ecs0lib canonical branch integration

Integrated and verified the global app capability/versioning work in an isolated canonical-host ecs0lib branch so the release owner can review it without changing dirty main or any app.

Scope

• Changed host: rdmsm4x.
• Canonical repository: /Users/richh/dev/lib/ecs0lib.
• Isolated worktree: /Users/richh/dev/_worktrees/ecs0lib-codex-global-app-v1.1.
• Branch: codex/global-app-capabilities-v1.1-20260830.
• Canonical main, app repositories, installed apps, signing state, profile deployment, publication, release tags, and remotes were not changed.

Exact state created

• Commit de117a60a46d3337f21bb1d3c5bdd6946bb8892b: global settings, icon, lifecycle, permission-evidence, profile, and Liquid Glass capability patch.
• Commit 32923c289e493d5bd0e3f68935f6e53640ba9dc9: versioning, dependency/capability manifests, appearance configuration, schemas, and documentation source.
• Final tree: 74d2698996a3835235b1b415dfa8673fa64b585d, exactly matching the reviewed isolated tree.
• Handoff patches: /Users/richh/dev/_handoff/ecs0lib-global-app-v1.1-20260830/.
• Check-in: /Users/richh/.agent-coordination/checkins/codex-rdmbair15m5-ecs0lib-canonical-integration-20260830.json.

Commands and verification

• git worktree add -b codex/global-app-capabilities-v1.1-20260830 /Users/richh/dev/_worktrees/ecs0lib-codex-global-app-v1.1 e0ff5101...
• Applied both reviewed format patches with git am --3way after rechecking SHA-256 values.
• swift test --sanitize=thread --scratch-path /tmp/ecs0lib-canonical-tsan.A8UpgC: 123 tests, zero failures, no reported data race.
• One pre-existing compiler warning remains: malformedData can be let in Tier2_BoundaryCornerCasesTests.swift; explicitly accepted without changing the reviewed tree.
• swift build -c release --scratch-path /tmp/ecs0lib-canonical-release.T4IInz: passed.
• git diff --check, JSON parsing, Swift package description, tree identity, and clean-worktree checks passed.
• Ticket evidence appended to FEAT-20260830-41, FEAT-20260830-42, and SEC-20260830-03.

Preserved state and backup

• Original checkout remains at e0ff5101dce072a50cf18f9b107ed37611207ca2 on main.
• Its pre-existing modified files under dist/web/ and docs/index.html were not staged, overwritten, reset, cleaned, or copied into this branch.
• Original patch files and hashes remain in the handoff directory and the originating Codex output folder.

Undo

No main rollback is required. If the release owner rejects or supersedes this work, retain the patches and receipt, then remove only the dedicated worktree and local branch after the decision is recorded. No remote branch exists and no push or tag occurred.

Outstanding owner actions

• Review API/module boundaries and decide whether to accept the branch.
• Decide the actual release version; proposed 1.1.0/active metadata is not a release receipt.
• Reconcile dirty documentation before merge or publication.
• Accept one app retrofit lane at a time; current first source-only candidates are updateRoo and AINetNode.
• Complete architecture, signing, identity, entitlements, signed-app, canary, publication, and fleet verification gates separately.
• Apple Notes entry for the rdmsm4x host is pending because this change was executed through SSH without an Aqua session. Run zsh ~/scripts/notes_changelog.zsh on this file from Terminal.app on the rdmsm4x desktop.