rdmsm4x-changelog-20260830-1656-mcp-fleet-disable

Disabled Stitch across the owner-approved agent surfaces on the canonical fleet host without uninstalling it, and retained a complete host-local rollback.

Scope

• Host: rdmsm4x; fleet rollout covered all six Macs.
• Mode: Production; applied only after the rdmbair15m5 canary passed.

Files changed on this host

• /Users/richh/.codex/config.toml — retained Stitch and set enabled=false.
• /Users/richh/.claude.json — retained Stitch and added it to every recorded project's disabled-server list.
• /Users/richh/Library/Application Support/Claude/claude_desktop_config.json — moved Stitch intact into the disabled registry.
• /Users/richh/.gemini/config/mcp_config.json — retained Stitch and set disabled=true.
• /Users/richh/scripts/apply_mcp_disable_v1.0.py — installed the exact rollback transformer, mode 700.
• /Users/richh/dev/fleet/maintenance/scripts/apply_mcp_disable_v1.0.py — canonical transformer, SHA-256 1b019bd2cce7cc517dd02a9eb32ef37998937da3e974598599c7d4e249876837.
• /Users/richh/Library/Mobile Documents/com~apple~CloudDocs/Codex/projects/AGENTS.md principles/PROJECTS.md — recorded the verified fleet milestone.

No provider-bundled runtime, Tyrell, replicantDB, Mem0, apple-mlx, ticket-mcp, plugin, skill, package, credential, OAuth state, native history, or security principal was removed, copied, or disabled.

Commands and verification

• Ran the checksum-pinned transformer with --apply --stamp 20260830-1648 --expected-host rdmsm4x through an authenticated SSH session.
• Native Codex, Claude, and agy listings each reproduce Stitch as disabled.
• Claude Desktop has no active Stitch entry and retains its exact registration under disabledMcpServers.
• Preserved MCP checks report no regression; every backup checksum matches; the idempotence rerun reports changed_files=0.

Backup and undo

• Backup and manifest: /Users/richh/Library/Application Support/MCPFleetDisable/backups/20260830-1648/.
• Undo: /usr/bin/python3 /Users/richh/scripts/apply_mcp_disable_v1.0.py --rollback "/Users/richh/Library/Application Support/MCPFleetDisable/backups/20260830-1648/manifest.json" --expected-host rdmsm4x.

Outstanding

• Apple Notes publication is pending because this host was changed through SSH, not an Aqua desktop session.
• Already-open Claude Desktop sessions may retain their prior in-memory registry until their normal next restart.
• Uninstall or cache/auth cleanup is outside this approved disable-only phase.