rdmsm4x-changelog-20260922-1953-ollama-air-rollout-and-report

Three small additive Ollama canaries were completed on the M5 Airs, and an evidence-bounded report was published to the protected dev.ecs0.net origin without changing any model route or authentication boundary.

• Scope: canonical rdmsm4x project/report and the three M5 Airs. This record covers Studio-side source/documentation, publication, package installation, and coordination; each changed Air has a separate host-named record.
• Files touched: /Users/richh/dev/localAI/ollama/docs/model-selection-and-fleet-rollout-2026-09-22.md, SESSION-STATE.md, ISSUES.md, AGENTS.md, scripts/benchmark_ollama_receipts_v1.0.py, scripts/publish_host_changelog_note_v1.applescript, scripts/add_codex_report_link_v1.applescript; /Users/richh/.agent-coordination/checkins/codex-ollama-fleet-setup-20260826.json; the canonical iCloud PROJECTS.md; isolated site branch /Users/richh/dev/_worktrees/dev-ecs0-net/codex-ollama-model-report-20260922 at f013c01; new live page /Users/richh/dev/sites/dev.ecs0.net/wiki/dev/ollama-model-report-2026-09-22.html, one appended line in its pre-existing dirty wiki-manifest.sha256, and a bounded receipt in its SESSION-STATE.md; mirrored source/build pages in /Users/richh/dev/sites/eastcoastscience.net/dev/ and dist/dev/; four sanitized changelog files under /Users/richh/dev/LLM/Claude/changelogs/; and one new row in the existing iCloud Notes Codex/codex_links table. Homebrew installed cloudflare-wrangler 4.136.1 on Studio for the attempted mirror deployment.
• Commands: read-only host/version/tag/digest/listener/storage/backup checks; one-at-a-time exact ollama pull on each Air; bounded synthetic receipt/photo tests through a local-only SSH forward; only new-model ollama stop cleanup; python3 -m unittest, docker compose ... config --quiet, npm test, hash/privacy checks, loopback origin fetch, and unauthenticated Access checks. CI=1 wrangler pages deploy dist --project-name=eastcoastscience-net --branch=main was attempted but made no deployment because the approved local credential stores have no Cloudflare API token and the browser required sign-in. No credential value was read, copied, printed, or transmitted.
• Verification: all six new Air tag instances matched Studio full digests; all fourteen original Air tags kept their preflight digests. Each Air's 4B/GLM two-receipt scores were 22/23; GLM hit the 512-token cap throughout, while 4B stopped normally and scored 8/8 on two drawn scenes per Air. The low-space Air ended above its 25 GiB floor. All raw listeners stayed on 127.0.0.1:11434; no client alias changed. Site report SHA-256 55efde3260580be9377060f2d72eff8c1216c0df820b4f68366a6b3900184afe matched isolated source, canonical live file, loopback HTTP 200 body, and both eastcoastscience.net source/build copies. Unknown local Host returned 404 and unauthenticated dev.ecs0.net returned Access 302. Focused site tests 15/15 and eastcoastscience.net six suites passed. Full dev.ecs0.net suite has six pre-existing failures (stale remote/native assumptions, source/manifests, Notes installer); this page's focused tests passed. Broad overlay verification was already blocked by a pre-existing symlink/source-drift condition. All four host-named iCloud Notes changelogs were created and read back in the correct folders; the report URL was added to the existing Codex/codex_links table at 2026-09-22 19:59:06 EDT without a duplicate row.
• Backup: canonical live site's previously dirty manifest was copied before the narrow append to /Users/richh/dev/_handoff/codex-out/ollama-model-report-site-20260922/dev-ecs0-wiki-manifest.before.sha256. Studio Time Machine coverage was not re-tested for this documentation-only publication; Air backup limits are recorded in their own host records. No model blob, Ollama private key, prompt, or credential was copied.
• Undo/rollback: keep all new models unused and preserve every old tag. To reverse the site content, remove only the new report page and its single manifest entry after confirming no new references; the exact pre-change manifest backup above preserves concurrent writer state. The eastcoastscience.net mirror has no edge deployment to undo; its two staged page files can be removed only after a separate decision. Homebrew Wrangler is optional and may remain installed; no service or security setting was changed.
• Outstanding: the dev.ecs0.net page is published; eastcoastscience.net source/build parity is staged but edge deployment is blocked by interactive Cloudflare sign-in. The account owner must sign in or provide a scoped token through the approved credential store before mirror edge publication. Existing backup/restore, OCR-quality, coding-quality, Air memory/storage, and account-lane gates remain open. The final coordination check-in sync reached four of five peers; jdmbair13m5 timed out over SSH afterward, so its final check-in propagation remains pending even though its model/disk/changelog receipts were independently verified before that timeout.