diff --git a/apps/console/pnpm-workspace.yaml b/apps/console/pnpm-workspace.yaml
new file mode 100644
index 000000000..2f24ed578
--- /dev/null
+++ b/apps/console/pnpm-workspace.yaml
@@ -0,0 +1,5 @@
+packages:
+  - .
+
+allowBuilds:
+  esbuild@0.25.12: true
diff --git a/apps/console/src/browse.ts b/apps/console/src/browse.ts
new file mode 100644
index 000000000..7da26ed58
--- /dev/null
+++ b/apps/console/src/browse.ts
@@ -0,0 +1,95 @@
+type ToolResult = {
+  structuredContent?: unknown;
+  isError?: boolean;
+};
+
+type ReadTransport = {
+  call(tool: string, arguments_: Record<string, unknown>): Promise<ToolResult>;
+};
+
+type TableEntry = { table: string; description?: string; zone_admitted?: boolean };
+type FileEntry = { table: string; path: string; label: string };
+type BrowseRequest = { asOf?: string };
+const MAX_TABLES = 64;
+const MAX_FILES = 128;
+const MAX_PREVIEW_ROWS = 100;
+
+export class BrowseError extends Error {
+  readonly code: string;
+
+  constructor(code: string, message = code) {
+    super(message);
+    this.name = "BrowseError";
+    this.code = code;
+  }
+}
+
+const abbreviations = new Set(["API", "CSV", "PDF", "SEC", "SQL", "URL"]);
+
+export function humanizeLabel(identifier: string): string {
+  const tail = identifier.split("/").at(-1) ?? identifier;
+  return tail.replace(/\.[^.]+$/, "").replace(/([a-z])([A-Z])/g, "$1 $2")
+    .split(/[-_\s]+/).filter(Boolean)
+    .map((part) => {
+      const upper = part.toUpperCase();
+      return abbreviations.has(upper) || /^[Qq]\d+$/.test(part)
+        ? upper : part[0].toUpperCase() + part.slice(1).toLowerCase();
+    }).join(" ");
+}
+
+function object(value: unknown): Record<string, unknown> {
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new BrowseError("ConsoleBrowseResponseMalformed");
+  return value as Record<string, unknown>;
+}
+
+function bounds(request: BrowseRequest): Record<string, unknown> {
+  return request.asOf ? { as_of: request.asOf } : {};
+}
+
+export function createBrowse(transport: ReadTransport) {
+  async function read(tool: string, arguments_: Record<string, unknown>): Promise<Record<string, unknown>> {
+    const result = await transport.call(tool, arguments_);
+    if (result.isError) {
+      const error = object(object(result.structuredContent).error);
+      throw new BrowseError(String(error.identifier ?? "ConsoleBrowseReadRefused"));
+    }
+    return object(result.structuredContent);
+  }
+
+  async function listed(request: BrowseRequest): Promise<{ tables: TableEntry[]; files: FileEntry[] }> {
+    const listing = await read("context.describe", bounds(request));
+    if (!Array.isArray(listing.tables)) throw new BrowseError("ConsoleBrowseResponseMalformed");
+    const tables = listing.tables.map((item) => object(item)).filter((item) => item.zone_admitted === true && item.kind !== "memory" && typeof item.table === "string")
+      .slice(0, MAX_TABLES).map((item) => ({ table: item.table as string, description: typeof item.description === "string" ? item.description : undefined }));
+    const names = new Set(tables.map((table) => table.table));
+    const fileListing = await read("context.files", bounds(request));
+    if (!Array.isArray(fileListing.rows)) throw new BrowseError("ConsoleBrowseResponseMalformed");
+    const files = fileListing.rows.filter((row): row is [string, string] =>
+      Array.isArray(row) && typeof row[0] === "string" && typeof row[1] === "string" && names.has(row[0]))
+      .slice(0, MAX_FILES).map(([table, path]) => ({ table, path, label: humanizeLabel(path) }));
+    return { tables, files };
+  }
+
+  return {
+    async discover(request: BrowseRequest) {
+      const { tables, files } = await listed(request);
+      const chips = tables.map((table) => ({ table: table.table, label: humanizeLabel(table.table), description: table.description }));
+      const descriptions = await Promise.all(tables.map((table) => read("context.describe", { table: table.table, ...bounds(request) })));
+      const insights = tables.flatMap((table, index) => {
+        const count = descriptions[index].row_count;
+        return typeof count === "number" && Number.isFinite(count) && count >= 0
+          ? [{ table: table.table, label: humanizeLabel(table.table), rows: count }] : [];
+      });
+      return { chips, insights, files };
+    },
+
+    async preview(request: BrowseRequest & { path: string }) {
+      const { files } = await listed(request);
+      if (!files.some((file) => file.path === request.path)) throw new BrowseError("ConsoleGalleryPathUnlisted", request.path);
+      const response = await read("context.file", { path: request.path, limit: MAX_PREVIEW_ROWS, ...bounds(request) });
+      if (!Array.isArray(response.columns) || !Array.isArray(response.rows)) throw new BrowseError("ConsoleBrowseResponseMalformed");
+      return { columns: response.columns.slice(0, 64), rows: response.rows.slice(0, MAX_PREVIEW_ROWS).map((row) =>
+        Array.isArray(row) ? row.slice(0, 64) : []) };
+    },
+  };
+}
diff --git a/apps/console/src/entry.ts b/apps/console/src/entry.ts
index a86974d02..e5a0d39c3 100644
--- a/apps/console/src/entry.ts
+++ b/apps/console/src/entry.ts
@@ -3,10 +3,11 @@ import { pathToFileURL } from "node:url";
 import { isAbsolute, resolve } from "node:path";
 import { registryFromEnv } from "../../gateway/src/index.ts";
 import { createLiveTurn } from "./live.ts";
+import { createLiveBrowse } from "./live_browse.ts";
 import type { ConsoleAdapters, Identity } from "./index.ts";
 import { serveConsole } from "./server.ts";
 
