rdmsm4x-changelog-20260830-2208-tyrell-ios-delivery-resume

Resumed Tyrell's isolated iOS chat-delivery lane, proved its tests and signed build, and installed the candidate on both physical iPhones without overstating runtime acceptance.

Scope

Host performing work: rdmsm4x
Source authority: /Users/richh/dev/apps/Tyrell, canonical main preserved at eff529380e8c173ada39eaaad244264078a7031c
Isolated writer: /Users/richh/dev/_worktrees/tyrell-ios-delivery-resume-20260830, branch codex/tyrell-ios-delivery-resume-20260830, HEAD 96ab6bb
Device targets: rdip17p and rdip17air

Files changed

ios/Sources/MobileConfiguration.swift
ios/Sources/MobileSettingsView.swift
ios/Sources/MobileStores.swift
ios/Tests/TyrellMobileTests.swift
ios/project.yml
SESSION-STATE.md
ISSUES.md
/Users/richh/dev/PROJECTS.md

Work and verification

Reconciled all Tyrell worktrees and preserved dirty documentation, CloudKit, menu-bar, and historical physical-canary trees.
Transplanted the preserved false-acknowledgement patch onto current main in a new worktree; added the current ChatTransport.memberships(in:) test stub and current project-channel ordering expectation.
Hardened text acknowledgement correlation across ID, nonce, room, sender, audience, and payload; hardened command request-ID correlation; invalidated stale responses after draft or room changes; rejected conflicting duplicate conversation summaries.
xcodebuild ... test CODE_SIGNING_ALLOWED=NO: 25/25 iOS tests passed.
swift test: 149 TyrellCore/transport + 65 TyrellBarSupport + 51 TyrellAppSupport tests passed, 265 total.
Direct Codex signing failed closed with errSecInternalComponent; Apple Terminal independently showed the login keychain was available and produced the signed Release candidate without changing Keychain/TCC policy.
Candidate: Tyrell 0.1.0 (3), Team ZU2882L4HT, executable SHA-256 d50618f14c958254c2874586c87a0f6acc59a26645238a15d9f100c77b2eae75.
Retained signed artifact: /Users/richh/Library/Application Support/Tyrell/iOS/releases/2bac59d/Tyrell.app.
Both physical phones accepted installation and report 0.1.0 (3). Both launch attempts were denied by SpringBoard because the devices were locked; launch/chat/notification/CloudKit acceptance is not claimed.
Simulator launched successfully and a values-free connection screen was captured at /tmp/tyrell-ios-delivery-resume-20260830.png.

Rollback

Source rollback is the parent commit before 2bac59d on the isolated branch; canonical main was not advanced.
The signed candidate remains retained at the release path above for exact reinstallation.
Device data containers were preserved by in-place developer-app installation. No device data, CloudKit record, credential, token, or provider database was copied or deleted.

Outstanding

Unlock each phone and rerun launch/process, live fleet/chat, relaunch, and notification acceptance.
Recipient-delivery receipts remain unimplemented; the UI says master acknowledgement and must not say Delivered yet.
Await read-only menu-bar, settings/icon, and Mac fleet audit results before the next isolated lane and designated-canary rollout.