Diagnosed and fixed the R8 lsof false rollback, verified exact recovery, and relaunched exact Tyrell Build 20 as hardened R9 on the designated canary only.

Scope and changes

• Coordinated from rdmpw3275m; product changes were confined to rdmbair15m5.
• Preserved R8 byte-for-byte on canonical rdmsm4x before classification.
• Filed and fixed ISSUE-20260914-09: ordinary lsof blocked on an unrelated Time Machine SMB mount and exceeded the guard deadline.
• Patched guard v1.4 and its pinned launcher under /Users/richh/Documents/ChatGPT/rdmpw3275m/handoff/tyrell-r9-harness-20260914.
• Ran live-mount, injected-stall, negative missing-payload, and full disposable rollback tests.
• Prepared, fully preflighted, and launched R9 exact Build 20 only on rdmbair15m5.
• Receipt source: /Users/richh/Documents/ChatGPT/rdmpw3275m/handoff/tyrell-build20-r9-launch-20260914-1036/README.md.

Verification

• R8 canonical preservation manifest matched at SHA a06f2a19d4fe656dcc6be64f888bcc52b3fab949a1fbbf7718605fce72f58ea9 across 51 files, 30 directories, zero links, and 275,004,530 bytes.
• Exact rollback Build 15 daemon and Build 17 app, both APIs, database integrity, and guard removal passed.
• Hardened guard SHA 37f2e8f2ea1576064e2c5e81d946facd0de42672c72dc08b52a1c961c2d37175; launcher SHA 6b4c3272605e3de5aa6c7aa32af8707b90049887560f13cada598d59f8d49536.
• Live patched metrics completed in 0.060 seconds; injected lsof contract completed in 0.047 seconds; negative and disposable rollback tests passed.
• R9 daemon PID 60157, exact SHA 71bf6122e453315205f3f0dfaf3f1a3a6cf2d99dfe901cda88e7ac79a8112c77, exact hash-addressed path, launchd runs 1 and never exited.
• Exact notarized app SHA 423871cede8ae6313c486929f544dbee8d1085540b2d37896de6f2c2d4de90fd with one app and bar.
• Guard/caffeinate parentage, both sleep assertions, both status APIs, additive database integrity, and two initial same-identity samples passed.

Recovery and pending work

• Complete R9 rollback payload and exact Build 17 app rollback are retained on the canary.
• The guard rolls back automatically on any failure; never restore the pinned pre-migration database over the live additive database.
• R9 remains SOAKING_NOT_ACCEPTED. Warmup, short, six-hour, fixed 24-hour, CPU, app, inventory, and reboot gates remain pending. No fleet expansion is authorized.