rdmbair15m5-changelog-20260914-1715-tyrell-build23-r1-canary-launch

Build 23 R1 was installed and launched only on this designated canary under the unchanged fail-closed memory guard; it is currently soaking and is not accepted for fleet rollout.

Scope and exact changes

• Host: rdmbair15m5; no other runtime host was changed.
• Installed Build 23 app executable SHA-256 631d3a60eb57623d4a6afecba2e2085f8a8b2c132fac2c0f3803765566d5c732; prior exact Build 17 app retained at /Applications/.tyrell-rollbacks/20260914-170023-2c5ca2a674fe/Tyrell.app.
• Installed and launched daemon /Users/richh/Library/Application Support/Tyrell/releases/daemon-6afb7431fb42/tyrelld, SHA-256 6afb7431fb4288875b6ba4ad591bce8a27156ebb3176546a4ac42ca5b6cd791c.
• Created active protected stage /Users/richh/.tyrell/build23-canary-r1-20260914-093d653 with guard, rollback, evidence, and diagnostic allocation sidecar.
• Created consistent database backup /Users/richh/Library/Application Support/Tyrell/backups/20260914-1656-build23-r1-preflight-093d653/tyrell.db, SHA-256 94cd2cf7b743f54a75235d49e6ff3d8095866a4a179252c906fb1fce40d6833d, quick_check=ok, 153473 file rows.

Commands and verification

• Ran app install dry-run/install, nonce-bound app probes and receipts, database backup and integrity checks, rollback/dependency preflight, nine guard/interlock tests, launchd-disable interlock, strict codesign, Gatekeeper, and exact hash validation.
• Guarded launch occurred at 2026-09-14 17:01:47 EDT. At the frozen receipt, daemon PID 26620/start 17:01:46, guard PID 26393, caffeinate PID 26474, and diagnostic sidecar PID 26473 were live.
• verify_guard_power_protected.zsh passed the exact candidate identity, AC/open-lid envelope, both sleep assertions, disabled candidate autoload, and loaded persistent recovery sentinel.
• Seven one-minute samples span 360.052417 seconds with one PID/start/path, max gap 60.041160 seconds, descriptors 26..31, TCP exactly 2, all status and permission probes HTTP 200 valid JSON, and AC/open-lid throughout. Physical footprint was 261702904 -> 305120648 bytes with startup maximum 407012792 bytes; no memory gate has yet passed.
• Live nonce app probe SHA-256 ea09bb74fb6809047a4eb2cb98a587f0d958f8901394de4ba96f235b7beb743a; receipt SHA-256 1777a348f45c603f2b8f7fcd27a46dd265f0a293a3d8c04600d436b47f8513a2.
• Canonical immutable launch evidence: /Users/richh/dev/_handoff/tyrell-build23-memory-20260914/canary-r1-launch-20260914-1701; manifest SHA-256 edeb89813d18739c10b34a3bea83eb7c4178d8728bf1b444a0482d001ab09867, 72 entries verified RC 0.

Rollback and outstanding actions

• Guard retains exact signed Build 15 daemon SHA-256 dbc440bd54b85a54dd6c4150b23b3e508bff7d8d8080687d81b9ba7ac2cbbcf0 and Build 17 app SHA-256 8693ebce3d474fed049597d11e3579bf1cd32f7a78acfd9544c78d77592da05e and will fail closed.
• Keep this Mac on AC with its lid open. Do not reboot, sleep, relaunch, accept, or expand the candidate early.
• Short gate is not valid before 17:41:47 EDT; six-hour gate before 23:11:47 EDT; fixed 24-hour gate before 2026-09-15 17:01:47 EDT.
• Repeated unchanged inventory, CPU, fresh-app, controlled reboot, integration, and rollout gates remain open.
• Build 22 remains queued and not installed; its daemon is prohibited.