rdmsm4x-changelog-20260925-0012-grok-xattr-focus-v1-plan

rdmsm4x changelog 2026-09-25 00:12 ET: grok xattr focus (inventory, v1 plan, scanner readiness, epic)

Agent: grok@rdmsm4x/grok0924 (executor subagent), working via rdmbair15m5 then ssh rdmsm4x. Hub load was 31 to 60 the whole time.

Delivered

~/dev/_handoff/xattr-focus-20260925/: INVENTORY.md, V1-PLAN.md, SCANNER-READINESS.md, BUILD-RESULT.txt.
Tickets: EPIC-20260925-01. Children: DOC-20260925-01 (inventory, resolved), TASK-20260925-02 G0 harness (codex), TASK-20260925-03 G1 lib/XattrKit (agy), TASK-20260925-04 G2 engine (codex, blocked by -03), TASK-20260925-05 G3 classifier (agy, blocked by -04), SPIKE-20260925-01 iCloud sync (agy).
Bus: 20260925-001115-B7EE4E57 to codex/agy on rdmsm4x and rdmbair15m5. It points them at the epic and states the rule that they settle conflicts through tickets and the bus. Claude is not assigned before 10:00 ET.

Base codebase: replicantDB engine libraries plus a new thin xattr app. The single XattrKit is hyperFile's copy (apps/xattr's copy is a byte-identical subset of it).
Platform floors: xattr 14, replicantDB 15, StatementDL 27.0. The fleet rule is 26.7.
The classifier has no statement, tax-form, or bill class, and no entity or period fields.
replicantDB's PeerInferenceRouter must be compiled out so financial text stays on the Mac.
apps/autoCE's STATUS describes Arista customer-engineering material, not Concur. I stopped reading at STATUS.
RDReceipt's fixtures quote real receipt text, so they count as private.
Hub toolchain: a combined --arch arm64 --arch x86_64 SwiftBuild stalled (clang blocked writing to an undrained pipe). Per-arch native builds plus lipo worked.
Product rules from Rich, written into the plan: App Intents/Shortcuts are an optional door, never the core path. The engine has three front doors (app, intents, CLI+MCP). The MCP is read-only with an agent scope file that denies by default. There is a "Who pays" section, and the scanner is a one-tap flow inside the app.

apps/xattr @ e3c3883: built for both arches (x86_64 and arm64, then lipo). 3/3 tests pass. A synthetic Finder-tag write was read back through NSURLTagNamesKey. minos is 14.0. Changed: no. Signed/deployed: no.
replicantDB: not rebuilt. The installed 1.19.5 (43) is universal2 and a notarized Developer ID build.
scanRoo: read-only review only. It has no TestFlight upload evidence, no save to Files/iCloud Drive, and an iOS 27.0 floor.

I read no personal documents, did not open autoCE beyond STATUS, and did not read RDReceipt real-corpus or fixture contents.
No repo files were edited. Scratch build dirs .build-grok-* are gitignored in apps/xattr, and there is a staging dir ~/.grok-staging.