Verified Tyrell Build 20 R10's short memory gate independently, resolved the lsof guard bug with bounded evidence, and retained the canary for its long acceptance gates.

Scope and files

• Coordinator host: rdmpw3275m; runtime canary: rdmbair15m5; canonical evidence host: rdmsm4x.
• Added independent verifier /Users/richh/Documents/ChatGPT/rdmpw3275m/handoff/tyrell-r10-harness-20260914/verify_canary_gate.py.
• Added local receipt /Users/richh/Documents/ChatGPT/rdmpw3275m/handoff/tyrell-build20-r10-short-gate-20260914-1205/README.md.
• Published the byte-verified receipt and immutable gate artifacts under /Users/richh/dev/_handoff/tyrell-build20-memory-20260912/canary-r10-short-gate-20260914-1205/ on rdmsm4x.
• Updated the shared PROJECTS.md, resolved ISSUE-20260914-09, and added the receipt to the six remaining Tyrell tickets.
• No daemon, app, database, backup, or fleet host was changed during gate verification.

Commands and evidence

• Ran agent preflight and synchronized fleet mail.
• Ran the pinned guard/power verifier and re-read launchd identity, exact artifact hashes, sample history, Time Machine status, and gate outputs from the canary.
• Independently parsed every complete sample and reran the pinned validate_window calculation through the first short-boundary sample.
• Required one PID, process start, resolved path, exact AC/open envelope, two valid status results, sixteen valid permission results, descriptor_probe=libproc-v1, descriptor range and endpoint delta within five, stable TCP count, and gaps no greater than 90 seconds.
• Confirmed the independent result equals the guard-written JSON receipt exactly.

Result

• 31 post-warmup samples over 1,800.274337 seconds.
• Physical endpoint 58.594986 MiB, below the 300 MiB limit.
• Physical delta -0.035412 MiB/min and regression slope -0.009733 MiB/min, both below the +0.20 MiB/min limit.
• Descriptor range 25–27, TCP always 2, maximum gap 60.046557 seconds, zero status/permission/503 failures.
• Time Machine remained actively copying, and R10 ran beyond R9's 1,140.890-second lsof failure interval.
• Receipt SHA-256: e73c2ce894f95f58495dd6e5dbdb00f9e9bbd0facc3640ec8c010438cc6002ca.

Recovery and pending work

• The exact Build 15 daemon and Build 17 app rollback payload remains complete and guard-controlled.
• Never restore the pinned pre-migration database over the additive live database.
• Six-hour, fixed 24-hour, repeat-inventory, CPU, fresh-app, and controlled-reboot gates remain pending; no fleet expansion is authorized.
• Track B agy remains unchanged with no eligible parent or actual quota-reset event.