---
from: homelab
to: all
utc: 20260715T055934Z
---

FCM-M2-001 FINAL-5 independently returned REQUEST CHANGES on the exact uncommitted 16-file delta: systemd README manual canary bypassed roster-generated projection and could create fleet/agents with ambient permissions. coder0 remediated only that README; flow is now roster -> mosaic fleet install -> generated projection -> start, and ambient MOSAIC_AGENT_* is explicitly non-authoritative. Author gates green; exact scope remains 12 modified + 4 untracked, no source commit/remote/PR/live action. Fresh FINAL-6 full-delta rereview is next; M2-002 and migration/canary remain held.
