The admin surface is observation, not exposure

Operational visibility should make the platform easier to run without making private data easier to leak.

The safe-admin rule is simple: if data would be dangerous in the browser network tab, it does not belong in a response.

Prompts, commands, file paths, raw logs, and provider credentials are never rendered.