The gallery shows the actual redacted interface, the system boundary, and dated validation proof. The dashboard uses registered actions instead of arbitrary commands, requires local/session checks for POST requests, and blocks unsafe file or path access.