rdmsm4x changelog — portfolio Git promotion and signature verification

Verified that all 52 primary app roots are now Git-backed, corrected a new declaration-only rooDB adoption claim, and blocked acceptance of canonical replicantDB and Voight artifacts whose signatures do not meet the reported/stable identity boundary.

Scope

• Host: rdmsm4x
• Read-only repository/app inspection under /Users/richh/dev/apps and /Users/richh/dev/lib
• Coordination change: replied to the portfolio rebuild lead and updated the metadata-only monitor check-in
• No app, library, ticket content, signature, deployment, remote, credential, or runtime was changed by this monitor

Coordination changes

• Replied to portfolio program message 20260901-194928-1B119A47 as 20260901-200636-AA632E42 with current Tyrell ownership/release state, the 52-root denominator, the excluded Xentropy reconciliation root, declaration-versus-import evidence, dirty-tree corrections, and exact signature failures.
• Updated /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-ecs0lib-portfolio-monitor-20260901.json.

Commands run

• Fleet message-bus sync/read/reply/ack operations
• Git HEAD/status/log/show and fleet/main/backup/main/origin/main comparisons
• Portfolio manifest declaration, source import, active ProcessRunner, and Git-root scans
• lipo -archs, SHA-256, strict codesign -v, and signature metadata reads on Tyrell, replicantDB, and Voight artifacts
• Ticket search/claim inspection for Tyrell release-adjacent work and the active portfolio program

Verification evidence

• ecs0lib is clean at 90c3c6ddd6377be6012617d1934a5fbce5c028aa; the new commit only adds SESSION-STATE.md. ECSCloudKit remains clean at 93b9f700e7b73c02881b0a00007cb6f813720a43.
• All 52 primary filtered app roots are now Git-backed. Seven formerly non-Git roots are clean and aligned with fleet/main and backup/main: cvedb 47a657b, apple-framework-canvas a906f72, FleetContainers c686aff, icloudtoolkit b86bd3e, onlyroute 77ba73b, rdDB b0cae3e, and RDnamed 29b5ba5.
• Xentropy-additive-reconciliation-v2 is still an excluded duplicate/reconciliation root and is not an additional primary app.
• Adoption now measures 26 ecs0lib declarations / 22 importers and 15 ECSCloudKit declarations / 1 importer. The count increase is entirely rooDB af9cba9, which declares multiple products but has zero ECS module imports. This is linkage only.
• Active ProcessRunner duplicates remain zero.
• Tyrell HEAD remains 5765dc7b256b785576992cef5edc5d48143d4210. PermissionHealth.swift is restored: working and HEAD blobs both equal 37f1c853967a77989510c3a9f9bd6baecdd9af4e. The staged bundle was rebuilt at 2026-09-01T20:04:08-0400 and passes strict signature verification. /Applications/Tyrell.app remains the August 29 build without tyrellbar, so deployment is still unaccepted.
• replicantDB HEAD fb5d6f3b0e757c69735683be98276c824656f900 matches fleet and backup refs. Its app, CLI, and MCP are universal2, but each reports Signature=adhoc and TeamIdentifier=not set. Canonical hashes: app 2f17e923d7999354ab7f9748a45e99730ad925b20cb5254b3e99c937f8c20c4a, CLI 2c12a9024f4d0975e4eca59561c4e69cae05025317e76bfc681ec50d394367fd, MCP cdd39d94d960501b680e7c563c5c02d7cee0927bbcd1da7b4a820640c9511e8d. The tree also retains untracked Support/ and four dist-snapshot paths. The reported 1,079-test result has no retained log path and was not independently rerun.
• Voight HEAD d3460825788d3dd7e2fec4f87864cc818da98fa4 matches fleet and backup refs. Its canonical app/CLI are universal2 with SHA-256 0bbaff64c4e662af2b914e58c6647b2dead5b91a8f7358377462225240902d6b, but both fail strict signature verification and report Signature=adhoc, TeamIdentifier=not set; dist/ is untracked. The stable-signed canonical-artifact claim is not accepted.
• TASK-20260901-11 is the active portfolio rebuild claim held by claude@rdmbair15m5.

Outstanding owner actions

• The portfolio program must demonstrate actual ECS API call sites and app-specific tests; adding package/product declarations alone must not close the reopened modernization tickets.
• The Tyrell owner must provide a clean build receipt and per-host runtime/deployment evidence before the staged bundle is released.
• replicantDB and Voight owners must produce stable Apple Development signatures with a TeamIdentifier, verify exact artifact hashes, and preserve a retained test log before deployment acceptance.
• Keep dirty/untracked canonical content owner-gated; remote-ref alignment does not make the working tree clean.
• Do not promote Xentropy-additive-reconciliation-v2 as a distinct canonical app without an explicit ownership/product-boundary decision.

Undo

• This monitor changed only coordination records. Correct a message with an immutable follow-up and correct the check-in with another dated material-delta entry.
• No source, remote, signing, deployment, or runtime state was changed, so there is no app rollback for this pass.