[cubxxw]

Explicit listening now continues as primary background audio and exposes pause/resume/end through a session-owned Live Activity on Lock Screen and Dynamic Island. The native elapsed-listening timer advances only during actual output, freezes during preparation/pause, and handles wall-clock changes without adding reading time. Media commands and App Intents operate on the same current owner; intents wait for queued card updates before returning.

The widget is embedded with its own exact .listening identity. Archive/export now validates separate main/extension profiles using the existing certificate/team, and the IPA verifier checks the embedded extension identity/version. The user separately authorized the exact extension maintenance. Its App Store profile was generated with the existing main certificate, independently validated against the current main profile, and stored as IOS_LISTENING_PROFILE_BASE64 in the existing TestFlight environment. The automated maintenance switch stays disabled; ordinary release only consumes validated profiles.

Validation (full remote PR CI passed on implementation head 525889aa; the final documentation commit records provisioning only):

• 88 affected app tests passed on the final code.
• Core: 350 executed, 2 skipped, 0 failures.
• Simulator UI: background playback and Activity timer/pause/resume/end passed; Control Center presentation explicitly skipped because its system control folder was entirely empty. The combined run had a unit-host connection hang; the separate unit-only rerun passed.
• 105 release Node contracts and 11 Python profile/package checks passed; web production build and copy inventory checks passed.
• Broad Node run: 4,599 passed, 14 skipped, one hosted PDF subprocess timed out under load; isolated PDF recheck passed.
• Independent review findings were reproduced and fixed with regressions. Main feat(ios): book margin notes, message replies and faster return #305 was synchronized before final native/Core checks.

Xcode/iOS 26.4 were used. Compatibility MediaPlayer APIs support the existing iOS 17+ target; iOS 27-specific and physical-device presentation, audible continuity, Always-On and accessibility acceptance remain separate. System media animation and island placement are OS-controlled.

Design, plan, verification and release prerequisite: docs/superpowers/specs/2026-11-03-listening-system-presence-design.md, docs/superpowers/plans/2026-11-03-listening-system-presence.md, docs/verification/2026-11-03-listening-system-presence.md, docs/ios-testflight-release.md.

Publication completed from merged source be467c958875ab7b99f05f96462a5d4c68e688e8:

• Main CI and Production verification succeeded.
• Release iOS produced version 0.1.0 / build 1.0.59, with exact-source/IPA receipt and Apple COMPLETE / VALID.
• Read-only TestFlight audit confirmed this exact build is unexpired, IN_BETA_TESTING, and linked to the existing internal group. It does not establish eligibility/installation for a particular tester or physical-device acceptance.

[ecc-tools]

ECC Tools / Security Evidence

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 29 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Risk Taxonomy

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

PR taxonomy review recommended (neutral)

Detected 2 PR taxonomy bucket(s): Security Evidence, CI/CD Recommendation.

Scanned 29 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

• 1 security-sensitive path(s) changed

Paths:

• .github/workflows/release-ios.yml

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

• CI workflow changes may ship without failure-mode evidence
• Dependency or CI drift could surface after merge
• 1 CI or workflow path(s) changed

Paths:

• .github/workflows/release-ios.yml
• apps/ios/project.yml
• scripts/ios/archive.sh
• scripts/ios/signing.py
• scripts/ios/verify-ipa.py
• tests/test_ios_app_icons.py
• tests/test_ios_signing.py

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Reference Set Readiness

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 29 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Hosted Promotion Readiness

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 29 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Config Audit

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

No changed-config issues detected (success)

Scanned 1 config file(s) present at this commit across 1 changed config path(s) and found no issues in the supported security rules.

Changed config files:

• .github/workflows/release-ios.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Harness Audit

Commit: 525889aae58a4062df1b6497f18bef922515c4e0

No harness issues detected (success)

Scanned 1 changed config file(s) and found no harness issues.

Changed config files:

• .github/workflows/release-ios.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Security Evidence

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 29 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Risk Taxonomy

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

PR taxonomy review recommended (neutral)

Detected 2 PR taxonomy bucket(s): Security Evidence, CI/CD Recommendation.

Scanned 29 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

• 1 security-sensitive path(s) changed

Paths:

• .github/workflows/release-ios.yml

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

• CI workflow changes may ship without failure-mode evidence
• Dependency or CI drift could surface after merge
• 1 CI or workflow path(s) changed

Paths:

• .github/workflows/release-ios.yml
• apps/ios/project.yml
• scripts/ios/archive.sh
• scripts/ios/signing.py
• scripts/ios/verify-ipa.py
• tests/test_ios_app_icons.py
• tests/test_ios_signing.py

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Reference Set Readiness

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 29 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Hosted Promotion Readiness

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 29 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Config Audit

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

No changed-config issues detected (success)

Scanned 1 config file(s) present at this commit across 1 changed config path(s) and found no issues in the supported security rules.

Changed config files:

• .github/workflows/release-ios.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Harness Audit

Commit: 4aaa4595bdbafb069a78d7bc326ee55e03e230c6

No harness issues detected (success)

Scanned 1 changed config file(s) and found no harness issues.

Changed config files:

• .github/workflows/release-ios.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.