rdmsm4x changelog — ecs0lib, AINetNode, and Tyrell release blocker

Accepted AINetNode's ProcessRunner migration at the source level, verified the portfolio now has no active-source ProcessRunner duplicates, and confirmed that the newly signed Tyrell bundle must remain undeployed because it contains a silently reverted PermissionHealth source file.

Scope

• Host: rdmsm4x
• Shared libraries observed read-only: /Users/richh/dev/lib/ecs0lib, /Users/richh/dev/lib/ECSCloudKit
• Apps observed read-only: /Users/richh/dev/apps/AINetNode, /Users/richh/dev/apps/Tyrell, and the filtered 52-root app inventory
• Ticket system observed read-only: relevant monitor/audit tickets plus the 46 reopened app-modernization records
• Local coordination state changed: one reply/ack and the monitor check-in
• No app, library, signing, deployment, credential, or ticket-lifecycle source was changed by this monitor

Coordination changes

• Replied to claude@rdmsm4x as message 20260901-185745-41005024, accepting AINetNode's source migration while preserving the distinction between source proof and its owner-supplied test count.
• Updated /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-ecs0lib-portfolio-monitor-20260901.json with current library, adoption, release-blocker, ticket, and remote evidence.

Commands run

• Fleet message-bus sync/read/reply/ack operations
• Git HEAD/status/log/show and remote-ref comparisons
• Portfolio manifest/import and active Sources declaration scans
• lipo -archs, SHA-256, strict codesign -v, and signature metadata reads on the installed and staged Tyrell bundles
• Git blob identity checks on Tyrell PermissionHealth.swift
• Ticket header inspection and direct status verification of the 46 exact files changed by issue-store commit 2d479b8
• JSON validation of the monitor check-in

Verification evidence

• ecs0lib advanced to clean commit fc80e52afb396612a7a0a589c1b67bd91f059787, a documentation-only update recording the completed ProcessRunner migrations. origin/main and fleet/main match it; backup/main remains at 89cba38.
• ECSCloudKit remains clean at 93b9f700e7b73c02881b0a00007cb6f813720a43.
• Portfolio counts remain 52 roots, 25 ecs0lib declarations / 22 importers, and 14 ECSCloudKit declarations / 1 importer. A source-only scan finds zero active ProcessRunner declarations.
• AINetNode d81030f6b582050379c29047897de8fe2ed8bb17 moves the 154-line local runner into archive/local-processrunner-superseded-20260901; current HEAD 471b9873af441e9d69470e97c20ab37673c23f25 retains ECS0System imports and is aligned with origin/main and fleet/main.
• The AINetNode commit records swift build rc 0 and 31 tests / 0 failures. This monitor did not rerun the suite in the owner's active worktree and was not given a retained log path, so that test receipt remains owner-supplied.
• Tyrell current HEAD is 5765dc7b256b785576992cef5edc5d48143d4210, but the working Sources/TyrellAppSupport/PermissionHealth.swift blob is still 8c72803a37f64dcb53a006fb90acb775d89d463c; HEAD expects 37f1c853967a77989510c3a9f9bd6baecdd9af4e.
• The staged Tyrell bundle is now strictly signed with Apple Development identity and team ZU2882L4HT, and its Tyrell and tyrellbar executables are universal2. It was nevertheless built from the stale source and must not deploy.
• /Applications/Tyrell.app remains dated 2026-08-29T04:43:26-0400, has a different main-binary hash, and has no tyrellbar; no deployment occurred.
• Issue-store commit 2d479b8 changed 46 exact open FEAT-20260831 modernization files. All 46 currently report status: open, independently confirming their reopen after the hermetic shared test artifact was rejected as app-level evidence.
• Four roots have no exact aligned standard remote ref: LogTTY, replicantDB, RTTy, and Tyrell.

Outstanding owner actions

• Do not deploy /Users/richh/dev/apps/Tyrell/.build/Tyrell.app until the Tyrell owner preserves/restores the reverted PermissionHealth working file, rebuilds, re-signs, and re-verifies the exact bundle.
• Retain the current /Applications/Tyrell.app until a replacement passes source identity, universal2, signature, per-host runtime, and rollback checks.
• Obtain a retained AINetNode test command/log before promoting the owner-supplied 31-test receipt to independently reproduced acceptance.
• Reconcile the four remaining remote gaps without overwriting dirty worktrees.
• EPIC EPIC-20260831-02 still uses the stale 45-app denominator, and the ECSCloudKit 14/1 gap remains open.

Undo

• Fleet-bus messages and this changelog are immutable audit evidence; correct them with a dated follow-up rather than deletion.
• The check-in is additive state. Correct any factual error in a later material-delta entry rather than rewriting historical entries.
• No app/library/deployment state was changed, so there is no source or runtime rollback for this monitor pass.