ISOLATION WARNING — _isolation_check field non-empty
====================================================
The blind subprocess listed Finlet-specific facts it should NOT have known:
- Working directory was /Users/justnau/finlet (CWD leak)
- git log/status accessible — saw recent merge "trade-ticket-panel always-on cash subscription"
- saw untracked files (dashboard-post-trade.png, retest-trade-ticket-stale-cash.png, etc.)
- saw docs/agent-ops-archive/ workflow JSON (knew this was an AI-ops harness project)

ROOT CAUSE: env -i strips environment but the subprocess's cwd is the repo root,
so `git ...` commands in the launcher's CWD inherit the repo context. To truly
clean-room: launch claude --print from /tmp or a scratch dir, AND pass --cwd
explicitly to remove repo discovery.

Non-blocking — this is a sanity check, not a gate. Iteration proceeds.