-type AdapterFactory = (input: { stores: ConsoleAdapters["stores"]; env: NodeJS.ProcessEnv }) => Promise<Pick<ConsoleAdapters, "turn" | "control"> & { read?: ConsoleAdapters["read"] }>;
+type AdapterFactory = (input: { stores: ConsoleAdapters["stores"]; env: NodeJS.ProcessEnv }) => Promise<Pick<ConsoleAdapters, "turn" | "control"> & { read?: ConsoleAdapters["read"]; browse?: ConsoleAdapters["browse"] }>;
 
 function required(name: string): string {
   const value = process.env[name];
@@ -82,9 +83,10 @@ async function main(): Promise<void> {
   const registry = registryFromEnv(process.env.CONTEXTFUL_STORES_JSON);
   const stores = registry.entries.map(({ id, label }) => ({ id, label }));
   const modulePath = process.env.CONTEXTFUL_CONSOLE_ADAPTER_MODULE;
-  let adapters: Pick<ConsoleAdapters, "turn" | "control"> & { read?: ConsoleAdapters["read"] } = {
+  let adapters: Pick<ConsoleAdapters, "turn" | "control"> & { read?: ConsoleAdapters["read"]; browse?: ConsoleAdapters["browse"] } = {
     ...unavailableAdapters(),
     turn: modulePath ? unavailableAdapters().turn : createLiveTurn({ stores: registry.entries, env: process.env }),
+    browse: modulePath ? undefined : createLiveBrowse({ stores: registry.entries, env: process.env }),
   };
   if (modulePath) {
     const absolute = isAbsolute(modulePath) ? modulePath : resolve(modulePath);
@@ -99,6 +101,7 @@ async function main(): Promise<void> {
     adminCapability: process.env.CONTEXTFUL_ADMIN_CAPABILITY,
     turn: adapters.turn,
     read: adapters.read ?? { list: async () => stores },
+    browse: adapters.browse,
     control: adapters.control,
   }, () => origin);
   await new Promise<void>((resolveListen, rejectListen) => {
diff --git a/apps/console/src/index.ts b/apps/console/src/index.ts
index 8691579fc..b5175bae8 100644
--- a/apps/console/src/index.ts
+++ b/apps/console/src/index.ts
@@ -1,5 +1,7 @@
 import { createHash, createHmac, createPublicKey, randomBytes, timingSafeEqual, verify, type KeyObject } from "node:crypto";
 import { ConsoleError } from "./turn.ts";
+import { parseVantage } from "./turn.ts";
+import { BrowseError } from "./browse.ts";
 
 export type Operator = { subject: string; grants: ReadonlySet<"query" | "admin">; assertion?: string };
 export type Store = { id: string; label: string };
@@ -35,6 +37,10 @@ export type ConsoleAdapters = {
   adminCapability?: string;
   turn: (input: TurnInput) => Promise<TurnResult>;
   read: { list: (operator: Operator) => Promise<Store[]> };
+  browse?: {
+    discover: (input: { operator: Operator; store: string; asOf?: string }) => Promise<unknown>;
+    preview: (input: { operator: Operator; store: string; asOf?: string; path: string }) => Promise<unknown>;
+  };
   control: {
     workflows: (operator: Operator, store: string | null) => Promise<unknown>;
     record: (operator: Operator, store: string | null) => Promise<unknown>;
@@ -261,6 +267,28 @@ export function createConsole(adapters: ConsoleAdapters): { fetch: (request: Req
       if (request.method === "GET" && path === `/${grant}`) return page(grant);
       if (grant === "query") {
         if (request.method === "GET" && path === "/query/api/stores") return json(await adapters.read.list(operator));
+        if (request.method === "POST" && (path === "/query/api/browse" || path === "/query/api/preview")) {
+          let input: unknown;
+          try { input = await body(request); } catch (error) { return bodyFailure(error); }
+          if (!object(input) || typeof input.store !== "string" || !adapters.stores.some((store) => store.id === input.store) ||
+              (input.asOf !== undefined && typeof input.asOf !== "string") ||
+              (path.endsWith("/preview") && (typeof input.path !== "string" || !input.path || input.path.length > 4096))) {
+            return refusal("ConsoleRequestMalformed", 400);
+          }
+          let asOf: string | undefined;
+          try { asOf = input.asOf === undefined ? undefined : parseVantage(input.asOf as string); }
+          catch { return refusal("ConsoleVantageUnparseable", 400); }
+          if (!adapters.browse) return refusal("ConsoleAdapterUnavailable", 503);
+          try {
+            return json(path.endsWith("/preview") ?
+              await adapters.browse.preview({ operator, store: input.store, asOf, path: input.path as string }) :
+              await adapters.browse.discover({ operator, store: input.store, asOf }));
+          } catch (error) {
+            if (error instanceof BrowseError) return refusal(error.code, error.code === "ConsoleGalleryPathUnlisted" ? 403 : 400);
+            if (error instanceof ConsoleError) return refusal(error.code, error.status);
+            throw error;
+          }
+        }
         if (request.method === "POST" && path === "/query/api/ask") {
           let input: unknown;
           try { input = await body(request); } catch (error) { return bodyFailure(error); }
@@ -303,11 +331,15 @@ const sharedStyle = `<style>
 :root{font-family:ui-sans-serif,system-ui,sans-serif;color:#182b39;background:#e7edf0}*{box-sizing:border-box}body{margin:0;min-height:100vh}.shell{display:grid;grid-template-columns:210px minmax(0,1fr);min-height:100vh}nav{background:#173b50;color:#eaf4f5;padding:26px 20px}nav strong{font-size:1.3rem;letter-spacing:-.04em}nav a{display:block;color:#eaf4f5;text-decoration:none;margin-top:24px;padding:9px 11px;border-radius:7px}nav a[aria-current]{background:#31657b}main{padding:30px min(5vw,64px);max-width:1200px;width:100%}h1{font-size:clamp(2rem,4vw,3rem);letter-spacing:-.055em;margin:5px 0 12px}h2{font-size:1.1rem}p{line-height:1.5}section{background:#fff;border:1px solid #c8d5da;border-radius:12px;padding:20px;margin:18px 0}button,select,textarea{font:inherit}button{background:#125a72;color:white;border:0;border-radius:7px;padding:10px 16px;cursor:pointer}button:focus-visible,a:focus-visible,select:focus-visible,textarea:focus-visible{outline:3px solid #efae4c;outline-offset:2px}textarea{width:100%;min-height:100px;padding:12px;border:1px solid #91a8b2;border-radius:7px}select{padding:8px;border:1px solid #91a8b2;border-radius:7px}pre{white-space:pre-wrap;overflow-wrap:anywhere}.muted{color:#536b78}.grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:14px}.node{border:1px solid #afc5cf;border-left:5px solid #3c7c92;border-radius:7px;padding:13px;background:#f5f9fa}#transcript article{border-left:3px solid #3c7c92;padding:8px 16px;margin:12px 0}#widgets table{border-collapse:collapse;width:100%}#widgets td,#widgets th{border-bottom:1px solid #c8d5da;padding:8px;text-align:left}@media(max-width:650px){.shell{display:block}nav{display:flex;gap:12px;align-items:center;padding:12px 20px}nav a{margin:0}main{padding:20px}}@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto!important}}
 </style>`;
 
