PUNCHCARD 0.8.1 AU beta — validation record, updated 2026-09-11

Release source: f48cc64dc7f9e146320716cfe8676c1e58759d7d
JUCE 9.0.1: e18f7f506c0b96f2c738a0bcd7fe6467a5005ad8
Same source/DSP/UI as the released 0.8.1 VST3; only format is different.
This AU package does not replace installed VST3 instances.

BUILD / STATIC VALIDATION: PASS
- Audio Unit v2 instrument: aumu / Ecdr / Ecos.
- Bundle ID: audio.ecosystem.drums; factory: PUNCHCARDAUFactory.
- Universal 2: arm64 and x86_64; minimum macOS 11.0 in both slices.
- CFBundleVersion / CFBundleShortVersionString: 0.8.1; AU version: 2049.
- Only Apple system-library/framework dependencies; executable permissions 755.
- Developer ID signed: strict/deep/all-architecture verification passed on
  clean non-iCloud staging; hardened runtime and secure timestamps present.
- Current signed executable SHA-256:
  b9199f1c0a3c272fe3348103200c958f1d617d40cf4fd9b315b576fb00f1db61

SHARED ENGINE TESTS: PASS (not AU host tests)
- Fresh CTest: 12/12 test suites.
- Fresh Intel processor regression tests through Rosetta: 25,315 checks.

LIMITED AU FACTORY TESTS: PASS
- Exact candidate dynamic loading and AU factory/required-selector checks:
  15/15 on arm64 and 15/15 through Rosetta x86_64.
- These checks DO NOT instantiate the processor or render audio.

NOT VERIFIED — PLEASE READ BEFORE TESTING
The validation environment could not register Audio Components; auval listed
no components, including built-in Apple units. An attempted process-local AU
registration returned null. No global cache or production installation was
modified to force this test to pass.

Therefore auval conformance, actual AU processor instantiation, audio rendering,
editor display, AU state restoration, Live AU loading/playback, automation,
audio/MIDI/stem export, DAW save/reopen and long sessions remain UNVERIFIED.
Previous Live VST3 success does not establish AU success.

SECURITY PACKAGING UPDATE — 2026-09-11
Developer ID Application: hiroki koga (52986QUVAY).
Apple submission: 14c346bd-5f5a-4ad3-aa4f-661a82601cec.
Apple status: Accepted; statusCode 0; issues null (no warnings/errors).
Staple + validate passed in the user's normal Mac session. The package retains
that exact ticket and signed executable. Source, DSP and UI were not rebuilt.
The agent's stapler/online notarized-requirement checks are unavailable in its
restricted execution context; a fresh recipient-machine check remains needed.
Browser-downloaded clean-Mac Gatekeeper acceptance remains UNVERIFIED.
Do not disable system security. Test only in a new disposable project.
In Ableton Live, AU does not support direct MIDI output to another track.

PACKAGING
The packaging script verifies exact executable hash, versions, AU identity,
architectures, minimum OS, archive safety/CRC, full SHA-256 manifest and strict
signature verification after clean extraction. It excludes extended attributes,
resource forks and private recordings. This tests package integrity, not the
macOS security policy applied to a new browser download.
