Manual code signing works fine — right up until a second developer touches your project. Then Apple's certificate limits, silent revocations, and "it worked yesterday" errors show up fast.

I went looking for how teams actually solve this and ended up deep in fastlane match.

→ One encrypted repo every dev (and CI) pulls certs from

→ The exact commands: development, appstore, adhoc, nuke

→ Why storing certs in a repo isn't the risk it sounds like