Operator surface

Reserved

Agentic command surfaces stay empty until auth, permissions, and write boundaries are approved.