Preserved and diagnosed an R8 measurement-harness rollback, fixed the blocking lsof probe, verified exact rollback, and relaunched exact Tyrell Build 20 as guarded R9 on rdmbair15m5 only.

Scope

• Product host changed: rdmbair15m5 only.
• Coordinator: rdmpw3275m.
• No other fleet host was installed, restarted, or expanded.

What happened

• R8 entered rolled_back at 10:20:53 EDT because lsof -a -p 39036 -d txt -Fn timed out after 30 seconds while statting an unrelated Time Machine SMB mount.
• Four accepted R8 samples had one PID/start/path, AC/open, no status or permission failures, no 503s, and two TCP descriptors. R8 is an inconclusive harness failure, not a Build 20 product-memory rejection.
• Exact Build 15 daemon and exact Build 17 app rollback completed and was independently verified.
• Filed ISSUE-20260914-09.
• Guard v1.4 now uses lsof -b -w -nP with a ten-second deadline for all exact process measurements.
• Live-mount, injected-stall, missing-payload, and complete disposable rollback tests passed.
• R9 launched exact Build 20 at 10:36 EDT and is healthy in state=soaking; it is not accepted.

Files changed or added

• Preserved complete R8 stage at canonical /Users/richh/dev/_handoff/tyrell-build20-memory-20260912/canary-r8-rollback-20260914-1024/build20-canary-r8-20260913-96a5fc0.
• Reviewed fix source: /Users/richh/Documents/ChatGPT/rdmpw3275m/handoff/tyrell-r9-harness-20260914/canary_guard.py and launch_guard_power_protected.zsh.
• Test stages on canary: /Users/richh/.tyrell/build20-r9-lsof-metrics-test-20260914, /Users/richh/.tyrell/build20-canary-r9-test-20260914-96a5fc0, /Users/richh/.tyrell/build20-canary-r9-negative-missing-prior-20260914, and /Users/richh/.tyrell/build20-canary-r9-disposable-rollback-20260914.
• Live R9 stage: /Users/richh/.tyrell/build20-canary-r9-20260914-96a5fc0.
• Promoted /Applications/Tyrell.app; retained Build 17 at /Applications/.tyrell-rollbacks/20260914-103623-2c5ca2a674fe/Tyrell.app.
• Stable daemon now resolves /Users/richh/Library/Application Support/Tyrell/releases/daemon-71bf6122e453/tyrelld.
• R9 updated its launchd plist, state, migration, samples, inventory, logs, and immutable launch snapshots.
• No database restore occurred.

Commands and verification

• Recursive R8 source/canonical manifest comparison: matching SHA-256 a06f2a19d4fe656dcc6be64f888bcc52b3fab949a1fbbf7718605fce72f58ea9, 51 files, 30 directories, zero links, 275,004,530 bytes.
• Rollback verification: exact Build 15 SHA dbc440bd54b85a54dd6c4150b23b3e508bff7d8d8080687d81b9ba7ac2cbbcf0; exact Build 17 app SHA 8693ebce3d474fed049597d11e3579bf1cd32f7a78acfd9544c78d77592da05e; both APIs 200 JSON; database quick-check ok.
• Fixed guard SHA 37f2e8f2ea1576064e2c5e81d946facd0de42672c72dc08b52a1c961c2d37175; launcher SHA 6b4c3272605e3de5aa6c7aa32af8707b90049887560f13cada598d59f8d49536.
• Patched live metrics completed in 0.060 seconds under the same mounted environment; injected contract completed in 0.047 seconds and proved all three lsof calls use -b -w -nP.
• Negative missing-payload rollback returned nonzero before mutation; disposable complete rollback restarted exact baseline as PID 55300 and kept APIs/database healthy.
• Full R9 preflight passed after fresh AC/open readings at 10:33:14 and 10:33:21 EDT.
• R9 exact daemon SHA 71bf6122e453315205f3f0dfaf3f1a3a6cf2d99dfe901cda88e7ac79a8112c77; exact notarized app SHA 423871cede8ae6313c486929f544dbee8d1085540b2d37896de6f2c2d4de90fd.
• R9 guard PID 59950, child caffeinate PID 60034, daemon PID 60157, app PID 59835, bar PID 59859; both sleep assertions and exact paths verified.
• Both APIs returned 200 valid JSON; live DB quick-check ok, 153,345 files, one additive column.
• First two R9 samples retained one PID/start/path, AC/open, no status/permission/503 failures, and two TCP descriptors.

Backups and undo

• R9 complete signed rollback payload is in /Users/richh/.tyrell/build20-canary-r9-20260914-96a5fc0/prior plus prior.json.
• Exact app rollback is /Applications/.tyrell-rollbacks/20260914-103623-2c5ca2a674fe/Tyrell.app.
• Pinned pre-migration backup remains /Users/richh/Library/Application Support/Tyrell/backups/20260912-0110-build20-preflight-96a5fc0/tyrell.db, SHA db29432be4fc962a18436f15f29d1677b10bc7c541d7f78eab6c00f7ecce3c8f.
• The guard automatically restores exact Build 15/17 on failure. For bounded manual rollback, invoke the pinned R9 canary_guard.py rollback with Homebrew Python 3.14, then independently verify app, daemon, both APIs, database, and assertion removal.
• Never overwrite the live additive database with the pinned backup.

Outstanding actions

• Keep rdmbair15m5 physically open and on AC.
• R9 warmup ends 10:46:32 EDT, short gate is 11:16:32, six-hour gate 16:46:32, and fixed 24-hour gate 10:36:32 EDT on 2026-09-15.
• No fleet expansion until every acceptance gate passes.
• This SSH session has launchd manager Background; Apple Notes publication requires an Aqua GUI-session agent on rdmbair15m5.