Operate trusted local GJC sessions through a reviewed broker-bound CLI allowlist with single-use human approval.
