rdmbair15m5-changelog-20260921-1207-replicantdb-build-contract-prd-issues-resolution

Hardened ReplicantDB build contract against silent degradation, authored authoritative PRD.md, aligned STATUS.md with measured reality, and resolved open backlog issues in ISSUES.md.

Scope

• Hosts: rdmbair15m5 (working tree), rdmsm4x (canonical root), git.ecs0.net, GitHub backup
• Repositories: apps/replicantDB (main @ af3d4f8)

Changes Made

1. build.sh (Silent Degradation Guard):
   • Enforced that Developer ID release builds (DEV_BUILD=0 and APP_STORE_BUILD=0) fail fast (exit 1) if the ReplicantDB macOS provisioning profile is absent, preventing silent stripping of restricted CloudKit entitlements.
   • Development builds (--dev) and explicit unprovisioned testing (ALLOW_UNPROVISIONED=1) remain supported.
2. PRD.md:
   • Authored authoritative Product Requirements Document matching the East Coast Science portfolio baseline (SQLiteScope, CoreAudit, ReceiptRoo).
   • Documented personas, 9-signal Adaptive Backoff Governor, cooperative quiesce ladder, non-destructive APFS deduplication, MCP mutation policy, and safety boundaries.
3. STATUS.md:
   • Aligned status with current measured facts: 1,455 tests across 134 suites (100% green), Universal2 Cascade Lake compilation, macOS/iOS App Intents parity, and read-only dedup default.
4. ISSUES.md Backlog Audit:
   • Marked P1 bare dedup dry-run safety as RESOLVED (verified via CommandMutationSafetyTests.swift).
   • Marked P1 mutating MCP tool exposure as RESOLVED (verified via MCPMutationPolicy.swift).
   • Marked P2 PRD/STATUS gap as RESOLVED (PRD.md created, STATUS.md updated).
   • Marked P2 silent degradation as RESOLVED (build.sh fast-fail, HeldEventAccumulator, Spotlight semantics).
   • Marked P1 FEAT-20260905-06 & FEAT-20260905-07 as RESOLVED (governor telemetry, signal ladder, cooperative quiesce).
5. SESSION-STATE.md:
   • Documented milestone progress and verification evidence.

Verification Evidence

• swift test --filter CommandMutationSafetyTests: 7/7 tests passed in 0.094s (bare dedup preview, hash flag explicit, MCP mutation opt-in).
• ./build.sh --dev: Full universal2 (arm64 + x86_64 cascadelake) build and signing verified; App Intents metadata extracted (19 KB); verify_build_contract.zsh passed.
• Git parity: Committed af3d4f8, pushed to origin (git.ecs0.net:git/apps/replicantDB.git) and backup (github.com/richhdoty/rdmsm4x-dev-apps-replicantdb.git), fast-forwarded to rdmsm4x:~/dev/apps/replicantDB.

Rollback & Undo

• Revert commit: git revert af3d4f8