@@ -90,6 +90,19 @@ test('a provisioning failure is not treated as retryable infrastructure', () =>
   assert.equal(isInfrastructureBootFailureReason('IOS_RUNNER_DEVICE_NOT_PROVISIONED'), false);
 });
 
+test.each([
+  'Provisioning profile "Agent Device" has expired.',
+  'Failed to install embedded profile: signing certificate is not valid.',
+])('does not mistake an unrelated signing failure for an unregistered device: %s', (stderr) => {
+  const reason = classifyBootFailure({
+    message: 'Runner did not accept connection (xcodebuild exited early)',
+    stderr,
+    context: { platform: 'ios', phase: 'connect' },
+  });
+
+  assert.equal(reason, 'BOOT_COMMAND_FAILED');
+});
+
 test('still classifies a genuine runner connect timeout as such', () => {
   assert.equal(
     classifyBootFailure({
 
@@ -73,17 +73,17 @@ export function classifyBootFailure(input: {
     .toLowerCase();
 
   // Matched before the connect-timeout branch: a runner that could not be
-  // installed also never accepts a connection, and the timeout reading would
-  // send the user to look at the screen or the network instead of the signing
-  // account. Anchored on the CoreDevice error code and the English framework
-  // strings, because the surrounding installer prose is localized.
+  // installed also never accepts a connection. The stable CoreDevice code is
+  // specific to a profile that does not cover the target device; generic
+  // profile text also appears for unrelated signing failures.
+  if (platform === 'ios' && haystack.includes('0xe8008012')) {
+    return 'IOS_RUNNER_DEVICE_NOT_PROVISIONED';
+  }
   if (
     platform === 'ios' &&
-    (haystack.includes('0xe8008012') ||
-      haystack.includes('provisioning profile') ||
-      haystack.includes('embedded profile'))
+    (haystack.includes('provisioning profile') || haystack.includes('embedded profile'))
   ) {
-    return 'IOS_RUNNER_DEVICE_NOT_PROVISIONED';
+    return 'BOOT_COMMAND_FAILED';
   }
   if (
     platform === 'ios' &&