rdmsm4x-changelog-20260924-0222-xentropy-031-honest-discovery-counts-litellm-retired

rdmsm4x - release - XEntropy 0.3.1 (4): honest discovery counts, LiteLLM lane retired, installer relaunches over SSH - claude@rdmsm4x (648db84f) - ISSUE-20260924-05 / TASK-20260924-01 / DEC-20260924-01 - apps/Xentropy - 20260924-0222

Session: 2026-09-24 01:43:27 EDT to 02:23 EDT Ran on: rdmsm4x · Changed state on: all six Macs (rdmsm4x, rdmbair15m5, rdmpw3275m, rdmbair13m5, jdmbair13m5, rdmpw3265m)

The "5000" on XEntropy's main screen was a stale, capped 0.2.x index shown as "Indexed". Counts are now honest (N+, Outdated/Stopped at limit/Incomplete), the LiteLLM lane is gone (LiteLLM abandoned fleet-wide), and 0.3.1 (4) runs on all six Macs.

Scope

XEntropy source, docs and state files (canonical rdmsm4x:~/dev/apps/Xentropy, main cb1edb1, pushed to fleet/origin/backup).
0.3.1 (4) installed on all six Macs. Four whole-home discovery rescans were run (rdmsm4x, rdmbair15m5, rdmpw3265m, jdmbair13m5), each after archiving the old schema-1 index.
Fleet skill ~/.claude/skills/xentropy-local/SKILL.md updated on the hub (configsync distributes it).
Tickets: DEC-20260924-01 (LiteLLM abandoned, Rich) recorded; ISSUE-20260924-05 and TASK-20260924-01 resolved; opened TASK-20260924-02 (fleet-wide LiteLLM archive sweep, 632-file inventory), ISSUE-20260924-07 (hub-scale discovery) and FEAT-20260924-02 (catalog archive action).
Deliberately left alone: the fleet-wide LiteLLM sweep outside XEntropy (ticketed); the two LiteLLM rows in each catalog (positional baseline IDs; FEAT-20260924-02); the inert litellm-local keychain bearer on hosts bootstrapped before 0.3.1; rdmpw3275m's discovery index (already current, per the peer); rdmbair13m5 (never scanned).
Coordinated throughout with claude@rdmpw3275m ("Xentropy initialization"), who owns the 0.3.0 release lane and consolidation PRD.

Root cause

Every 0.2.x host kept a schema-1 discovery index that had stopped at the old CredentialScanPolicy.defaults cap of 5,000 observations. That engine only bumped truncatedCount and never recorded match_limit. The 0.3.0 Overview printed records.count with the status "Indexed". Measured: rdmsm4x v1 5,000 (2026-08-29), rdmbair15m5 v1 5,000 (2026-09-05), rdmpw3265m v1 5,000 (2026-08-29); jdmbair13m5 also v1.

Commits (apps/Xentropy)

Commit	What
`8c5067b`	fix(app): discovery counts say when they are a floor or outdated
`d680343`	refactor(gateway): retire the litellm-local lane
`4891d9b`	release 0.3.1 (4); the installer contract test checks version agreement (it had been failing 3 assertions on main)
`985a936`	merge of the above
`4a98373`	fix(installer): relaunch the app over SSH through a one-shot Aqua agent in `gui/<uid>` (`launchctl asuser` needs root)
`3a8fd2e`	docs: LiteLLM lane scrubbed from agent-facing docs and CLAUDE.md; discovery-count rule
`6a9dbbd`, `cb1edb1`	docs: 0.3.1 (4) sections in STATUS / SESSION-STATE / ISSUES / CHANGELOG

Files created

Path	What
`app/Tests/XEntropyTests/DiscoveryCountHonestyTests.swift`	6 tests plus 1 env-gated offscreen render of the Overview
`~/Library/Application Support/XEntropy/DiscoveryArchive/20260924-schema1/credential-observations-v1.json` (rdmsm4x, rdmbair15m5, rdmpw3265m, jdmbair13m5)	copy of each old schema-1 index, 0600, sha256 matched before the rescan
`~/Library/Application Support/XEntropy/DeploymentRollback/20260924-02*-4a98373…` (all six)	installer rollback evidence for 0.3.1 (4)

