Paid team’s signing identity rejected on device (0xe8008018) since free-to-paid upgrade; same app installs under a free team

Since upgrading my free Apple Developer account to the paid Apple Developer Program (Individual) on September 21, 2026, every app signed with my paid team fails to install on my devices. TestFlight builds work.

Error (Xcode Run, devicectl, Ad Hoc export):

MIInstallerErrorDomain Code 13 / 0xe8008018
"The identity used to sign the executable is no longer valid."
+[MICodeSigningVerifier _validateSignatureAndCopyInfoForURL:withOptions:error:]
LibMISErrorNumber = -402620392

What I've established:

  • A brand-new Hello World app with no capabilities fails the same way, so it is not my project, entitlements or widget.
  • The same Hello World signed by a free Personal Team installs on the same iPad (after trusting the developer in Settings). So the device, OS, Xcode and Mac are fine.
  • Fails on iPad Pro 13" M4 (iPadOS 27.0.1 and 27.2), iPhone Air (iOS 27.0.1) and iPhone 15 Pro Max (iOS 26.0.1), with Xcode 27.0, 27.1 and 27.2.
  • Fails with Apple Development signing (Xcode Run) and with an Ad Hoc export signed with an Apple Distribution certificate.
  • codesign verifies the app, the embedded profile contains the signing certificate and the device UDIDs, and the chain (WWDR G3 to Apple Root CA) is valid and not expired.
  • Regenerated the Development and Distribution certificates, cleaned expired WWDR certificates from the keychain, removed profiles on the device, re-paired and toggled Developer Mode. No change.
  • Only apps re-signed by Apple (TestFlight) install.

This looks like stale signing state for the team on Apple's side after the free-to-paid conversion. I have an open request with Apple Developer Support (Case-ID 22506476) and Feedback Assistant report FB24912726, but have had no reply in two weeks.

Has anyone seen 0xe8008018 on a team that was recently upgraded or converted, and is there anything I can do on my side beyond asking Apple to reset the team's signing identity?