Improvements
- Platform copilot actions are restricted to platform tools, impersonated subscriber portals are read-only, receipt login is rate-limited. CSV exports also protect against formula injection, and Wi‑Fi passphrases are masked after in-app actions.