Files modified

App sources: CredentialDiscoveryClient.swift, WorkspaceViewModel.swift, OverviewView.swift, SourcesView.swift, RootSplitView.swift (counts); GatewayRuntimeProfile.swift, LocalRuntimeBootstrap.swift, AccessProfilesView.swift, CredentialCatalogRedaction.swift, CredentialLifecycleModels.swift (lane). Backup: git history.
Scripts: build.sh, scripts/install_xentropy_local_instance_v1.0.zsh, scripts/verify_xentropy_fleet_canary_v1.0.zsh (0.3.1/4; the installer bootstrap loop without litellm-local; GUI launch).
Tests moved from the LiteLLM caller to neutral .other callers (9 test files); FleetInstallerContractTests.swift.
Docs: CLAUDE.md, README.md, runbook, three architecture docs, STATUS.md, SESSION-STATE.md, ISSUES.md, CHANGELOG.md.
~/.claude/skills/xentropy-local/SKILL.md: litellm-local marked retired; discovery paragraph corrected (whole home since 0.3.0, --notes only from a GUI session, N+ means not a total).
Each host's ~/Library/Application Support/XEntropy/Discovery/credential-observations-v1.json replaced by a schema-2 whole-home scan on 4 hosts.

Commands run

swift test --package-path app                                   # worktree, full suite
zsh scripts/install_xentropy_local_instance_v1.0.zsh --dry-run --all
zsh scripts/install_xentropy_local_instance_v1.0.zsh --host rdmsm4x      # canary at 985a936
zsh scripts/install_xentropy_local_instance_v1.0.zsh --all              # at 4a98373
zsh scripts/verify_xentropy_fleet_canary_v1.0.zsh --all
~/.local/bin/xentropyctl discovery scan                          # rdmsm4x; other hosts over SSH (no --notes)
ticket open/claim/comment/resolve (DEC-20260924-01, ISSUE-20260924-05/-07, TASK-20260924-01/-02, FEAT-20260924-02)

Verification performed

Tests at 985a936: 442 XCTest (440 passed, 2 env-gated skips, 0 failed) + 4 Swift Testing. Core 267 · Gateway 22 · App 92 · CLI 61 (was 435). Installer and retirement tests 23/23 at 4a98373. Negative control: moving the verifier's build to '3' against '4' fails the contract test.
Offscreen renders of the Overview: "5,000+ · Outdated — rescan" (orange) for the v1 shape; "2,459 · Indexed" for a complete scan.
Fleet: install --all INSTANCE_PASS launch=running on five hosts plus jdmbair13m5 by retry. verify ARTIFACT_PASS 6/6: 0.3.1/4, ZU2882L4HT, universal2, catalog schema 2, running. Both Intel Mac Pros pass.
Installed CLI (rdmsm4x): bootstrap --profile litellm-local gives unknown_profile; serve --profile litellm-local gives profile_unavailable; bootstrap --profile claude-local gives already_configured.
No LiteLLM process, launchd job, LaunchAgent, container or :4000 listener on any of the six Macs (SSH probe with a per-host positive control).
Rescans, values-free counts: rdmsm4x 50,000 (cap) / 6,144 distinct / 544,166 files over the byte budget, shows "50,000+ · Stopped at limit"; rdmbair15m5 42,637 / 7,923 distinct / 258,395 over budget, "42,637+ · Incomplete"; rdmpw3265m 15,278 / 2,107, "Indexed"; jdmbair13m5 6,493 / 1,471, "Indexed".
A GUI-domain agent loaded from SSH runs with launchctl managername = Aqua (rdmpw3265m), while the SSH session is Background.

How to undo

# code: revert on a branch, rebuild, reinstall
cd ~/dev/apps/Xentropy && git revert -m 1 985a936 && git revert 4a98373
# runtime: each host keeps the 0.3.0 app/CLI under DeploymentRollback/<stamp>-4a98373…; use the documented rollback procedure
# discovery index: copy DiscoveryArchive/20260924-schema1/credential-observations-v1.json back to Discovery/ (mode 0600)

Outstanding

ISSUE-20260924-07: whole-home discovery cannot finish on rdmsm4x or rdmbair15m5 (budgets and match cap). The UI says so honestly.
FEAT-20260924-02: catalog archive action, then archive the two LiteLLM baseline rows on all six.
TASK-20260924-02: fleet-wide LiteLLM archive sweep (632 files; nothing running).
Apple Notes: published 2026-09-24 02:28:05 EDT by the hub's com.rdm.claude-notes-autopublish agent (Aqua session), together with the canary (0212) and fleet (0218) install changelogs.

Secrets

None handled. The discovery scans are values-free (paths, aliases, HMAC fingerprints and masked previews stay in each host's owner-only store). Key names mentioned: LITELLM_MASTER_KEY, LITELLM_SALT_KEY (catalog baseline labels only); no LITELLM_* names exist in rdmsm4x ~/.secrets.