- add admin access-policy UI and local access control surfaces
- add local markdown conflict resolution UI and smoke coverage
- add ACP local agent changed-files audit scaffold and read-only write guard
- document current P0-P2 checklist progress and verification evidence