-const queryPage = `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Query · Contextful</title>${sharedStyle}<div class="shell"><nav aria-label="Console"><strong>Contextful</strong><a href="/query" aria-current="page">Query</a><a href="/admin">Admin</a></nav><main><h1>Ask the store</h1><p class="muted">Answers cite the rows your access permits.</p><section><form id="composer"><label for="store">Store</label> <select id="store" required></select><p><label for="question">Question</label></p><textarea id="question" required></textarea><p><button type="submit">Ask question</button></p></form></section><section><h2>Conversation</h2><div id="transcript" role="log" aria-live="polite"><p class="muted">Your answer appears here.</p></div></section><section><h2>Results</h2><div id="widgets"></div></section></main></div><script>
-const form=document.getElementById('composer'),store=document.getElementById('store'),transcript=document.getElementById('transcript'),widgets=document.getElementById('widgets');
-fetch('/query/api/stores').then(r=>r.json()).then(rows=>{for(const row of rows){const option=document.createElement('option');option.value=row.id;option.textContent=row.label;store.append(option)}});
+const queryPage = `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Query · Contextful</title>${sharedStyle}<div class="shell"><nav aria-label="Console"><strong>Contextful</strong><a href="/query" aria-current="page">Query</a><a href="/admin">Admin</a></nav><main><h1>Ask the store</h1><p class="muted">Answers cite the rows your access permits.</p><section><label for="store">Store</label> <select id="store" required></select> <label for="as-of">As of</label> <input id="as-of" type="date"><p id="browse-status" role="status"></p><h2>Explore</h2><div id="chips" class="grid"></div><div id="insights" class="grid"></div><h2>Files</h2><div id="file-gallery" class="grid"></div><div id="file-preview"></div></section><section><form id="composer"><p><label for="question">Question</label></p><textarea id="question" required></textarea><p><button type="submit">Ask question</button></p></form></section><section><h2>Conversation</h2><div id="transcript" role="log" aria-live="polite"><p class="muted">Your answer appears here.</p></div></section><section><h2>Results</h2><div id="widgets"></div></section></main></div><script>
+const form=document.getElementById('composer'),store=document.getElementById('store'),asOf=document.getElementById('as-of'),questionField=document.getElementById('question'),transcript=document.getElementById('transcript'),widgets=document.getElementById('widgets'),chips=document.getElementById('chips'),insights=document.getElementById('insights'),gallery=document.getElementById('file-gallery'),filePreview=document.getElementById('file-preview'),browseStatus=document.getElementById('browse-status');
+async function post(path,payload){const response=await fetch(path,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(payload)});const value=await response.json();if(!response.ok)throw new Error(value.error?.identifier??'Request failed');return value}
+function current(){return {store:store.value,...(asOf.value?{asOf:asOf.value}:{})}}
 function draw(widget){const props=widget.props??{};if(widget.component==='table.v1'&&Array.isArray(props.columns)&&Array.isArray(props.rows)){const table=document.createElement('table'),head=document.createElement('thead'),header=document.createElement('tr'),body=document.createElement('tbody');for(const column of props.columns){const cell=document.createElement('th');cell.textContent=String(column);header.append(cell)}head.append(header);for(const row of props.rows){const line=document.createElement('tr');for(const value of row){const cell=document.createElement('td');cell.textContent=String(value??'');line.append(cell)}body.append(line)}table.append(head,body);return table}if(widget.component==='metric.v1'){const metric=document.createElement('p');metric.style.fontSize='2rem';metric.textContent=String(props.value??'');return metric}const fallback=document.createElement('pre');fallback.textContent=JSON.stringify(props,null,2);return fallback}
-form.addEventListener('submit',async event=>{event.preventDefault();const question=document.getElementById('question').value.trim();if(!question)return;const response=await fetch('/query/api/ask',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({store:store.value,question})});const answer=await response.json();transcript.replaceChildren();const item=document.createElement('article');item.textContent=question+'\n'+(answer.answer??answer.error?.identifier??'No answer');transcript.append(item);widgets.replaceChildren();for(const widget of answer.widgets??[])widgets.append(draw(widget));if(answer.sources?.length){const sources=document.createElement('p');sources.textContent='Sources: '+answer.sources.map(x=>x.title??x.url).join(', ');transcript.append(sources)}});
+async function refreshBrowse(){chips.replaceChildren();insights.replaceChildren();gallery.replaceChildren();filePreview.replaceChildren();browseStatus.textContent='';if(!store.value)return;try{const data=await post('/query/api/browse',current());for(const chip of data.chips??[]){const button=document.createElement('button');button.type='button';button.textContent=chip.label;button.title=chip.description??'';button.addEventListener('click',()=>{questionField.value='Tell me about '+chip.label;questionField.focus()});chips.append(button)}for(const insight of data.insights??[]){const card=document.createElement('p');card.textContent=insight.label+': '+insight.rows+' rows';insights.append(card)}for(const file of data.files??[]){const button=document.createElement('button');button.type='button';button.textContent=file.label;button.addEventListener('click',async()=>{filePreview.replaceChildren();try{const preview=await post('/query/api/preview',{...current(),path:file.path});filePreview.append(draw({component:'table.v1',props:preview}))}catch(error){browseStatus.textContent=String(error)}});gallery.append(button)}}catch(error){browseStatus.textContent=String(error)}}
+fetch('/query/api/stores').then(r=>r.json()).then(rows=>{for(const row of rows){const option=document.createElement('option');option.value=row.id;option.textContent=row.label;store.append(option)}void refreshBrowse()});
+store.addEventListener('change',()=>{void refreshBrowse()});asOf.addEventListener('change',()=>{void refreshBrowse()});
+form.addEventListener('submit',async event=>{event.preventDefault();const question=questionField.value.trim();if(!question)return;const response=await fetch('/query/api/ask',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({store:store.value,question})});const answer=await response.json();transcript.replaceChildren();const item=document.createElement('article');item.textContent=question+'\\n'+(answer.answer??answer.error?.identifier??'No answer');transcript.append(item);widgets.replaceChildren();for(const widget of answer.widgets??[])widgets.append(draw(widget));if(answer.sources?.length){const sources=document.createElement('p');sources.textContent='Sources: '+answer.sources.map(x=>x.title??x.url).join(', ');transcript.append(sources)}});
 </script></html>`;
 
 const adminPage = `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Admin · Contextful</title>${sharedStyle}<div class="shell"><nav aria-label="Console"><strong>Contextful</strong><a href="/query">Query</a><a href="/admin" aria-current="page">Admin</a></nav><main><h1>Store operations</h1><p class="muted">Pipelines, schedules, steps and run outcomes come from the store.</p><section><h2>Workflow canvas</h2><div id="canvas" class="grid"></div></section><section><h2>Operational record</h2><div id="record"></div></section><section><h2>Control document</h2><label for="document">Document</label><textarea id="document"></textarea><p><button id="edit">Edit</button> <button id="apply">Apply</button></p><p id="result" role="status"></p></section></main></div><script>
diff --git a/apps/console/src/live.ts b/apps/console/src/live.ts
index 7f5f3119d..0be43193f 100644
--- a/apps/console/src/live.ts
+++ b/apps/console/src/live.ts
@@ -1,8 +1,22 @@
 import type { StoreEntry } from "../../gateway/src/index.ts";
 import type { TurnInput, TurnResult } from "./index.ts";
-import { ConsoleError, createTurn, resolveReaderCredential, type Source, type ToolResult } from "./turn.ts";
+import { ConsoleError, createTurn, resolveReaderCredential, StreamingRedactor, type Source, type ToolResult } from "./turn.ts";
 
