tell (src/actions/tell.ts) and tellCrew (src/actions/crew.ts) are two copies of the same action, and one of them had skipped a security rule. One action, one rule.
[ ] one function used by the page, the API, the MCP tell tool and the share fallback
[ ] the other is deleted in the same change; the hollow check stays clean
[ ] the refusal for someone who may not direct the crew is tested once, through every door
Pillar: P7 Steering. Found in the #619 sweep.
tell(src/actions/tell.ts) andtellCrew(src/actions/crew.ts) are two copies of the same action, and one of them had skipped a security rule. One action, one rule.telltool and the share fallback