FM door: the zero-setup demo authority — bundled sample default, rate-measured public-fleet opt-in

Context

Sub of epic #15519 (graduated D#15498, OQ6 + OQ7). The third abandonment cliff: a flawless cold install of the real FM first-paints EMPTY PANELS (the views bind Brain-fed stores). The demo authority decision is graduated: bundled deterministic sample = the shipped default; public-fleet read-only backend = opt-in behind the measured rate falsifier.

The Work

Ship the bundled sample (the trinity take + a canned roster, honestly captioned — tour provenance, never posed as live Memory Core arrival) as the packaged shell's first-paint default, satisfying the first-run bar: download → double-click → the fleet visibly working inside a minute. Run the rate-budget measurement for the opt-in tier (unauthenticated GitHub API 60 req/h vs the synced readers' first-paint request pattern): PASS → the public-fleet read-only backend ships as the zero-credential opt-in; FAIL → token-gated only, and the measurement is the recorded reason.

Acceptance Criteria

• Cold first-run shows the sample fleet working inside a minute, honestly labeled.
• The rate measurement is recorded with its verdict; the opt-in tier matches it.
• The org-adjacency dependence of the public-fleet tier is stated in the topology ADR's C-falsifier record.

Related

Epic #15519 · D#15498 (OQ6/OQ7; Vega's third cliff + rate falsifier; Phoebe's first-run bar) · ADR-0034 (the shell this rides in).