rdmsm4x-changelog-20260902-1536-ecs0lib-build10-shared-runtime-candidate

ecs0lib Build 10 shared-runtime candidate

Combined and verified Tyrell's next shared privacy-logging and authenticated-HTTP prerequisites in an isolated ecs0lib worktree, so shared adoption can proceed without touching the dirty canonical library or the live Tyrell fleet.

Scope

Host: rdmsm4x
Worktree: /Users/richh/dev/_worktrees/ecs0lib-build10-shared-runtime-20260902
Branch: codex/ecs0-build10-shared-runtime-20260902
Final checkpoint: f2c10145e7a98f4b869f82d91bc09022e50a6936
Ticket: FEAT-20260902-06
No canonical ecs0lib, Tyrell source, application, daemon, provider route, credential, CloudKit record, or fleet host was changed.

Files changed

Sources/ECS0System/ECSUnifiedLogging.swift
Sources/ECS0Networking/ECS0HTTPClient.swift
Tests/ECS0LibTests/ECSPrivacyLoggingTests.swift
Tests/ECS0LibTests/ECS0HTTPClientTests.swift
SESSION-STATE.md

Verification

git diff --check: pass.
Focused privacy logging tests: 7/7 pass.
Focused HTTP client tests: 12/12 pass.
Full Thread Sanitizer suite: exit 0; 203 XCTest + 11 Swift Testing = 214 total, zero failures and no race report.
Raw log: /Users/richh/dev/_handoff/ecs0lib-build10-combined-tsan-20260902-rerun.log
Raw log SHA-256: e540c242b4113fccce41da5993faa665b2be5a8011fc08dd843de67dd435e557
Release builds for ECS0System and ECS0Networking: pass.

Why it matters

Private logging segments are redacted before retention, encoding, sinks, and OSLog.
The shared HTTP client provides injected transport, explicit timeout/cancellation/status behavior, sanitized credential handling, and exact endpoint policy.
Tyrell can later remove local duplicates one bounded consumer at a time after the shared owner accepts a canonical revision.

Rollback

No runtime state changed. Before canonical integration, discard only this isolated branch/worktree.
Do not delete or overwrite the canonical ecs0lib checkout or its unrelated dirty/untracked files.

Outstanding owner action

The ecs0lib owner must review and integrate the isolated candidate into a clean canonical revision.
Tyrell then pins that accepted revision and migrates PowerGovernanceActor logging before the read-only fleet-usage HTTP fetch, with behavior-equivalence tests for each step.