A single panel card in the picker grid.

Renders the panel content for a given panelId with routed data.

2x4 grid of all panel cards.

Header with title, Cancel, and Apply buttons.

Single policy rule display row.

Summary statistics bar above the rule groups.

RevokeProfile revokes a profile by agent DID. Returns true if it existed.

ScanCurrentHostProcessList scans the current machine's process command lines using OS-native tools.

ScanDirectory returns low-level findings from a repository or folder tree.

Header bar with title, browser button, attention toggle, and gear button.

Renders the slot header with label, stale badge, and expand button.

Row of 3 slot zones.

Renders the 3 slots with scan highlight and hover handlers.

A single slot zone showing the assigned panel name.

Small labeled stat display.

Stats bar showing agent count, bridge count, and average trust.

Renders a single tab button.

Render the active tab content based on tab ID.

--- New comprehensive tests ---

Length-prefixed encoding also rejects collisions across other field boundaries — action vs decision, decision vs previous_hash.

Regression: under the previous "|"-separated hash format, two field-sets that differed only in where the "|" sat hashed identically — e.g. AgentID="a"