rdmsm4x-changelog-20260902-1817-tyrell-build11-fleet-rollout

Tyrell 0.2.0 (11) replaced Build 8 as the accepted Mac app release after full source validation, signed artifact verification, designated-canary acceptance, and exact six-host rollout proof.

Scope

• Source/signing host: rdmsm4x
• Designated canary: rdmbair15m5
• Fleet app targets: rdmsm4x, rdmbair15m5, rdmbair13m5, rdmpw3265m, rdmpw3275m, jdmbair13m5
• Installed target: /Applications/Tyrell.app
• Existing tyrelld services were not replaced.
• No iOS physical-device install, production CloudKit write, APNs credential, provider database, prompt, response, memory body, or secret value was used.

Source and files changed

• Isolated worktree: /Users/richh/dev/_worktrees/tyrell-build11-combined-20260902
• Branch: codex/tyrell-build11-combined-20260902
• Final documented HEAD: 084e01c931286465a087565b5e27f3385b5ebc40
• App artifact source: c7a9eb5c1895ed84204919ed4950a70e5ca63e00
• Deployment transport fix: ad1364f8bded57b0345f65b1b57b1240e440ab48
• Source/test changes include Build 11 version identity, early headless launch dispatch, normal-GUI single-instance guard, iOS node-health presentation, single-source bundle identity tests, lifecycle tests, and deployment staging pinned to remote /usr/bin/rsync.
• Continuity updated: SESSION-STATE.md, ISSUES.md.
• Handoff: /Users/richh/dev/_handoff/tyrell-build11-combined-release-rollout-20260902.md (21149b9057218df741c70fcc9125f0f6b9c2a820d3af65113371b5303797b576).

Validation evidence

• Package tests: 624/624, zero failures.
• iOS simulator tests: 34/34, zero failures; simulator shut down.
• Release cloud projection: passed.
• Universal and thinned arm64/x86_64 headless lifecycle matrices: passed.
• Signed universal app executable SHA-256: a2eecac9759f115b8137c1d7246c06db53f62e86a8441064ca8c445d91293fd9.
• Canonical arm64 CodeDirectory hash: acded1ef4f2e58a67dac722dfafa2e0745576987f6013794a97d74e0b5f7a9d0.
• Bundle ID / Team ID: com.eastcoastscience.Tyrell / ZU2882L4HT.
• Canary nonce: tyrell-b11-c7a9eb5-20260902-180429.
• Canary passed foreground app, decoded current fleet usage, and authenticated chat send/page/command; receipt SHA-256: 213b63b3eb531b2c7fe9214a9954ca0bff0137a65230530812e85b4ad3ddf11b.
• Final audit observed version 0.2.0, build 11, exact hash, strict signature, universal architecture and exactly one GUI process on every host. Audit log SHA-256: 17950c7bbf56da6ad8422520a56415e8e593ef361c408d2e5878c658755b581b.
• Ticket FEAT-20260902-14 was resolved with the exact evidence above.

Deployment incident and remediation

The first broad pass installed rdmbair13m5, jdmbair13m5, and rdmpw3265m, while correctly leaving rdmpw3275m unchanged because its PATH-selected Homebrew rsync could not load an OpenSSL library. The deployer now explicitly selects macOS /usr/bin/rsync on the remote host. Its focused contract and lifecycle tests passed, then only rdmpw3275m was retried.

Rollback

• rdmsm4x: /Applications/.tyrell-rollbacks/20260902-181157-8f4dcff09284/Tyrell.app
• rdmbair15m5: /Applications/.tyrell-rollbacks/20260902-180515-8f4dcff09284/Tyrell.app
• rdmbair13m5: /Applications/.tyrell-rollbacks/20260902-180722-8f4dcff09284/Tyrell.app
• rdmpw3265m: /Applications/.tyrell-rollbacks/20260902-180813-8f4dcff09284/Tyrell.app
• rdmpw3275m: /Applications/.tyrell-rollbacks/20260902-181059-8f4dcff09284/Tyrell.app
• jdmbair13m5: /Applications/.tyrell-rollbacks/20260902-180731-8f4dcff09284/Tyrell.app

Restore only through Tyrell's verified lifecycle installer; do not launch a rollback bundle in place.

Outstanding owner actions

• Build 12's source-only iOS attention notification slice remains separate and needs review plus an authorized signed iOS test host/device before actual notification display can be claimed.
• Shared persistence adoption remains deferred until an accepted adapter preserves Tyrell's transaction, migration, WAL, concurrency, and privacy behavior.
• The guarded shared HTTP repair remains owner-acceptance pending; the released fallback stays active.