-type LiveOptions = { stores: StoreEntry[]; env: NodeJS.ProcessEnv; fetcher?: typeof fetch };
+export type LiveOptions = { stores: StoreEntry[]; env: NodeJS.ProcessEnv; fetcher?: typeof fetch };
+
+export function consoleDenylist(env: NodeJS.ProcessEnv): string[] {
+  if (!env.CONTEXTFUL_CONSOLE_DENYLIST) return [];
+  const parsed: unknown = JSON.parse(env.CONTEXTFUL_CONSOLE_DENYLIST);
+  if (!Array.isArray(parsed) || !parsed.every((entry) => typeof entry === "string")) throw new Error("ConsoleDenylistMalformed");
+  return parsed;
+}
+
+export function redactText(value: string, denylist: string[]): string {
+  const long = denylist.filter((entry) => entry.length > 128);
+  const exact = long.reduce((text, entry) => text.replaceAll(entry, "[redacted]"), value);
+  const redactor = new StreamingRedactor(denylist.filter((entry) => entry.length <= 128));
+  return redactor.push(exact) + redactor.finish();
+}
 
 function record(value: unknown): value is Record<string, unknown> {
   return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -42,11 +56,7 @@ function source(columns: string[], row: unknown[], table: string): Source | null
     ...(typeof url === "string" && /^https?:\/\//.test(url) ? { url } : {}) };
 }
 
-export function createLiveTurn({ stores, env, fetcher = fetch }: LiveOptions): (input: TurnInput) => Promise<TurnResult> {
-  const modelEndpoint = env.CONTEXTFUL_MODEL_ENDPOINT;
-  const modelId = env.CONTEXTFUL_MODEL_ID;
-  if (!modelEndpoint || !modelId) throw new Error("ConsoleModelUnconfigured");
-  return async (input) => {
+export async function openReader({ stores, env, fetcher = fetch }: LiveOptions, input: Pick<TurnInput, "operator" | "store">) {
     const store = stores.find((entry) => entry.id === input.store);
     if (!store) throw new ConsoleError("ConsoleRequestMalformed");
     const shared = env[store.credentialName];
@@ -88,12 +98,25 @@ export function createLiveTurn({ stores, env, fetcher = fetch }: LiveOptions): (
       return message.result.structuredContent;
     };
 
