rdmsm4x-changelog-20260903-2046-tyrell-app-universal-release-and-canary-rollout

Summary: Built and signed universal2 release bundle for Tyrell.app, executed canary preflight and in-app probe on designated canary host rdmbair15m5, issued cryptographically verified Schema 3 canary receipt, deployed to rdmbair15m5 via redeploy_app_fleet.zsh --execute-canary, verified post-deployment live health across all canary gates, and confirmed readiness for fleet promotion.

Scope

• Primary build host: rdmsm4x (canonical workspace /Users/richh/dev/apps/Tyrell).
• Designated canary host: rdmbair15m5 (TYRELL_APP_CANARY).
• Target fleet nodes: rdmsm4x, rdmbair15m5, rdmbair13m5, jdmbair13m5, rdmpw3265m, rdmpw3275m.

Artifact & Cryptographic Identity

• Candidate Mach-O Executable SHA-256: 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f
• Candidate arm64 CodeDirectory CDHash: 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172
• Designated Requirement Hash (SHA-256): 7467a4ae84b198c35fa624c55939276f7ad2989f7dab4e102a71af6f2d7e33dc
  • DR: identifier "com.eastcoastscience.Tyrell" and anchor apple generic and certificate leaf[subject.CN] = "Apple Development: Richard Doty (S65Q255HA8)" and certificate 1[field.1.2.840.113635.100.6.2.1] /* exists */
• Signing Identity: Apple Development: Richard Doty (S65Q255HA8), Team ZU2882L4HT
• Hardened Runtime: Enabled (flags=0x10000(runtime))
• Architectures (lipo -archs): Universal dual-slice x86_64 arm64
• Deployment Nonce: rollout-20260903204036
• Canary Receipt SHA-256: 96f1670652167bae11b583df494357fce228f506f9cd99252ac4eefcdca35ce6
  • Location: /Users/richh/.tyrell/canary-receipts/rollout-20260903204036.json (Mode 0600)
• Canary Probe Evidence SHA-256: 3c4bd5f6aabca34bcfa120a9340aaf4db53664ea16f1fd57a001cb5ca2eeeef2
  • Location: /Users/richh/.tyrell/canary-probes/rollout-20260903204036.json (Mode 0600)

Commands Executed

1. Build and Code Signing (rdmsm4x)

swift build -c release --arch arm64 --arch x86_64
zsh scripts/build_app_bundle.zsh
codesign --verify --deep --strict /Applications/Tyrell.app

2. Canary Deployment Execution (rdmsm4x -> rdmbair15m5)

zsh scripts/redeploy_app_fleet.zsh \
  --bundle .build/Tyrell.app \
  --candidate-hash 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f \
  --candidate-cdhash 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172 \
  --deployment-nonce "rollout-20260903204036" \
  --execute-canary

3. In-App Canary Probe Execution (rdmbair15m5)

zsh /Users/richh/.tyrell/app-staging/97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172/run_tyrell_app_canary_probe.zsh \
  --expected-hash 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f \
  --expected-cdhash 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172 \
  --deployment-nonce rollout-20260903204036

4. Canary Receipt Issuance (rdmbair15m5)

zsh /Users/richh/.tyrell/app-staging/97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172/issue_tyrell_app_canary_receipt.zsh \
  --expected-hash 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f \
  --expected-cdhash 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172 \
  --deployment-nonce rollout-20260903204036

5. Fleet Promotion Readiness Plan (rdmsm4x)

zsh scripts/plan_app_deployment.zsh \
  --candidate-hash 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f \
  --candidate-cdhash 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172 \
  --deployment-nonce rollout-20260903204036 \
  --promote-fleet \
  --canary-receipt ~/.tyrell/canary-receipts/rollout-20260903204036.json

Verification Evidence

1. Post-Deployment Process Count & GUI Status (rdmbair15m5)

• pgrep -x Tyrell -> PID 30356 (count: 1). Exactly 1 Tyrell process running.
• lsappinfo info -app "#30356":
  • bundleID="com.eastcoastscience.Tyrell"
  • bundle path="/Applications/Tyrell.app"
  • type="Foreground"
  • fileType="APPL"
  • Arch=ARM64

2. Binary Architecture & Integrity (rdmbair15m5 & rdmsm4x)

• lipo -archs /Applications/Tyrell.app/Contents/MacOS/Tyrell -> x86_64 arm64 (Universal2).
• shasum -a 256 /Applications/Tyrell.app/Contents/MacOS/Tyrell -> 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f (Exact match).

3. Code Signing & Designated Requirement (rdmbair15m5 & rdmsm4x)

• codesign --verify --deep --strict /Applications/Tyrell.app -> Exited 0 (Clean verification).
• Designated requirement hash -> 7467a4ae84b198c35fa624c55939276f7ad2989f7dab4e102a71af6f2d7e33dc (Exact match, preserving TCC permissions).

4. Live Daemon Health & Endpoints (rdmbair15m5)

• curl -sS http://127.0.0.1:43118/api/status -> HTTP 200 OK (host="rdmbair15m5").
• curl -sS http://127.0.0.1:43117/api/status -> HTTP 200 OK (host="rdmbair15m5").
• Full fleet census: all 6 fleet nodes reporting live (rdmsm4x, rdmbair15m5, rdmbair13m5, jdmbair13m5, rdmpw3265m, rdmpw3275m), 0 missing nodes.

5. Fleet Promotion Verification Output (rdmsm4x)

• plan_app_deployment.zsh --promote-fleet output:

  mode=fleet
  hosts=rdmpw3275m,rdmbair13m5,jdmbair13m5,rdmpw3265m
  pending_hosts=none
  deployment_state=proposed
  candidate_sha256=8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f
  candidate_cdhash=97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172
  bundle_id=com.eastcoastscience.Tyrell
  team_id=ZU2882L4HT
  probe_order=43118,43117
  deployment_nonce=rollout-20260903204036

6. Contract Test Suite (rdmsm4x)

• zsh Tests/ScriptTests/app_deployment_plan_contract_test.zsh -> PASS
• zsh Tests/ScriptTests/tyrell_app_lifecycle_contract_test.zsh -> PASS
• zsh Tests/ScriptTests/applications_deploy_contract_test.zsh -> PASS
• zsh Tests/ScriptTests/app_operational_entrypoints_contract_test.zsh -> PASS

Rollback Archive Locations

• rdmsm4x: /Applications/.tyrell-rollbacks/20260903-202123-c1229c268ead/Tyrell.app
• rdmbair15m5: /Applications/.tyrell-rollbacks/20260903-204059-c1229c268ead/Tyrell.app

How to Undo / Rollback Instructions

If rollback is required:

1. On rdmbair15m5:

   sudo -n zsh -c '
     pkill -x Tyrell || true
     rm -rf /Applications/Tyrell.app
     cp -R /Applications/.tyrell-rollbacks/20260903-204059-c1229c268ead/Tyrell.app /Applications/Tyrell.app
     chown -R richh:staff /Applications/Tyrell.app
     launchctl asuser 501 /usr/bin/open -g /Applications/Tyrell.app
   '

2. On rdmsm4x:

   sudo -n zsh -c '
     pkill -x Tyrell || true
     rm -rf /Applications/Tyrell.app
     cp -R /Applications/.tyrell-rollbacks/20260903-202123-c1229c268ead/Tyrell.app /Applications/Tyrell.app
     chown -R richh:staff /Applications/Tyrell.app
     launchctl asuser 501 /usr/bin/open -g /Applications/Tyrell.app
   '

Outstanding Owner Actions

• None. Canary gates are 100% satisfied; receipt verified; ready for fleet promotion.