Tyrell Build 13 release review

Completed a read-only release-gate review of the uncommitted Build 13 nested menu-bar helper change and found three release blockers before promotion.

• Host: rdmsm4x
• Scope: local source inspection only; no installed app, process, LaunchAgent, TCC state, database, or fleet host was changed.
• Project worktree inspected: /Users/richh/dev/_worktrees/tyrell-build18-chat-catalog-20260902
• HEAD: 42277bcf045b3e9d6b93ac2ab98355db08c89d56
• Diff SHA-256: 78235353bb786e3f979049be52d250f07c76337666f76fdbe24bdb936adb5b49
• Report written: /Users/richh/dev/_handoff/tyrell-build13-release-review-20260903.md
• Report SHA-256: 639ba14adab58834e6bf808ac35275a4f03ed95aa6b83d2faca7cfa8d7dc43c1
• Verification: script syntax passed; four focused static/transaction contract scripts passed.
• Findings: NO-GO because the distinct helper ID splits UserDefaults.standard from the main Settings UI; the current transaction would retain rejected Build 12 and delete accepted Build 11/8 rollback evidence; and orphaned raw Build 12 bar processes are not preflighted before app mutation. Additional P2 findings cover helper-local-network metadata, suppressed recovery truth, and runtime test gaps.
• Backup/rollback: not applicable; only two new Markdown evidence files were written.
• Undo: archive or remove the two evidence Markdown files only if the release owner explicitly rejects the review. No project rollback is required.
• Outstanding owner action: fix the three P1 blockers, rerun signed local acceptance, then use rdmbair15m5 as the designated canary before fleet rollout or old-copy archival.