+    return { store, call, credential };
+}
+
+export function createLiveTurn(options: LiveOptions): (input: TurnInput) => Promise<TurnResult> {
+  const { env, fetcher = fetch } = options;
+  const modelEndpoint = env.CONTEXTFUL_MODEL_ENDPOINT;
+  const modelId = env.CONTEXTFUL_MODEL_ID;
+  if (!modelEndpoint || !modelId) throw new Error("ConsoleModelUnconfigured");
+  const configuredDenylist = consoleDenylist(env);
+  return async (input) => {
+    const { store, call, credential } = await openReader(options, input);
+    const denylist = [...configuredDenylist, credential, ...(input.operator.assertion ? [input.operator.assertion] : [])];
     const description = await call("context.describe", {});
     const selected = selectTable(input.question, description.tables);
     if (!selected) throw new ConsoleError("ConsoleUngroundedAnswer", "No data table matches this question.");
     const tables = [selected];
     let remainingSources = 8;
     const turn = createTurn({
+      denylist: denylist.filter((entry) => entry.length <= 128),
       tools: tables.map((table) => ({ name: `read:${table}`, pack: "data", kind: "read" as const, table })),
       tables: tables.map((name) => ({ name, kind: "data" as const })),
       planner: async ({ previous }) => previous.length ? [] : tables.map((table) => ({ tool: `read:${table}`, arguments: {} })),
@@ -106,7 +129,8 @@ export function createLiveTurn({ stores, env, fetcher = fetch }: LiveOptions): (
         remainingSources -= sourced.length;
         return {
           rows: sourced.map(({ row }) => Object.fromEntries(columns.map((column, index) => [column, row[index]]))),
-          sources: sourced.map(({ citation }) => citation),
+          sources: sourced.map(({ citation }) => ({ ...citation, label: redactText(citation.label, denylist),
+            url: citation.url && !denylist.some((entry) => entry && citation.url!.includes(entry)) ? citation.url : undefined })),
         };
       } },
       synthesize: async function* ({ question, results, sources }) {
@@ -122,7 +146,7 @@ export function createLiveTurn({ stores, env, fetcher = fetch }: LiveOptions): (
         const choices = record(body) && Array.isArray(body.choices) ? body.choices : [];
         const message = choices.length && record(choices[0]) ? choices[0].message : undefined;
         if (!record(message) || typeof message.content !== "string") throw new ConsoleError("ConsoleModelUnavailable", "model answer absent", 503);
-        yield message.content;
+        yield redactText(message.content, denylist);
       },
     });
     const answer = await turn.ask({ question: input.question, packs: ["data"], store: store.id });
diff --git a/apps/console/src/live_browse.ts b/apps/console/src/live_browse.ts
new file mode 100644
index 000000000..3d02275c6
--- /dev/null
+++ b/apps/console/src/live_browse.ts
@@ -0,0 +1,21 @@
+import type { Operator } from "./index.ts";
+import { createBrowse } from "./browse.ts";
+import { openReader, type LiveOptions } from "./live.ts";
+
+type BrowseInput = { operator: Operator; store: string; asOf?: string };
+
+export function createLiveBrowse(options: LiveOptions) {
+  async function session(input: BrowseInput) {
+    const { call } = await openReader(options, input);
+    return createBrowse({ call: async (name, args) => ({ structuredContent: await call(name, args) }) });
+  }
+
+  return {
+    async discover(input: BrowseInput) {
+      return (await session(input)).discover({ asOf: input.asOf });
+    },
+    async preview(input: BrowseInput & { path: string }) {
+      return (await session(input)).preview({ asOf: input.asOf, path: input.path });
+    },
+  };
+}
diff --git a/apps/console/test/browse.test.ts b/apps/console/test/browse.test.ts
new file mode 100644
index 000000000..38bfb7f34
--- /dev/null
+++ b/apps/console/test/browse.test.ts
@@ -0,0 +1,75 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { BrowseError, createBrowse, humanizeLabel } from "../src/browse.ts";
+
+function fixture() {
+  const calls: Array<{ tool: string; arguments: Record<string, unknown> }> = [];
+  const transport = {
+    async call(tool: string, args: Record<string, unknown>) {
+      calls.push({ tool, arguments: args });
+      if (tool === "context.describe" && !args.table) return { structuredContent: {
+        tables: [
+          { table: "research/vendor_filings", description: "Filed reports", zone_admitted: true },
+          { table: "research/private_payroll", description: "Restricted", zone_admitted: false },
+        ],
+      } };
+      if (tool === "context.describe") return { structuredContent: { table: args.table, row_count: 3 } };
+      if (tool === "context.files") return { structuredContent: {
+        columns: ["table", "path"],
+        rows: [
+          ["research/vendor_filings", "research/vendor_filings/runs/run-1/report.parquet"],
+          ["research/private_payroll", "research/private_payroll/runs/run-1/secret.parquet"],
+        ],
+      } };
+      if (tool === "context.file") return { structuredContent: { columns: ["title"], rows: [["Q1 report"]] } };
+      throw new Error(`unexpected tool ${tool}`);
+    },
+  };
+  return { browse: createBrowse(transport), calls };
+}
+
+// spec: surface.browse.discovered-chips@def23028
+test("browse advertises admitted tables as humanized chips", async () => {
+  const { browse, calls } = fixture();
+  const result = await browse.discover({ asOf: "2030-01-01T00:00:00Z" });
+  assert.deepEqual(result.chips, [{ table: "research/vendor_filings", label: "Vendor Filings", description: "Filed reports" }]);
+  assert.deepEqual(result.files, [{ table: "research/vendor_filings", path: "research/vendor_filings/runs/run-1/report.parquet", label: "Report" }]);
+  assert.equal(calls[0].tool, "context.describe");
+  assert.equal(calls[0].arguments.as_of, "2030-01-01T00:00:00Z");
+  assert(calls.every((call) => call.tool.startsWith("context.")));
+  assert(!calls.some((call) => call.arguments.table === "research/private_payroll"));
+});
+
+// spec: surface.browse.insights-panel@b1d70f29
+test("insights show governed table row counts", async () => {
+  const { browse } = fixture();
+  const result = await browse.discover({});
+  assert.deepEqual(result.insights, [{ table: "research/vendor_filings", label: "Vendor Filings", rows: 3 }]);
+});
+
+// spec: surface.browse.gallery-path-unlisted@d8eb9504
+test("a gallery preview refuses paths absent from the governed listing", async () => {
+  const { browse, calls } = fixture();
+  await assert.rejects(browse.preview({ path: "research/vendor_filings/runs/run-1/other.parquet" }),
+    (error: unknown) => error instanceof BrowseError && error.code === "ConsoleGalleryPathUnlisted");
+  assert(!calls.some((call) => call.tool === "context.file"));
+});
+
+// spec: surface.browse.file-gallery@4cfe68e1
+test("a gallery preview uses context.file with the listing's snapshot bound", async () => {
+  const { browse, calls } = fixture();
+  const preview = await browse.preview({ path: "research/vendor_filings/runs/run-1/report.parquet", asOf: "2030-01-01T00:00:00Z" });
+  assert.deepEqual(preview, { columns: ["title"], rows: [["Q1 report"]] });
+  assert.deepEqual(calls.at(-1), { tool: "context.file", arguments: { path: "research/vendor_filings/runs/run-1/report.parquet", limit: 100, as_of: "2030-01-01T00:00:00Z" } });
+});
+
+test("in-band read refusals remain errors", async () => {
+  const browse = createBrowse({ call: async () => ({ isError: true, structuredContent: { error: { identifier: "EnforceUnknownRelation" } } }) });
+  await assert.rejects(browse.discover({}),
+    (error: unknown) => error instanceof BrowseError && error.code === "EnforceUnknownRelation");
+});
+
+test("human labels handle separators and acronyms without adding prompts", () => {
+  assert.equal(humanizeLabel("reports/q3_sec_filings"), "Q3 SEC Filings");
+  assert.equal(humanizeLabel("customer-orders"), "Customer Orders");
+});
diff --git a/apps/console/test/browse_hosted.test.ts b/apps/console/test/browse_hosted.test.ts
new file mode 100644
index 000000000..afc8c049c
--- /dev/null
+++ b/apps/console/test/browse_hosted.test.ts
@@ -0,0 +1,51 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { createConsole, issueCognitoSession } from "../src/index.ts";
+
+function hosted() {
+  const calls: string[] = [];
+  const app = createConsole({
+    identity: { kind: "cognito", sessionSecret: "session-secret", queryGroup: "query", adminGroup: "admin" },
+    stores: [{ id: "field-notes", label: "Field notes" }],
+    turn: async () => ({ answer: "", sources: [], widgets: [] }),
+    read: { list: async () => [] },
+    browse: {
+      discover: async ({ operator, store, asOf }) => { calls.push(`discover:${operator.subject}:${store}:${asOf ?? ""}`); return {
+        chips: [{ table: "filings", label: "Filings" }], insights: [{ table: "filings", label: "Filings", rows: 3 }], files: [{ table: "filings", path: "filings/runs/run-1/report.parquet", label: "Report" }],
+      }; },
+      preview: async ({ operator, store, path, asOf }) => { calls.push(`preview:${operator.subject}:${store}:${path}:${asOf ?? ""}`); return { columns: ["id"], rows: [["one"]] }; },
+    },
+    control: { workflows: async () => ({}), record: async () => ({}), edit: async () => ({}), apply: async () => ({}) },
+  });
+  const session = issueCognitoSession({ subject: "reader", groups: ["query"], expiresAt: Math.floor(Date.now() / 1000) + 60 }, "session-secret");
+  const request = (path: string, body?: unknown, origin = "https://console.example") => app.fetch(new Request(`https://console.example${path}`, {
+    method: body === undefined ? "GET" : "POST", headers: { cookie: `console_session=${session}`, origin },
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+  }));
+  return { request, calls };
+}
+
+test("hosted Query exposes bounded same-origin browse and preview routes", async () => {
+  const { request, calls } = hosted();
+  const page = await (await request("/query")).text();
+  for (const id of ["chips", "insights", "file-gallery", "file-preview"]) assert.match(page, new RegExp(`id="${id}"`));
+  assert.match(page, /\/query\/api\/browse/);
+  assert.match(page, /\/query\/api\/preview/);
+  const asOf = "2030-01-01T00:00:00Z";
+  const browse = await request("/query/api/browse", { store: "field-notes", asOf });
+  assert.equal(browse.status, 200);
+  assert.equal((await browse.json() as { chips: unknown[] }).chips.length, 1);
+  const preview = await request("/query/api/preview", { store: "field-notes", path: "filings/runs/run-1/report.parquet", asOf });
+  assert.equal(preview.status, 200);
+  assert.deepEqual((await preview.json() as { rows: unknown[] }).rows, [["one"]]);
+  assert.deepEqual(calls, [`discover:reader:field-notes:${asOf}`, `preview:reader:field-notes:filings/runs/run-1/report.parquet:${asOf}`]);
+});
+
+test("hosted browse rejects foreign origins, invalid bounds, and oversized paths before dispatch", async () => {
+  const { request, calls } = hosted();
+  assert.equal((await request("/query/api/browse", { store: "field-notes" }, "https://foreign.example")).status, 403);
+  assert.equal((await request("/query/api/browse", { store: "field-notes", asOf: "not-a-date" })).status, 400);
+  assert.equal((await request("/query/api/preview", { store: "field-notes", path: "x".repeat(4097) })).status, 400);
+  assert.equal((await request("/query/api/browse", { store: "unknown" })).status, 400);
+  assert.deepEqual(calls, []);
+});
diff --git a/apps/console/test/live.test.ts b/apps/console/test/live.test.ts
index 5e03361c3..c345c4f45 100644
--- a/apps/console/test/live.test.ts
+++ b/apps/console/test/live.test.ts
@@ -5,6 +5,35 @@ import { ConsoleError } from "../src/turn.ts";
 import { createConsole, issueCognitoSession } from "../src/index.ts";
 import type { StoreEntry } from "../../gateway/src/index.ts";
 
