WARN: blind agent _isolation_check non-empty.

Leaked facts: git repo path /Users/justnau/finlet, recent commit references to
"close-patch-ineffective-2026-05-02", presence of docs/bug-hunt/20260502T142726Z7b36/
in working tree, .claude/scheduled_tasks.lock, docs/agent-ops-archive/ workflow names.

NOT architecture-level (date ceiling enforcer / plugin registry / session lifecycle —
all absent). The leaked facts are filesystem observations from inside the working
directory; the blind launcher's settings.json grants Bash(*) and env -i passes
the parent PATH so the subprocess can `ls` files outside its sandbox. This does
not invalidate the findings — they were generated through the browser UI against
the live finlet.dev site.

Per skill spec: sanity check only, do NOT hard-fail. Logging and proceeding.
