Live job control, safer local AI, and clearer workflows.

Added a live Jobs Control Room with shareable job views, streamed activity, dependency graphs, evidence, approvals, questions, and state-aware run controls.

Added versioned workflow templates and deterministic requirement, file-scope, dependency, validation, and approval gates around local model execution.

Split appliance workers by role, tightened secret and repository access, and added hardened Linux sandboxing for production commands and coding agents.

Redesigned the jobs inbox and control room around blocking work, compact filters, human-readable status, stable plans, mobile navigation, and accessible controls.