+test("Query redacts long denylisted values and credentials from prose and source URLs", async () => {
+  const assertion = "assertion-" + "a".repeat(512);
+  const credential = "credential-" + "c".repeat(512);
+  const denied = "private-" + "p".repeat(256);
+  const fetcher: typeof fetch = async (input, init) => {
+    const url = String(input);
+    if (url.endsWith("/auth/exchange")) return Response.json({ token: credential });
+    if (url.endsWith("/mcp")) {
+      const body = JSON.parse(String(init?.body));
+      const value = body.params.name === "context.describe" ? { tables: [{ table: "filings", kind: "data" }] } : {
+        columns: ["filing_id", "summary", "source_url"],
+        rows: [["filing-1", "A filing arrived", `https://example.test/${credential}`]],
+      };
+      return Response.json({ result: { structuredContent: value } });
+    }
+    return Response.json({ choices: [{ message: { content: `A filing arrived [filing-1]. ${assertion} ${credential} ${denied}` } }] });
+  };
+  const turn = createLiveTurn({ stores: [store], env: {
+    CONTEXTFUL_MODEL_ENDPOINT: "https://model.example/v1", CONTEXTFUL_MODEL_ID: "fixture",
+    CONTEXTFUL_CONSOLE_DENYLIST: JSON.stringify([denied]),
+  }, fetcher });
+  const result = await turn({ operator: { subject: "reader", grants: new Set(["query"]), assertion },
+    store: store.id, question: "Which filing arrived?" });
+  const visible = JSON.stringify(result);
+  for (const secret of [assertion, credential, denied]) assert.equal(visible.includes(secret), false);
+  assert.match(result.answer, /A filing arrived \[source-1\]/);
+  assert.equal((result.sources[0] as { url?: string }).url, undefined);
+});
+
 const store: StoreEntry = {
   id: "field-notes", label: "Field notes", endpoint: "https://store.example",
   auth: "exchange", exchangeRoute: "/auth/exchange", credentialName: "FIELD_NOTES_QUERY_TOKEN",
diff --git a/apps/console/test/live_browse.test.ts b/apps/console/test/live_browse.test.ts
new file mode 100644
index 000000000..bac608105
--- /dev/null
+++ b/apps/console/test/live_browse.test.ts
@@ -0,0 +1,50 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { createLiveBrowse } from "../src/live_browse.ts";
+import { BrowseError } from "../src/browse.ts";
+import type { StoreEntry } from "../../gateway/src/index.ts";
+
+const store: StoreEntry = {
+  id: "field-notes", label: "Field notes", endpoint: "https://store.example",
+  auth: "exchange", exchangeRoute: "/auth/exchange", credentialName: "FIELD_NOTES_QUERY_TOKEN", bindingName: "FIELD_NOTES",
+};
+
+test("live browse uses one exchanged reader credential for governed discovery and preview", async () => {
+  const calls: Array<{ name: string; args: Record<string, unknown>; authorization: string | null }> = [];
+  let exchanges = 0;
+  const fetcher: typeof fetch = async (input, init) => {
+    const url = String(input);
+    if (url.endsWith("/auth/exchange")) { exchanges++; return Response.json({ token: "reader-token" }); }
+    assert.equal(url, "https://store.example/mcp");
+    const body = JSON.parse(String(init?.body)) as { id: number; params: { name: string; arguments: Record<string, unknown> } };
+    calls.push({ name: body.params.name, args: body.params.arguments, authorization: new Headers(init?.headers).get("authorization") });
+    const value = body.params.name === "context.describe" && !body.params.arguments.table ? { tables: [
+      { table: "filings", kind: "data", zone_admitted: true, description: "Filed reports" },
+      { table: "payroll", kind: "data", zone_admitted: false },
+      { table: "insights", kind: "memory", zone_admitted: true },
+    ] } : body.params.name === "context.describe" ? { row_count: 3 } : body.params.name === "context.files" ? {
+      columns: ["table", "path"], rows: [["filings", "filings/runs/run-1/report.parquet"], ["payroll", "payroll/runs/run-1/secret.parquet"]],
+    } : body.params.name === "context.file" ? { columns: ["filing_id"], rows: [["filing-1"]] } : null;
+    assert(value);
+    return Response.json({ jsonrpc: "2.0", id: body.id, result: { structuredContent: value } });
+  };
+  const browse = createLiveBrowse({ stores: [store], env: {}, fetcher });
+  const input = { operator: { subject: "reader", grants: new Set(["query" as const]), assertion: "verified-jwt" }, store: store.id,
+    asOf: "2030-01-01T00:00:00Z" };
+  const discovered = await browse.discover(input);
+  assert.deepEqual(discovered.chips.map((chip: { table: string }) => chip.table), ["filings"]);
+  assert.deepEqual(discovered.insights.map((insight: { rows: number }) => insight.rows), [3]);
+  assert.deepEqual(discovered.files.map((file: { path: string }) => file.path), ["filings/runs/run-1/report.parquet"]);
+  assert.equal(exchanges, 1);
+  assert(calls.every((call) => call.authorization === "Bearer reader-token"));
+  assert(calls.every((call) => call.args.as_of === input.asOf));
+  const preview = await browse.preview({ ...input, path: "filings/runs/run-1/report.parquet" });
+  assert.deepEqual(preview, { columns: ["filing_id"], rows: [["filing-1"]] });
+  assert.equal(exchanges, 2);
+  assert.equal(calls.at(-1)?.name, "context.file");
+  const before = calls.length;
+  await assert.rejects(browse.preview({ ...input, path: "filings/runs/run-1/other.parquet" }),
+    (error: unknown) => error instanceof BrowseError && error.code === "ConsoleGalleryPathUnlisted");
+  assert.equal(calls.filter((call) => call.name === "context.file").length, 1);
+  assert(calls.length > before, "the refusal rechecks the governed file list");
+});
diff --git a/crates/contextful-cli/tests/integration/serve.rs b/crates/contextful-cli/tests/integration/serve.rs
index 01f436f66..277fdeecd 100644
--- a/crates/contextful-cli/tests/integration/serve.rs
+++ b/crates/contextful-cli/tests/integration/serve.rs
@@ -14,6 +14,85 @@ use std::sync::atomic::{AtomicU64, Ordering};
 
 const AUD: &str = "contextful://acme-research";
 
