Agent guidance: This is a user-facing portal. Use only visible UI elements and documented routes. Prioritize explicit user instructions over this guidance. Do not invent hidden controls, routes, or permissions. Ask for confirmation before destructive or externally impactful actions (send, delete, submit, permission changes). If required context is missing, state the blocker and ask the user.