XEntropy Tyrell-light fleet rollout

Implemented and deployed the feature-rich Tyrell-light XEntropy workbench so the five reachable Macs open the new operational UI while preserving the existing catalog, owner-value authority, CLI/API/MCP behavior, and rollback history.

Scope

• Controller/source/signing host: rdmsm4x.
• Installed/runtime-verified: rdmsm4x, rdmbair15m5, rdmpw3275m, jdmbair13m5, rdmpw3265m.
• Unavailable and not changed: rdmbair13m5.
• Source root: /Users/richh/dev/apps/Xentropy.
• Installed source commit: 6b3261827a064c1389114176b4c1e264992c8636.
• Installed app tree: f5b94eb9f57d2dbb947ecb43124acd374481eb5e.

Product changes

• Preserved Classic and implemented selectable Tyrell Light and Owner Access modern variants.
• Added grouped navigation, local command search, capability badges, and evidence footer.
• Added live Operational Observatory and dedicated Lifecycle Control Room.
• Refined Credential Registry, Discovery & Source Coverage, and Command Explorer toward the approved mockups.
• Replaced misleading editable Access Profile placeholders with the exact read-only compiled caller/scopes view.
• Preserved complete owner-local API-key display/copy behavior; no value was written into this changelog, Notes, Git, screenshots, or validation output.
• Preserved all five synthetic target mockups under docs/design/mockups/tyrell-light/.
• Replaced the blocking bundle-plist heredoc in script/build_and_run.sh with deterministic plutil construction.

Files changed

• /Users/richh/dev/apps/Xentropy/README.md
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/APIKeyTableView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/AccessProfilesView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/CommandExplorerView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/LifecycleControlRoomView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/OverviewView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/RootSplitView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/SourcesView.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/UIConfiguration.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/WorkspaceViewModel.swift
• /Users/richh/dev/apps/Xentropy/app/Sources/XEntropy/XEntropyApp.swift
• /Users/richh/dev/apps/Xentropy/app/Tests/XEntropyTests/UITemplateTests.swift
• /Users/richh/dev/apps/Xentropy/docs/architecture/owner-access-and-ui-templates.md
• /Users/richh/dev/apps/Xentropy/docs/design/tyrell-light-ui-templates.md
• /Users/richh/dev/apps/Xentropy/docs/design/mockups/tyrell-light/
• /Users/richh/dev/apps/Xentropy/script/build_and_run.sh
• /Users/richh/dev/apps/Xentropy/SESSION-STATE.md
• /Users/richh/dev/apps/Xentropy/ISSUES.md
• /Users/richh/dev/apps/Xentropy/docs/reviews/2026-08-29-tyrell-light-fleet-rollout.md

Commands and verification

• swift test --package-path app: 234 XCTest cases passed (48 app/UI, 19 gateway, 131 core, 36 CLI/transport).
• swift build --package-path app --product XEntropy: passed.
• swift build --package-path app --product xentropyctl: passed.
• ./script/build_and_run.sh --verify: passed.
• git diff --check: passed.
• Safe visual inspection passed for Observatory, Lifecycle, Command Explorer, Discovery & Source Coverage, and Access Profiles.
• zsh scripts/install_xentropy_local_instance_v1.0.zsh --all installed locally and identified four existing remote app runtimes plus one unavailable host.
• The four exact prior remote XEntropy processes were stopped with TERM, then the installer passed on all four.
• Each passing host saved xentropy.uiTemplate=tyrell-light, restarted XEntropy, passed strict signature verification, exposed an executable CLI, returned catalog projection xentropy.catalog.v2, and had a running app process.
• No provider API, credential import, credential rotation, public listener, or cross-host authority transfer ran.

Rollback

• rdmsm4x: ~/Library/Application Support/XEntropy/DeploymentRollback/20260829-061921-6b3261827a064c1389114176b4c1e264992c8636
• rdmbair15m5: ~/Library/Application Support/XEntropy/DeploymentRollback/20260829-062047-6b3261827a064c1389114176b4c1e264992c8636
• rdmpw3275m: ~/Library/Application Support/XEntropy/DeploymentRollback/20260829-062215-6b3261827a064c1389114176b4c1e264992c8636
• jdmbair13m5: ~/Library/Application Support/XEntropy/DeploymentRollback/20260829-062251-6b3261827a064c1389114176b4c1e264992c8636
• rdmpw3265m: ~/Library/Application Support/XEntropy/DeploymentRollback/20260829-062409-6b3261827a064c1389114176b4c1e264992c8636

To undo on a host: stop only that host's per-user XEntropy app, move the new app/CLI aside, restore XEntropy.app and xentropyctl from the listed rollback directory, restore the previous non-secret UI template preference if desired, and relaunch. Catalog and authority data were not replaced by this rollout.

Outstanding owner/peer actions

• Retry rdmbair13m5 after its pinned Tailscale SSH host-key endpoint becomes reachable.
• Claude coordination message 20260829-061626-1C55E83C is dispatched; receipt remains pending.
• Remote Apple Notes changelog projections remain pending because SSH sessions cannot use Aqua AppleEvents; their Markdown changelogs were written locally on each host.
• Provider create/rotate/revoke execution remains an owner-attended canary and was not performed.