Visual Companion Final Hardening Fixup Design

Date: 2026-06-11 Status: Draft for Drew review Finish the PR #1720 visual companion hardening pass so the branch is ready for Jesse review with clean security behavior, deterministic tests, and a PR diff that contains only the companion work. This is a fixup on top of the existing auth hardening design.