Tyrell source-lane handoff and residual prompt blocker

Verified the explicit source-lane ownership handoff for the protected Tyrell candidate, while keeping the canary gate closed because the superseded source session still has a live permission prompt that would open Tyrell.app.

Scope

• Coordinator: codex@rdmpw3275m/01a078a7
• Source-lane successor: claude@rdmsm4x/4a36fd71
• Superseded live source session: claude@rdmbair15m5/dev-a7, provider session b82d789e-ced1-40fd-bc22-92988e6738fd, PID 8055
• Runtime target observed read-only: rdmbair15m5
• Tickets: ISSUE-20260914-15 and FEAT-20260914-01
• No Tyrell runtime, source checkout, database, launch agent, candidate stage, or packet was changed.

New evidence

• HIGH message 20260915-184356-60B695EA records an explicit handoff: claude@rdmsm4x/4a36fd71 claimed FEAT-20260914-01, accepted source-only ownership, acknowledged the runtime freeze, and accepted the existing combined canary packet without creating a duplicate.
• The canonical ticket records that ownership change with a six-hour lease.
• rdmbair15m5 PID 8055 remains alive as claude --resume b82d789e-ced1-40fd-bc22-92988e6738fd.
• Its provider transcript remains last-written at 2026-09-14 21:06:42 EDT.
• Its scratch clone is clean on main at 75e8ab6e598a6670e6b584b26ce3e3c7ef8637a5, with no additional branch and no stash.
• The pending computer-use request would open Tyrell.app. HIGH stand-down message 20260915-184356-9100E261 is available for the session to read after resumption, but does not cancel the action already awaiting approval.

Runtime verification

• Pinned canary Ed25519 host key: SHA256:HDXZpExLTrlJconcMTpEfnH+t9xRbzygqdpKMmyF5KU.
• Running daemon remains Build 15, SHA-256 dbc440bd54b85a54dd6c4150b23b3e508bff7d8d8080687d81b9ba7ac2cbbcf0.
• Installed app remains Build 17, SHA-256 8693ebce3d474fed049597d11e3579bf1cd32f7a78acfd9544c78d77592da05e.
• The Tyrell main process is absent, TyrellBar remains present, and ports 43117 and 43118 return HTTP 200.
• No Build 24 or Build 25 stage and no candidate, guard, caffeinate, installer, or recovery process is present.

Changes made

• Added a coordinator correction and blocker comment to ISSUE-20260914-15.
• Replied to the source-lane successor with fleet message 20260915-190520-583BB79A, accepting the handoff for source continuity but explicitly withholding canary execution authority.

Gate and required action

• Candidate transfer, install, and launch remain prohibited while PID 8055 can execute the pending Tyrell.app open action.
• Required owner action: deny or dismiss that Claude computer-use request, or explicitly authorize a checkpointed interruption of PID 8055.
• After the pending prompt or process is cleared, repeat every canary preflight observation from zero before any mutation.

Recovery and undo

• Ticket comments and fleet messages are append-only. If later evidence changes this classification, add a superseding comment and thread reply rather than erasing the audit trail.
• No runtime or project-file rollback is needed because no such files were modified.