match

When a Local iOS Build Passes but CI's TestFlight Upload Rejects the Signature — Field Notes on match Code-Signing Drift

Running fastlane match on CI can produce builds that succeed while only the TestFlight upload fails on signing. These field notes show how to diagnose the certificate/profile drift reproducibly, lock CI to readonly, and add a pre-upload gate that stops bad signatures before they reach Apple.