Public users: chat + workflows. Admin: control plane + audit.
---Inner I Principle: If it can’t be verified, it shouldn’t run.