mesh-host #96 replaced foundation-first-node-nats.lock with foundation-first-node.lock, and the test that holds the installer's first user list to the controller's composition still read the removed file, so repo-check failed on main and every pull request. The captured copy moves to mesh-host 7a41e12, with the placement guard at the same commit.