Intent: Trust, admin is a separate account from the everyday one; using AI with admin stays deliberate.
Done looks like:
[ ] A test enumerates the routes and MCP tools marked admin and calls each with an everyday session and with an admin session; the first is refused with the kind, plain explanation, the second works.
[ ] Any admin route found open to an everyday session is fixed in the same pull, with its own failing-first test.
[ ] A route marked neither admin nor open fails the test, so a new route must choose.
[ ] The refusal text says what the person can do next (sign in as admin) in one sentence.
Files expected: src/http/ (route table, auth), src/http/mcp/, test/.
Risks: broad; if the table has no admin mark, add it as data in one module rather than editing every route.
Suggested brief: torque (trust).
Intent: Trust, admin is a separate account from the everyday one; using AI with admin stays deliberate.
Done looks like:
Files expected: src/http/ (route table, auth), src/http/mcp/, test/. Risks: broad; if the table has no admin mark, add it as data in one module rather than editing every route. Suggested brief: torque (trust).