+/// One bounded Content-Length response ends at its body, so a later TCP reset has
+/// no bearing on the HTTP answer; a reset or EOF inside the frame remains an error.
+fn exchange_response(stream: &mut impl Read) -> std::io::Result<String> {
+    let invalid = |message| std::io::Error::new(std::io::ErrorKind::InvalidData, message);
+    let mut raw = Vec::new();
+    while !raw.ends_with(b"\r\n\r\n") {
+        if raw.len() == 8192 { return Err(invalid("the test response head exceeds 8 KiB")); }
+        let mut byte = [0];
+        stream.read_exact(&mut byte)?;
+        raw.push(byte[0]);
+    }
+    let head = std::str::from_utf8(&raw).map_err(|_| invalid("the response head is not UTF-8"))?;
+    let mut lines = head.split("\r\n");
+    let mut status = lines.next().unwrap_or_default().split_whitespace();
+    if status.next() != Some("HTTP/1.1") ||
+        !status.next().is_some_and(|code| code.len() == 3 && code.bytes().all(|b| b.is_ascii_digit())) {
+        return Err(invalid("the response status does not parse"));
+    }
+    let mut length = None;
+    for line in lines.filter(|line| !line.is_empty()) {
+        let (name, value) = line.split_once(':').ok_or_else(|| invalid("the response header does not parse"))?;
+        if name.eq_ignore_ascii_case("Transfer-Encoding") {
+            return Err(invalid("the test response requires Content-Length framing"));
+        }
+        if name.eq_ignore_ascii_case("Content-Length") {
+            let value = value.trim();
+            if length.is_some() || value.is_empty() || !value.bytes().all(|b| b.is_ascii_digit()) {
+                return Err(invalid("the response length is ambiguous or malformed"));
+            }
+            length = Some(value.parse::<usize>().map_err(|_| invalid("the response length exceeds usize"))?);
+        }
+    }
+    let length = length.ok_or_else(|| invalid("the response has no Content-Length"))?;
+    if length > 1024 * 1024 { return Err(invalid("the test response body exceeds 1 MiB")); }
+    let start = raw.len();
+    raw.resize(start + length, 0);
+    stream.read_exact(&mut raw[start..])?;
+    String::from_utf8(raw).map_err(|_| invalid("the response is not UTF-8"))
+}
+
+struct ResetAfter(std::io::Cursor<Vec<u8>>);
+
+impl Read for ResetAfter {
+    fn read(&mut self, out: &mut [u8]) -> std::io::Result<usize> {
+        match self.0.read(out)? {
+            0 => Err(std::io::ErrorKind::ConnectionReset.into()),
+            n => Ok(n),
+        }
+    }
+}
+
+#[test]
+fn exchange_response_reads_one_complete_frame_before_a_later_reset() {
+    let wire = b"HTTP/1.1 404 Not Found\r\nContent-Length: 2\r\n\r\n{}";
+    assert_eq!(exchange_response(&mut &wire[..]).unwrap(), std::str::from_utf8(wire).unwrap());
+    assert_eq!(exchange_response(&mut ResetAfter(std::io::Cursor::new(wire.to_vec()))).unwrap(), std::str::from_utf8(wire).unwrap());
+}
+
+#[test]
+fn exchange_response_refuses_truncated_headers_and_bodies() {
+    for wire in [b"HTTP/1.1 404 Not Found\r\nContent-Length: 2\r\n".as_slice(),
+        b"HTTP/1.1 404 Not Found\r\nContent-Length: 2\r\n\r\n{".as_slice()] {
+        assert!(exchange_response(&mut &wire[..]).is_err(), "EOF inside a frame refuses");
+        assert!(exchange_response(&mut ResetAfter(std::io::Cursor::new(wire.to_vec()))).is_err(), "a reset inside a frame refuses");
+    }
+}
+
+#[test]
+fn exchange_response_refuses_ambiguous_or_unbounded_framing() {
+    for head in ["not-http\r\nContent-Length: 0", "HTTP/1.1 404 Not Found",
+        "HTTP/1.1 404 Not Found\r\nContent-Length: 0\r\nContent-Length: 0",
+        "HTTP/1.1 404 Not Found\r\nContent-Length: -1",
+        "HTTP/1.1 404 Not Found\r\nContent-Length: 1048577",
+        "HTTP/1.1 404 Not Found\r\nContent-Length: 0\r\nTransfer-Encoding: chunked"] {
+        assert!(exchange_response(&mut format!("{head}\r\n\r\n").as_bytes()).is_err(), "{head}");
+    }
+    assert!(exchange_response(&mut vec![b'x'; 8193].as_slice()).is_err());
+}
+
 fn run(dir: &Path, args: &[&str]) -> Output {
     Command::new(env!("CARGO_BIN_EXE_contextful"))
         .args(args)
@@ -114,8 +193,7 @@ fn served_exchange_without_policy_returns_the_unconfigured_refusal() {
     let body = "not-json";
     let mut stream = TcpStream::connect(&addr).unwrap();
     write!(stream, "POST /auth/exchange HTTP/1.1\r\nContent-Type: application/json\r\nContent-Length: {}\r\n\r\n{body}", body.len()).unwrap();
-    let mut raw = String::new();
-    stream.read_to_string(&mut raw).unwrap();
+    let raw = exchange_response(&mut stream).unwrap();
     let (head, data) = raw.split_once("\r\n\r\n").unwrap();
     assert_eq!(head.split(' ').nth(1), Some("404"));
     let answer: Value = serde_json::from_str(data).unwrap();
@@ -123,8 +201,7 @@ fn served_exchange_without_policy_returns_the_unconfigured_refusal() {
     let mut stream = TcpStream::connect(&addr).unwrap();
     stream.set_read_timeout(Some(std::time::Duration::from_secs(2))).unwrap();
     write!(stream, "POST /auth/exchange HTTP/1.1\r\nContent-Type: application/json\r\nContent-Length: 100\r\n\r\n").unwrap();
-    let mut raw = String::new();
-    stream.read_to_string(&mut raw).expect("unconfigured exchange answers before waiting for its body");
+    let raw = exchange_response(&mut stream).expect("unconfigured exchange answers before waiting for its body");
     assert!(raw.starts_with("HTTP/1.1 404"), "{raw}");
 }
 
