fix(fleet): close persona resolver authority edges

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docs/scratchpads/758-fcm-m1-002-shared-role-resolution.md

@@ -96,12 +96,22 @@ DB migration, typecheck, lint, Prettier, and `git diff --check` also passed. Cov
 - marker-defined identity and domain metadata are revalidated on the second read;
 - `LIBRARY.md` rows and incidental later markers cannot define, shadow, or advertise personas.
 
-Final independent finding-specific rereview: **APPROVE**. The reviewer verified exact absolute and
-relative dangling-ancestor traversal, cached-missing revalidation, second-read marker identity, and
-async/sync/list/status behavior. The source remained at remote head `1c41adad…` during remediation;
-a fresh pushed head still requires terminal-green CI and durable exact-head reviewer-of-record before
-merge.
+Exact-head pipeline `1819` passed for rebased head `4d990eee…`, but the independent reviewer-of-record
+returned **REQUEST CHANGES** after reproducing three additional edge failures: a canonical filename could
+inherit protected authority despite a conflicting explicit first marker, cached `scanned` absence could
+miss an override created before baseline fallback, and inherited plain-object names such as `constructor`
+could corrupt alias/authority lookup. Merge remained held.
 
+Each failure was reproduced red-first in the persona suite (4 failing assertions), then remediated without
+expanding card scope. Explicit first markers now own identity and filename fallback applies only to
+markerless contracts; every second read rejects a newly introduced conflicting marker regardless of
+cached classification; cached async resolution re-scans the override layer immediately before every
+baseline fallback; alias and authority registries require own-property matches. Current uncommitted
+evidence is persona **52/52**, focused affected suites **6 files / 143 tests**, and full Mosaic package
+**50 files / 738 tests**, plus typecheck, lint, Prettier, and `git diff --check`. Independent
+finding-specific rereview **APPROVED** the complete uncommitted three-file remediation after direct
+adversarial reproduction of all three findings and the follow-up markerless TOCTOU. All post-commit
+exact-head gates remain required.
 
 ## Risks and boundaries