The agent chat now pauses before any write action and shows you exactly what it's about to do. Destructive actions (delete, archive) include a clear warning that they can't be undone. You confirm or cancel — the agent cannot proceed on its own.
A related fix: approving an action, then reloading the conversation, no longer re-opens the confirmation modal or re-runs the action. Each message now persists its state by id, so an approved action stays approved.
The anonymous scan rate limits — per-IP and global daily caps — are now enforced in production. The tables backing those checks were never created in the production database, so every check since late May silently passed through. That gap is closed.
Education ranking and directory sites (Princeton Review, BSchools.org, Poets&Quants) now classify correctly and no longer show up as ranked brands in visibility scans for education and MBA clients.