Built and independently verified a production-safe, fixture-only replicantDB UI approval target plus the Tyrell-aligned distributed command/worker/consolidation architecture; work is isolated and awaiting owner approval/integration.

rdmsm4x changelog — replicantDB UI target and distributed architecture

Scope and lifecycle

• Host: rdmsm4x only.
• Canonical product root: /Users/richh/dev/apps/replicantDB at unchanged main base ad099ae58a0b91c9bea18296294cf76a8bf730f8.
• Isolated worktree: /Users/richh/dev/_handoff/codex-out/replicantdb-ui-target-20260828.
• Branch: codex/replicantdb-ui-target-20260828.
• Final head: a988f9b6c7f440fb891622af5aa26649f5386682.
• Lifecycle: implemented, committed, browser-verified, independently reviewed, and architecture-documented in the isolated branch; not integrated to canonical main, not pushed, not deployed, not published, and not connected to runtime data.
• No live replicantDB SQLite database was opened or queried. No scan, OCR pass, model download, classification pass, Finder tag, deduplication, move, transfer, daemon/listener registration, fleet deployment, or publication ran.

Commits

• acc66f485106cc7cac0a18b208763859f758f7b1 — initial UI target, concept, screenshots, fidelity ledger, design specification, plan, and continuity updates.
• 2b9a780cefac418ce679b27f4ad95bbecce178ca — correct Duplicates projection routing/state controls.
• e9d946fbb62af15363b122beb3ea854a8c43a595 — resolve all five independent UI review findings and recapture approval frames.
• a988f9b6c7f440fb891622af5aa26649f5386682 — accept the Tyrell-aligned distributed control, worker, local-AI, and consolidation architecture into the isolated branch; Markdown normalized before final handoff.

Product files changed in the isolated branch

• ISSUES.md
• SESSION-STATE.md
• docs/architecture/2026-08-28-distributed-control-and-consolidation.md
• docs/mockups/replicantdb-ui-target/index.html
• docs/mockups/replicantdb-ui-target/README.md
• docs/mockups/replicantdb-ui-target/FIDELITY.md
• docs/mockups/replicantdb-ui-target/concepts/01-observatory-concept.png
• docs/mockups/replicantdb-ui-target/screenshots/01-observatory-signal-night.png
• docs/mockups/replicantdb-ui-target/screenshots/02-graph-archive-amber.png
• docs/mockups/replicantdb-ui-target/screenshots/03-library-paper-index.png
• docs/superpowers/specs/2026-08-28-replicantdb-ui-target-design.md
• docs/superpowers/plans/2026-08-28-replicantdb-ui-target.md

Supporting state and records changed

• /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md — one-line replicantDB milestone updated with UI review and distributed architecture decisions.
• /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-replicantdb-ui-target-20260828.json — final branch/head, verification, artifact, Tyrell coordination, and lifecycle state recorded; ownership released pending owner approval/integration.
• This changelog file and the corresponding Apple Notes entry.

Approval target delivered

• Dependency-free HTML/CSS/SVG/JavaScript Observatory with persistent navigation and inspector.
• Signal Night and Paper Index themes plus Signal, Archive Amber, and Violet accents.
• Tyrell-family heatmap, Liquid Glass surfaces, translucent Airtable-style evidence chips, honest fixture states, semantic graph, file table, facets, Review/Sources/Privacy routes, and explicit no-live-corpus boundary.
• Orbit/Flow/Cluster graph layouts, Purpose/Type/State coloring, all nine node-specific neighborhoods, graph-to-Library scope preservation, Zoom/Fit controls, Favorite state, and fictional-only path reveal.
• Three 1600×1000 approval screenshots and one generated concept with a concept-to-implementation fidelity ledger.
• 800×800 collapsed-layout QA retained the navigation, center canvas, and inspector on-canvas.

Architecture decision accepted in the isolated branch

• replicantDB owns a typed command engine behind app, CLI, MCP, App Intents, future API, and optional Tyrell/chat adapters.
• Node roles are capability-based: client, coordinator, source/index node, OCR/local-AI worker, verifier, and designated-folder server.
• replicantDB owns signed domain commands/jobs, ConsolidationManifest, policy, approval, journal, provenance, validation, target semantics, index integration, orchestration, and source-retirement decisions.
• A reusable Tyrell-derived or neutral adapter owns mechanical TransferManifest negotiation, staged offsets, chunks, resume, staging, full-hash verification, and pin/retention receipts where feasible. This preserves the existing decision not to build a second incompatible transfer engine.
• Raw content stays local by default. Remote bytes/pixels/OCR text require explicit encrypted and bounded transit authority.
• macOS 26.7 and Intel retain deterministic/Vision/Core ML fallbacks; macOS 27 Core AI/provider APIs and MLX are optional, availability-gated Apple-silicon accelerators.
• Consolidation separates plan, stage, verify, commit, index integration, retention, and separately approved recoverable source cleanup.

