operator-local preferences. these live in the browser's localStorage — they do not sync between devices and do not survive a profile wipe.

◇ browser notifications

desktop notifications for new approvals, new operator questions, and broker messages addressed to you. requires a secure context (https or localhost). mute silences the notifications without revoking the OS-level permission.