
`HEMX_WORKOUT_MOBILE_OUT` is set. It records app identity, version, production
origin, runtime asset policy, cache/offline state policy, secrets/signing
boundaries, rollback expectations, Android TWA metadata, iOS WebView metadata,
and any external blocker such as missing Android SDK, Xcode, or store signing
credentials. See `docs/recipes/mobile-release.md`. req: examples/006
`HEMX_WORKOUT_MOBILE_OUT` is set. `workout mobile-verify` reruns the Workout
product tests before checking the release kit, so app value, recovery, local
state, and host capability boundaries fail closed with the mobile artifacts. The
kit records app identity, version, production origin, runtime asset policy,
cache/offline state policy, secrets/signing boundaries, rollback expectations,
Android TWA metadata, iOS WebView metadata, and any external blocker such as
missing Android SDK, Xcode, or store signing credentials. See
`docs/recipes/mobile-release.md`. req: examples/006
## Boundaries proven