rdmsm4x-changelog-20260903-2105-tyrell-app-fleet-promotion-and-telemetry-verification

Universal release of Tyrell.app (Build 15 / 0.2.0) promoted fleet-wide following designated canary verification on rdmbair15m5, independent victory audit, and live cluster telemetry confirmation.

Scope

• Hosts: rdmsm4x (build, sign, local install, control server), rdmbair15m5 (designated canary, verified receipt), rdmpw3275m (promoted, installed), rdmbair13m5 (promoted, installed), rdmpw3265m (promoted, installed), jdmbair13m5 (staged, pending tailnet wake).
• Bundle: /Applications/Tyrell.app (universal2 fat Mach-O x86_64 arm64, codesigned with Hardened Runtime and designated requirement 7467a4ae84b198c35fa624c55939276f7ad2989f7dab4e102a71af6f2d7e33dc).

Executed Actions

1. Canary Victory Audit Certification:

   • Independent forensic Victory Auditor confirmed 100% pass across Phases A, B, and C (VERDICT: VICTORY CONFIRMED in .agents/victory_auditor_canary/audit_report.md).
   • Verified dual architectures (x86_64 arm64) on both Tyrell and companion tyrellbar.
   • Verified strict codesigning, hardened runtime flags (0x10000), and exact DR hash match.
   • Verified single-process APPL foreground contract (PID 30356) on canary rdmbair15m5 and Schema 3 receipt rollout-20260903204036.json (SHA-256: 96f1670652167bae11b583df494357fce228f506f9cd99252ac4eefcdca35ce6).

2. Fleet Promotion Execution:

   • Executed scripts/redeploy_app_fleet.zsh --bundle .build/Tyrell.app --candidate-hash 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f --candidate-cdhash 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172 --deployment-nonce rollout-20260903204036 --execute-fleet.
   • rdmpw3275m: Bundle staged, verified, installed via sudo -n install_app_local.zsh. Launch state: accepted_exactly_one. Rollback archived to /Applications/.tyrell-rollbacks/20260903-210106-c1229c268ead/Tyrell.app.
   • rdmbair13m5: Bundle staged, verified, installed via sudo -n install_app_local.zsh. Launch state: accepted_exactly_one. Rollback archived to /Applications/.tyrell-rollbacks/20260903-210120-c1229c268ead/Tyrell.app.
   • rdmpw3265m: Bundle staged, verified, installed via sudo -n install_app_local.zsh. Launch state: accepted_exactly_one. Rollback archived to /Applications/.tyrell-rollbacks/20260903-210131-c1229c268ead/Tyrell.app.
   • jdmbair13m5: Host unreachable over tailnet at time of sweep; marked fail-closed as [PENDING].
   • Failed hosts: 0.

3. Fleet-Wide Live Telemetry Verification:

   • Queried http://127.0.0.1:43118/api/status on rdmsm4x.
   • All 6 fleet nodes confirmed active in cluster manifest:
     • jdmbair13m5: live (age: 104s, 24,849 files)
     • rdmbair13m5: live (age: 131s, 59,605 files)
     • rdmbair15m5: live (age: 233s, 374,180 files)
     • rdmpw3265m: live (age: 37s, 49,542 files)
     • rdmpw3275m: live (age: 198s, 203,830 files)
     • rdmsm4x: aging (age: 2333s, 1,480,909 files)

Verification Evidence

• Candidate Hash: 8c53e801ffdb277495c0a3f0707df1859c205454620342206831832ea492131f
• Candidate CDHash: 97ea1c596baaff284a511d43ba670c91424373da9dff8b7baa08e125c47ac172
• Canary Receipt: rollout-20260903204036.json (SHA-256 96f1670652167bae11b583df494357fce228f506f9cd99252ac4eefcdca35ce6)
• Fleet Exit Code: 0 (failed_hosts=none)