Move Agent Assist onto Attik accounts

Objective

• Move operational ownership of Agent Assist (distribution, signing, analytics, crash reporting, push, and any vendor SaaS tied to the app) from external/vendor-controlled accounts to Attik-controlled accounts.
• Ensure shipping and maintenance do not depend on contractor access to Apple, third-party dashboards, or shared logins.

Background

• May 15 feature sync (Chris): After code lives in Attik repos (ATT-1679), the team should put the app on Attik accounts—this ticket is explicitly separate from the git migration itself.
• Framed as near-term / next-week handoff work alongside repo move and TestFlight (ATT-1681).
• Related milestones: depends on or runs parallel with ATT-1679; precedes or overlaps ATT-1681 / ATT-1682.

Scope

Apple & distribution

• App Store Connect organization, roles, agreements, bundle identifier ownership, certificates & provisioning profiles, push keys, and any Enterprise vs App Store / TestFlight path Decision needed from product/legal.

Vendor / third-party services

• Decision needed: inventory of non-Apple accounts (analytics, crash, feature flags, LLM vendor dashboards if any) and cutover plan with credential rotation so vendor no longer has admin.

Security & compliance

• Secrets storage (e.g. CI vault, not committed .env); least-privilege access for Attik staff who need release keys.

Attik product repos (context only)

• No Agent Assist standalone app project was found inside attik-backend, attik-frontend, or attik-mobile in this workspace; account work targets the Agent Assist app pipeline, not the existing agent-assist report-chat feature flags in Attik web.

References

• Related: ATT-1679, ATT-1681, ATT-1682.