Tyrell Build 13 release rereview v3

Completed an independent read-only release gate against the explicitly frozen Build 13 dirty diff and found one remaining fail-open TyrellBar acceptance defect, so the result is NO-GO.

• Scope: local rdmsm4x review only; no remote hosts, app runtime, signing identity, or deployment changed.
• Source reviewed: /Users/richh/dev/_worktrees/tyrell-build18-chat-catalog-20260902 at base HEAD 42277bcf045b3e9d6b93ac2ab98355db08c89d56, dirty diff SHA-256 2af2b8b3d73becfccda78c3dfaa3b58a14f94e201aeec2d9c62a353bad88d78f.
• File added: /Users/richh/dev/_handoff/tyrell-build13-release-rereview-v3-20260903.md (SHA-256 574caea58b6bf92d735167ae3d1154ba8480a8ad7b103ce93753c6bb6594e3bd).
• Project files touched by reviewer: none.
• Validation: six release scripts passed zsh -n; all eight script contracts passed; git diff --check passed; supplied 669/669 Swift log hash verified as f8a21b5ae0519bc370931efca21c7d182c9477bf6a64ae5c2104e0e39d46f6ce.
• Finding: the final TyrellBar success path validates one exact-path process and the expected launchd program, but does not require the launchd PID to own that process. It can falsely report success for an orphan/manual helper. Standalone runtime/designated-requirement checks and executable outer rollback fault coverage are also documented as P2 gaps.
• Undo: remove only the added handoff report and this changelog file. No source or runtime rollback is required.
• Outstanding owner action: bind final helper process PID to the loaded LaunchAgent PID, add absent/mismatched PID fault cases, and request another independent release review before canary.
• Apple Notes: pending because this reviewer runs under the Background launchd manager and cannot safely send GUI AppleEvents.