ISOLATION CHECK FAILED (sanity warning, not a hard fail per skill spec).

The blind agent's _isolation_check field listed the following project-specific
facts it derived from the repo cwd (passed through to the MCP server config):
  - Knew commits ea9ee7e and trade-ticket-state-sync-v3 from git log
  - Knew project name "finlet" and domain finlet.dev pre-navigation
  - Knew internal positioning as "ITE for AI trading agents"

Root cause: blind-launcher.sh sets HOME and CLAUDE_CONFIG_DIR to a tmpdir, but
the finlet MCP config still uses cwd: $REPO_ROOT, and Bash(*) is allowlisted —
agent ran git log and read source.

Mitigation deferred: needs launcher hardening (drop bash, or sandbox cwd).
This iteration's findings are still actionable — the blind agent didn't use
context as a crutch (findings rest on browser observations, not source reading).
