V2 release validation
Validate the lean candidate without modifying the original font. Preserve the workspace and prior acceptance evidence before assembling an isolated candidate.
Automated checks
Run the complete Python and installer suites, focused companion and lifecycle regressions, documentation and skill checks, module budgets, deterministic unsigned builds and git diff --check. Qualify private runtime startup offline on both supported architectures.
Cover dispatch/timeout ordering, competing and repeated operations, partial native setters, failed readback/recovery, cancellation/publication orderings and native fractional-coordinate Undo/Redo. Exact history and recovery checks must not use display tolerance.
Native acceptance
Install the verified bundles and restart Glyphs safely. Run three consecutive disposable-font acceptance cycles covering spacing, fractional widths and coordinates, cancellation/recovery, native Undo/Redo and companion startup/redraw. Compare saved data with an untouched native-save control and verify the original source hash.
Check the menu reference indicators, active-layer-only status text and Glyphs' nonmodal Welcome/support panel and heart button. Separately verify the local desktop introduction's six slides, File/sidebar replay and Setup handoff. Confirm first-launch persistence and quiet login without repeated automatic presentation. Full VoiceOver and visual Reduce Motion acceptance remain user-deferred manual checks; deferred does not mean Passed. Retain the reports and source-hash evidence.
Record idle and loaded responsiveness separately. A 200 ms HTTP probe is diagnostic rather than an automatic rejection; investigate reproducible stalls attributable to the plugin and distinguish modal waiting from native execution.
Verify Glyphs application detection with Finder Quick Look and thumbnail extensions active while Glyphs itself is closed. Extensions must not mark the application as running; the real Glyphs 4 application must still block its component installation until it quits. Detector fixtures cover exact stable and beta bundle IDs; those fixtures do not qualify native launch or a Glyphs 3 v2 port.
Packaging and identity
Validate component combinations, upgrades, removal, interrupted installation and complete transactional rollback. Verify preservation of unrelated files and user preferences. Sign nested code from the inside out, notarize and staple, then reverify exact payload identities and the installed receipt.
Record which checks were run on unsigned, signed and final notarized artifacts. Documentation-only updates do not retroactively change the source manifest or acceptance report belonging to an already signed installer.
Follow the repository's macos-installer/RELEASING.md for local release commands. Public publication is separate from local acceptance.