rdmsm4x-changelog-20260927-0345-tyrell-builds-40-44-zero-prompt-sync-restored

rdmsm4x - changelog - Tyrell Builds 40-44 on all six hosts; zero-prompt updates; fleet sync restored - claude - tyrlead1 - Tyrell - 2026-09-27 03:45 EDT

Summary: Five signed, notarized Tyrell builds (40–44) are on all six Macs. Updates no longer re-prompt for permissions: that's proven across four consecutive updates on arm64 and Intel. Spoke→hub sync, broken since Build 40, is restored. 22 tickets resolved.

Scope

Hosts: rdmsm4x (hub), rdmbair15m5 (canary), rdmbair13m5, jdmbair13m5, rdmpw3265m, rdmpw3275m (Intel, macOS 26.7.1). Run 2026-09-26 23:57 → 2026-09-27 ~03:45 EDT by claude@rdmsm4x/tyrlead1 (headless lead) with Opus workers P, S, C, U, E, F.

What changed

Tyrell Builds 40–44 (tags v0.2.0-build40…44 on git.ecs0.net + GitHub mirror): installed at /Applications/Tyrell.app on all six; tyrelld at ~/Library/Application Support/Tyrell/bin/tyrelld (stable real file). Details: ~/dev/_handoff/tyrell-lead-20260927/HANDBACK.md.
Usage collector (ECSQuotaKit v1.0.2 ecs-quota, Developer ID, notarized) → ~/.tyrell/bin/ecs-quota + LaunchAgent com.eastcoastscience.tyrell-usage on all six (02:22 EDT).
Libraries pushed: ECSQuotaKit v1.0.1/v1.0.2, ECSColorProfiles v1.1.0 (LED Loom), ECSPermissions fb30889 (permission panel layer), app-baseline ecs_sign_notarize.zsh v1.1.1 (silent-exit fix).
rdmsm4x ~/.tyrell/quota-accounts.json: providers.google.configured_plan = "Google AI Ultra" (backup .bak-tyrlead1-20260927).
One-off repairs: SIGCONT to the ReplicantDB daemon Tyrell had left stopped on rdmsm4x (02:17); launchctl kickstart -k of com.eastcoastscience.replicantDB.daemon on rdmbair15m5 to load the new embedded helper (02:30).

Verification

Every build: codesign Developer ID, spctl "Notarized Developer ID", lipo x86_64 arm64, and DR identical to the previous build (all 7 components from Build 40 on).
Fleet measured after each rollout: Info.plist version plus the RUNNING daemon's sha (launchctl pid → lsof) plus /health, on all six.
Zero prompts across 40→41→42→43→44: live tccd/securityd/SecurityAgent streams plus TCC.db diffs on rdmsm4x and rdmpw3275m; no new rows; every Tyrell decision ≤ 53 ms (no human prompt).
Gates: Swift Testing 1381, XCTest 447/184 at Build 43.

Backups / undo

Each host keeps the previous app under /Applications/.tyrell-rollbacks/-/Tyrell.app and prior daemons under ~/Library/Application Support/Tyrell/releases/.
Roll back a host: sudo zsh scripts/install_app_local.zsh --bundle <rollback bundle> --expected-hash … --expected-cdhash … plus zsh scripts/install_service.zsh --binary <prior tyrelld> from ~/dev/apps/Tyrell.
Collector rollback: python3 ~/dev/_handoff/tyrell-usage-fix-20260926/runtime-proof.py rollback (restores the v2.0 collector).

Outstanding owner actions (Rich)

FDA once per host for bin/tyrelld · CloudKit Production schema deploy · App Store Connect app record for com.eastcoastscience.Tyrell · GitHub Actions billing + ECS_LIBS_TOKEN · XEntropy unlock · DEC-20260927-08 · a quick look at the app on an Intel Mac (white panels in captures, likely an artifact).