The cockpit shows the real fleet by default on the operator seat

Context

Operator, 2026-08-16, verbatim: "i still have NEVER seen FM with real online peer states and activity logs that are not fake." That sentence is the credibility gap of the entire FM program: the truth PIPELINE is rigorous (honest-degraded states, absence-of-signal vocabulary, per-viewer wake rendering — all landed), but every proof ran against fixtures, sample seeds, or composed test servers. The one viewer who matters has never watched his real fleet in it.

The Problem

The dev-mode cockpit boots on the sample seed and stays there unless a composed fleet server with plane wiring is hand-assembled (planeBase + credentials + arming — the devFleetServer path). Real presence truth EXISTS on the plane (who_is_online honest surface just landed via #17248; turn-presence beacons; A2A activity is the real feed the activity composer already reads) — the missing piece is the OPERATOR-SEAT JOURNEY: one command on the operator's machine that brings the cockpit up against the LIVE containerized plane, showing real peer presence bands, real activity events, real mailbox/memories/catch-up content, with the honest-degraded story only where truth is genuinely absent.

The Fix

1. One-command real-data boot on the operator seat: the devCockpit (or packaged shell) path resolves the live plane (existing AiConfig fleet leaves: planeBase, credentials) and arms the full read set — roster runtime truth, presence bands from the real presence surface, activity from the real A2A/PR lanes, mailbox mirror, memories, catch-up — with NO sample seed masking (selected-source semantics: a deliberately chosen live source renders its true state).
2. The presence lane verified end-to-end: the #17248 honest surface feeding FM's presence bands with real seats — active-turn/fresh/recent/dark rendered from live beacons, absence rendered as absence.
3. The L1 beat, explicitly: a session where the operator watches his own fleet live in the cockpit — real peers going active, a real wake landing, a real A2A appearing in the stream — recorded as the ticket's closing evidence. Fixtures prove mechanics; only this proves the product.

Acceptance Criteria

• One documented command on the operator seat boots the cockpit against the live plane — no hand-assembled wiring steps.
• Presence bands render REAL seat states from the live presence surface (cross-checked against who_is_online at capture time).
• The activity stream shows real A2A/PR events (cross-checked against the mailbox trail); zero seeded rows visible in live mode.
• Mailbox, memories, and catch-up panes carry real plane content for the operator viewer.
• Closing evidence is L1: operator-witnessed live session, receipts on this ticket. Sample/fixture evidence explicitly does NOT close this.

Out of Scope

New plane capabilities (consumes #17248 and existing feeds) · the panes' visual design (#17268) · remote/no-checkout topology (the S-chain owns it) · multi-tenant.

Related

Epic #14560 (parent) · #17248 / #17225 (the honest presence surface this consumes) · #16746 (harness demotion — supervision direction, adjacent) · #17262 (wake cold-drain — part of the live story) · D#16720 (FM-as-client direction).

Live latest-open sweep: latest 10 re-checked 2026-08-16T22:30Z, no equivalent; A2A herd window clean.

Origin Session ID: 71baabc5-3ebe-46ff-99ce-a301e78cb7c5

Retrieval Hint: query_raw_memories("cockpit real fleet operator seat live presence activity not fake L1")