PUNCHCARD 0.8.1 beta — validation record, updated 2026-09-11

Scope: minimal Ableton instrument-event-input compatibility hotfix.
Release source: f48cc64dc7f9e146320716cfe8676c1e58759d7d
JUCE: 9.0.1, e18f7f506c0b96f2c738a0bcd7fe6467a5005ad8
No changes to the distributed 0.8.0 DSP, UI or sample library.
Development-only DRUMIFY changes excluded.

macOS Release Universal 2 build: PASS (arm64 and x86_64, macOS 11 minimum).
CTest: 12/12 PASS.
Intel processor regression tests via Rosetta: 25,315 checks PASS.
Original build was ad-hoc sealed after moduleinfo generation.
Current Developer ID signed executable SHA-256:
2563d3e96c13576fa9954f9ea0c7d8524d64d8653c998c27167e078d1984c670

Ableton Live 12.4.3, macOS 26.5.1, local isolated custom VST3 folder:
- 0.8.0: scan succeeds; insertion fails with "no valid event input bus".
- 0.8.1: scan and insertion succeed, confirmed by Live log "Created: PUNCHCARD".
- User confirmed yellow editor visible and sound plays after sample import,
  pattern generation and Live transport playback. These are user-observed
  checks; automated UI capture exposed only the Live main window.
- No production DAW installation or existing project replacement performed.

Not verified: Live project save/reopen, automation, export and long sessions;
other Live versions; new FL Studio runtime regression; Intel DAW runtime.
No claim of musical quality or distortion-free operation for arbitrary samples.

SECURITY PACKAGING UPDATE — 2026-09-11
Developer ID Application: hiroki koga (52986QUVAY).
Hardened runtime and secure timestamps; arm64 + x86_64 signatures verified.
Apple submission: 50e2779a-5c7d-4677-b04c-985d8335493e.
Apple status: Accepted; statusCode 0; issues null (no warnings/errors).
Staple + validate passed in the user's normal Mac session. The package retains
that exact ticket and signed executable. Source, DSP and UI were not rebuilt.
Automated strict/deep/all-architecture integrity checks pass. The agent's
stapler/online notarized-requirement checks are unavailable in its restricted
execution context; this does not replace a fresh recipient-machine check.
Fresh browser-download Gatekeeper acceptance on a clean recipient Mac has not
yet been verified for this package. Do not disable system security.

Packaging checks: clean ZIP extraction, CRC, complete SHA-256 manifest,
bundle equality, strict signature and architecture checks are required by the
packaging script before this archive is published.
