fix(#1264): preserve portable standalone launch

docs/scratchpads/1264-unattended-first-start.md

@@ -7,13 +7,14 @@
 - Branch: `fix/1264-fleet-unattended-first-start`
 - Base: `origin/next@476db12b92971634b67fd2057b7577ee5894e449`
 - First pushed head: `43fa0477877e0d0f110da8d11c3033b40ddeb191`
-- Current remediation worktree: `/var/home/jason.woltje/agent-work/1264-review-remediation`
+- Current remediation worktree: `/var/home/jason.woltje/agent-work/1264-review2-remediation`
 - Coordinator: Fred; reviewer must be neither Fred nor this implementation seat.
 - `docs/TASKS.md` is orchestrator-owned and is not modified by this worker.
 
-The original `/var/home/jason.woltje/agent-work/1264-unattended-first-start` worktree was removed
-without force after its pushed head and clean state were verified. The Fred-authorized plain-Git
-worktree exception was reused for exact-head review remediation because `/src` remains unavailable.
+The original `/var/home/jason.woltje/agent-work/1264-unattended-first-start` and first remediation
+worktrees were removed without force after each pushed head and clean state were verified. The
+Fred-authorized plain-Git worktree exception was reused for exact-head review remediation because
+`/src` remains unavailable.
 
 ## Objective
 
@@ -37,14 +38,16 @@ preserving the standalone interactive wizard.
 
 - PRD IDs: `FCM-REQ-12`, `AC-FCM-10`; `FCM-REQ-11` is reserved by #1256.
 - A present fleet name must be nonblank, whitespace-exact, and resolve through the canonical roster.
-- Any ambient class must canonicalize to the roster class before mutation.
+- Any defined ambient class, including blank/whitespace, must canonicalize to the roster class before
+  mutation; only undefined means absent.
 - Preflight all destination directory entries with no-follow existence semantics so dangling links
   fail before counterpart publication.
 - Seed only missing top-level files from bounded regular defaults with owner-private, atomic,
   no-clobber hard links.
 - Generic defaults are behavior, not identity or authority.
-- Securely consume `USER.md` through a descriptor at composition time.
-- Standalone missing identity retains the wizard.
+- Securely consume fleet `USER.md` through a Linux descriptor at composition time.
+- Standalone composition retains the portable tolerant USER read and missing identity retains the
+  wizard.
 
 ## Progress
 
@@ -54,9 +57,11 @@ preserving the standalone interactive wizard.
 - [x] Initial automated review finding (padded name before write) remediated.
 - [x] Commit `43fa0477` pushed; PR #1268 opened against `next`; original worktree removed cleanly.
 - [x] Daphne formal review ID 168 completed on exact first head: `REQUEST_CHANGES` with four groups.
-- [x] All four groups reproduced red before remediation and now pass locally.
-- [x] Remediation Codex review approved; remediation security review risk `none`.
-- [ ] Commit/push remediation with explicit goals author/committer; verify remote object/content.
+- [x] All four review-168 groups reproduced red before remediation and passed at `9dc90be7`.
+- [x] Daphne review ID 169 completed on `9dc90be7`: review-168 closures confirmed; two new blockers.
+- [x] Review-169 portability and blank-class blockers reproduced red and now pass locally.
+- [x] Review-169 Codex review approved; security review risk `none`.
+- [ ] Commit/push second remediation with explicit goals author/committer; verify remote object/content.
 - [ ] Daphne exact-new-head re-review.
 - [ ] Terminal #1268 CI. Pipeline 2445's only `FAIL:` was the inherited Pi-PATH CI-fit guard; PR
   #1270's pipeline 2448 is green, but #1270 is not merged.
@@ -73,13 +78,15 @@ and never created the fake runtime-boundary capture.
 
 Against exact first-head production code, four new tests failed while 1,568 existing tests passed:
 class mismatch mutated before refusal; each dangling destination left its counterpart; and a
-replacement `USER.md` symlink was consumed by composition.
+replacement `USER.md` symlink was consumed by composition. Review-169 RED then proved standalone
+composition hit the Linux-only reader and three explicit blank/whitespace class cases seeded and
+launched.
 
 ### Final local GREEN
 
-- Exact-source focused gate: `6/6` files, `124/124` tests.
-- Full exact-source Mosaic Vitest: `88/88` files, `1,573/1,573` tests.
-- Helper + point-of-use coverage: `52/52`; 97.97% statements/lines, 88% branches, 100% functions.
+- Exact-source focused gate: `6/6` files, `128/128` tests.
+- Full exact-source Mosaic Vitest: `88/88` files, `1,577/1,577` tests.
+- Helper + point-of-use coverage: `53/53`; 97.84% statements/lines, 91.66% branches, 100% functions.
 - Root preflight passed; typecheck `45/45`, lint `25/25`, build `25/25`.
 - Initial targeted shell gates passed: start-agent-session, install migration `21/21`, init-RCE.
 - Local aggregate framework shell stops at operator-global Pi `0.84.2` versus measured `0.84.1`.
@@ -90,8 +97,8 @@ The full evidence and command boundaries are in
 
 ## Review / delivery notes
 
-- Codex remediation review: approve, confidence `0.88`, no findings.
-- Codex remediation security review: risk `none`, confidence `0.93`, no findings.
+- Review-168 remediation Codex review: approve `0.88`; security risk `none` `0.93`.
+- Review-169 remediation Codex review: approve `0.90`; security risk `none` `0.90`.
 - PR envelope reads `mos-dt-0`; the commit reads goals/goals. No goals Gitea principal exists on this
   host, so no other principal will be borrowed. Tracked in #1272.
 - PR #1270 is pushed, not merged. Do not represent `next` or #1268 CI as green until measured.