AgentSeal d349a01e99 harden(mac): fail-closed minos guard, weak-link errno check, strip em-dashes ... Review follow-up on the Sonoma deployment-target fix: - The release minos guard was fail-open: if vtool returned nothing (missing binary, tool change) the check passed vacuously and could green-light a bad release. Now it fails closed when no minos is reported. - The libswift_errno check now excludes weak links, so it only fails on a breaking STRONG link. dyld tolerates a missing weakly-linked dylib, so a macOS 15.x SDK runner that weak-links errno at the .v14 target no longer causes a spurious release failure. - Removed em-dashes from the changed files per repo style. Verified: fresh .v14 build is minos 14.0 with no strong errno link; the guard now fails closed on an unreadable binary and passes on the real one; 71 Swift tests pass.		2026-07-10 09:20:15 +02:00
..
build-local.sh	harden(mac): fail-closed minos guard, weak-link errno check, strip em-dashes	2026-07-10 09:20:15 +02:00
package-app.sh	harden(mac): fail-closed minos guard, weak-link errno check, strip em-dashes	2026-07-10 09:20:15 +02:00