rdmsm4x changelog — Tyrell Build 11 ECS0Persistence audit

Read-only audit completed; produced the bounded Build 11 persistence handoff and resolved/released review ticket SEC-20260902-03.

Scope

• Host: rdmsm4x.
• Tyrell evidence: /Users/richh/dev/_worktrees/tyrell-build10-runtime-integrated-20260902 at a5b057e1ebf5a461740f9df4997bf8f9f9ee5dbf.
• Shared library evidence: /Users/richh/dev/lib/ecs0lib at 90c3c6ddd6377be6012617d1934a5fbce5c028aa.
• Exact handoff: /Users/richh/dev/_handoff/tyrell-build11-persistence-next-slice-20260902.md.

Commands and evidence

• Read coordination policy, fleet inventory, unread mailbox, project index, ticket state, pinned worktree state, and shared-library state.
• Inspected Tyrell SQLiteStateStore.swift, SQLiteStateStore+Chat.swift, TyrellSQLite.swift, Package.swift, tests, and prior shared-runtime handoff.
• Inspected released ECS0Persistence APIs and ECS0DatabaseMigrator read-only.
• Opened/claimed SEC-20260902-03, appended completion evidence, resolved it, and forced release because the CLI reported a shell session identity different from the recorded claim holder; the forced release is recorded in ticket history.
• No source/worktree edits, branch creation, service/network/CloudKit activity, signing, deployment, or live database access.

Verification and rollback

• Pinned Tyrell worktree remained clean.
• Handoff SHA-256: 9dfede36204dc9625d8d9285a42fb26e4fd6ec04210d23dea315c19478b273c4.
• This audit's only deliverable is the handoff; remove/revert the handoff and this changelog if the review record must be withdrawn. No production data or source rollback is needed.

Outstanding owner action

The ecs0lib owner must publish or explicitly accept a clean synchronous pooled adapter preserving Tyrell's WAL, busy-timeout, serialized-writer, concurrent-reader, transaction, migration, failure, and privacy invariants before the proposed SQLiteStateStore boundary replacement can begin. Direct actor/async ECS0Database adoption remains deferred.