Tyrell coordination evidence

• Fleet request 20260828-121635-18B3C38C: dispatched with local mailbox delivery; acknowledgement remains pending.
• Tyrell reuse artifact: received for review as committed documentation at 4a30a6381a237e653487d38d8686e77c9414604a in /Users/richh/dev/_worktrees/tyrell-replicantdb-reuse.
• Core domain/transport boundary: accepted into the replicantDB architecture record only.
• Tyrell lane completion/ownership release, replicantDB owner acceptance, canonical integration, implementation, and deployment are not claimed.
• Cross-project architecture handoff SHA-256: 841148f7a7ad8092f789840ffb0d8328ab0f52dd02e41b35f1690aaabdcd076b.
• Coordination log SHA-256: be12635efa6818a372b3f08d76868b5c872fbba1543a222ade729e9237a4262c.

Commands and checks run

• Read-only repository, branch/worktree, coordination, Tyrell, and reference-source inspection.
• swift test
• ./build.sh
• Browser interaction and screenshot capture against a server bound to 127.0.0.1:8770 and serving only the mockup directory.
• Embedded-script compilation with Node.
• git diff --check
• gitleaks detect --no-git over mockup and architecture artifacts.
• shasum -a 256 and sips for concept/screenshot dimensions and hashes.
• JSON validation of the completed coordination check-in.
• /Users/richh/dev/fleet/maintenance/scripts/fleet_checkin_sync.zsh.

Verification evidence

• swift test: 338 tests passed, 0 failures at 2026-08-28 12:23 EDT.
• ./build.sh: exit 0 at 2026-08-28 12:24 EDT; app, CLI, MCP, icon, 29 App Intent references, and development signing completed. The existing macOS 27/x86_64 deployment warning remains. Build-generated tracked binary deltas were restored.
• Embedded JavaScript syntax: pass.
• git diff --check: pass.
• Textual secret scans: no leaks found.
• All nine graph node identities, inspector data, and table row counts: pass.
• Graph-to-Library Documents scope: four expected fictional rows.
• Zoom In changed the SVG view box; Fit restored it; Favorite changed glyph/pressed state.
• Aggregate Privacy disabled reveal and stated no aggregate path; selected-file Privacy revealed only a fictional fixture path.
• Independent follow-up review at e9d946f: Pass with no remaining Critical, Important, or Minor issue among the five reviewed findings.
• Reviewer report: /Users/richh/dev/_handoff/codex-out/replicantdb-ui-sprint/final-review-resolution.md, SHA-256 83c0af40f84fc1f33438bbba5603d601b9096268b26080bee34c9eeb6b6e94dc.
• Screenshot hashes match FIDELITY.md:
  • Observatory 843f82979876630463755212a5cb310547635a8bc8626436f3c6eaa3a24e9d55
  • Graph c036c0d8a5354d14385cc8e4da07bfb12d4cc1dfdd1fbd187c48607ee995f08c
  • Library 31bbe1e7c5940611fba958946454db285b8ac5197b2bd4cb888e26c42548aa39
  • Concept 5865cb11c6e322e00aa4f879f9e9b2effad766eeba29b2361e187cbe7e1856ac
• Final worktree head a988f9b6c7f440fb891622af5aa26649f5386682; worktree clean.

Backups and rollback

• No live data backup was required because the live database/runtime was never opened or changed.
• Git history is the rollback record. Revert in reverse order with git revert a988f9b e9d946f 2b9a780 acc66f4 in the isolated branch if the entire target is rejected, or revert only the relevant commit.
• Canonical main remains unchanged at the recorded base; removing the isolated worktree is safe only after Rich explicitly rejects the work or after accepted commits are integrated elsewhere.
• The local preview is loopback-only and may be stopped by ending the task-owned python3 -m http.server 8770 --bind 127.0.0.1 session. No external listener or service registration exists.
• Restore PROJECTS.md and the completed check-in from their prior Git/iCloud history only if the milestone itself is superseded; do not delete provenance while review is pending.

Outstanding owner decisions and actions

• Approve Observatory vs Library as launch route; Library vs Files naming; first native graph mode; and theme names.
• Choose first coordinator/failover scope, content-transit default, consolidation fixture, collision/metadata/retention policy, first worker capability, and shared-contract ownership.
• Decide whether/when to integrate the isolated branch. No push, deployment, publication, listener, model installation, or real-file operation was performed.
• Tyrell fleet-message acknowledgement and lane ownership release remain pending and must not be inferred from the committed peer artifact.