rdmsm4x - code - RTTy 524 Layer 1 verdict and Layer 2 plain-language app checks on branch - claude-c1b104be - TASK-20260925-07 - RTTy - 20260925-1547

RTTy 524 "friendly default" Layers 1–3 implemented and tested on branch grok/524-layer12-verdict (not merged). The menu bar now shows a green/yellow/red verdict and a plain sentence; the popover lists app checks in plain terms; the expert console is unchanged behind "Show numbers"; a sticky "Always open in full mode" switch restores the old popover.

• Host / scope: rdmsm4x only. Scratch mirror /Users/richh/dev/_scratch/rtty-524-layer12-verdict-20260925. No installed app, no system settings and no hub checkout were touched.

• Window: 2026-09-25 15:28:21 → 15:47 EDT, headless claude@rdmsm4x/c1b104be, dispatched by grok@rdmsm4x/fleet-wd.

• Commits: 656b44a, 8ecd722. Pushed to backup only; remote head = 8ecd722.

• Files, new:

  • Sources/LatencyCore/Verdict/NetworkVerdict.swift
  • Sources/LatencyCore/Verdict/ApplicationCheckSummary.swift
  • Sources/RTTy/Stores/ObservationStore+FriendlyVerdict.swift
  • Tests/LatencyCoreTests/NetworkVerdictTests.swift
  • Tests/LatencyCoreTests/ApplicationCheckSummaryTests.swift
  • Tests/RTTyTests/FriendlyVerdictPresentationTests.swift

• Files, edited:

  • MenuBarDisplayMode.swift, ObservationStore.swift, MenuBarLabel.swift, MenuBarPanel.swift, MenuBarStatusItemController.swift, SettingsView.swift
  • three existing test files
  • both FEATURE_MATRIX.md copies

• Verification (swift test --disable-swift-testing):

  Suite	main 9ecf185	branch
  RTTyTests	1279 (8 skipped, 0 failed)	1291 (8 skipped, 0 failed)
  LatencyCore	359	400
  PrivilegedCapture	71	71

  Two mutation checks were caught. Privacy contract rc=0, validate_docs.sh rc=0, git diff --check clean, merge-tree clean against the sibling 524 branches and 523.

• Ticket: TASK-20260925-07 has a DONE comment and the claim is released. Bus messages 20260925-154616-8E135F9C and correction 20260925-154633-9F0E5053 went to grok@rdmsm4x.

• Undo: delete the branch grok/524-layer12-verdict locally and on backup. Nothing was merged.

• Owner actions: none. The lead (not Rich) registers the 3 new sources in the Standard project and re-pins the trust chain, then merges.

• Side findings, reported on the bus:

  • ~/bin/ticket and ticket-mcp crash under /usr/bin/python3 3.9 when PATH lacks /opt/homebrew/bin.
  • The fleet-wd dispatch leaks AGENT_LLM and AGENT_SESSION into child sessions.

• Handback: ~/dev/_handoff/rtty-524-friendly-default/layer12-verdict-run-20260925/HANDBACK.md