@@ -149,8 +226,7 @@ fn served_exchange_mints_a_reader_credential_for_the_read_face() {
         let body = json!({ "jwt": jwt }).to_string();
         let mut stream = TcpStream::connect(&addr).unwrap();
         write!(stream, "POST /auth/exchange HTTP/1.1\r\nContent-Type: application/json\r\nContent-Length: {}\r\n\r\n{body}", body.len()).unwrap();
-        let mut raw = String::new();
-        stream.read_to_string(&mut raw).unwrap();
+        let raw = exchange_response(&mut stream).unwrap();
         let (head, data) = raw.split_once("\r\n\r\n").unwrap();
         (head.split(' ').nth(1).unwrap().parse::<u16>().unwrap(), serde_json::from_str::<Value>(data).unwrap())
     };
diff --git a/crates/contextful-context/tests/integration/read/respond.rs b/crates/contextful-context/tests/integration/read/respond.rs
index cf117ea0c..20c3a1552 100644
--- a/crates/contextful-context/tests/integration/read/respond.rs
+++ b/crates/contextful-context/tests/integration/read/respond.rs
@@ -14,8 +14,9 @@ fn restriction(r: &Response) -> &Value {
 }
 
 fn expensive_statement() -> String {
-    let tables = (0..14).map(|i| format!("\"research/notes\" t{i}")).collect::<Vec<_>>().join(", ");
-    format!("SELECT sum(random()) FROM {tables}")
+    // Four materialized arms execute 96^4 random evaluations under the statement deadline.
+    let rows = (0..32).map(|_| "SELECT note_id FROM \"research/notes\"").collect::<Vec<_>>().join(" UNION ALL ");
+    format!("WITH work AS MATERIALIZED ({rows}) SELECT sum(random()) FROM work t0, work t1, work t2, work t3")
 }
 
 // spec: read.respond.duration-ceiling@cfa152d7
diff --git a/spec/71-console.md b/spec/71-console.md
index d16cf41b5..6f6981002 100644
--- a/spec/71-console.md
+++ b/spec/71-console.md
@@ -276,6 +276,19 @@ A session's time basis: its vantage, the bound each leg carries, the snapshot ti
 
 What a store advertises before a question: discovered chips, humanized labels, the insights panel and the file gallery.
 
+- `discovered-chips` — Query builds pre-question chips from described tables admitted to the reader's zone and humanizes their table labels.
+  *A-surface*
+- `insights-panel` — The insights panel presents row counts returned by the reader's table descriptions.
+  *because a row count from the read face already reflects the reader's relation*
+- `file-gallery` — The file gallery presents only paths returned by the reader's governed file listing and previews them through the read face.
+  *P5*
+- `gallery-path-unlisted` — A gallery preview naming a path absent from the governed file listing under the request's `as_of` raises `ConsoleGalleryPathUnlisted` before preview dispatch.
+  *because the browser must not turn an arbitrary path into a store read*
+
+#### Scenarios
+
+- `surface.browse.gallery-path-unlisted`: WHEN a Query client requests a path absent from the reader's bound file listing, THEN it raises `ConsoleGalleryPathUnlisted` without a preview call.
+
 ## learn
 
 The reading loop's memory: recall ahead of planning, the per-turn distillation and the labels its conclusions inherit.
diff --git a/spec/cards/surface.md b/spec/cards/surface.md
index a4c8ee8e4..741bd68ee 100644
--- a/spec/cards/surface.md
+++ b/spec/cards/surface.md
@@ -21,7 +21,7 @@ Generated by `contextful-spec state` from the contract's files and `spec/terms/s
 | `ground` | Where an answer's material comes from: the closed tool set, the two trust layers, the per-reader credential, the web supplement and the sources block. | 8 |
 | `plan-turn` | The shape of one turn: planner scaffolding, the replanning round, the answerability test, the code path, and the store's prompt overlay. | 6 |
 | `set-vantage` | A session's time basis: its vantage, the bound each leg carries, the snapshot timeline and the arrivals strip. | 3 |
-| `browse` | What a store advertises before a question: discovered chips, humanized labels, the insights panel and the file gallery. | 0 |
+| `browse` | What a store advertises before a question: discovered chips, humanized labels, the insights panel and the file gallery. | 4 |
 | `learn` | The reading loop's memory: recall ahead of planning, the per-turn distillation and the labels its conclusions inherit. | 3 |
 | `render` | The three channels, the component union, deterministic component choice, view hints and the sanitizer walk. | 3 |
 | `brief` | The proactive greeting card: its derivation, payload, matching tiers, client-side clock and the absence it earns. | 6 |
@@ -78,6 +78,7 @@ Generated by `contextful-spec state` from the contract's files and `spec/terms/s
 | `ConsolePlannerReachedMemory` | Planner scaffolding naming a memory relation. | `surface.plan-turn.planner-reached-memory` |
 | `ConsoleVantageUnparseable` | A vantage that is neither a calendar day nor an instant. | `surface.set-vantage.unparseable` |
 | `ConsoleWebBoundUnparseable` | A web leg whose publication bound does not parse. | `surface.set-vantage.web-bound-unparseable` |
+| `ConsoleGalleryPathUnlisted` | A gallery preview path absent from the reader's governed file listing. | `surface.browse.gallery-path-unlisted` |
 | `ConsoleLearningUnscoped` | A distilled conclusion landing without the reading-session scope. | `surface.learn.unscoped` |
 | `ConsoleViewNotServerBuilt` | A view from a client or the model rather than inferred from a result. | `surface.render.client-authored-view` |
 | `ConsoleBriefUnavailable` | A greeting derivation that errored or overran its budget. | `surface.brief.absence-is-earned` |
diff --git a/spec/pins.toml b/spec/pins.toml
index 53044815a..136b35f3d 100644
--- a/spec/pins.toml
+++ b/spec/pins.toml
@@ -88,7 +88,7 @@
 # its live performed count, and a live count below its floor raises SpecCoverageRegression.
 
 [floor]
-assurance = 141
+assurance = 142
 authority = 207
 connector = 229
 corpus = 43
@@ -96,5 +96,5 @@ disclosure = 63
 read = 178
 run = 306
 store = 216
-surface = 62
+surface = 72
 topology = 38
diff --git a/spec/spec.lock.json b/spec/spec.lock.json
index 882ecab71..57e63f542 100644
--- a/spec/spec.lock.json
+++ b/spec/spec.lock.json
@@ -20687,6 +20687,53 @@
       "file": "spec/71-console.md",
       "line": 273
     },
+    {
+      "id": "surface.browse.discovered-chips",
+      "contract": "surface",
+      "operation": "browse",
+      "subject": "discovered-chips",
+      "kind": "behavior",
+      "statement": "Query builds pre-question chips from described tables admitted to the reader's zone and humanizes their table labels.",
+      "why": "A-surface",
+      "file": "spec/71-console.md",
+      "line": 279
+    },
+    {
+      "id": "surface.browse.insights-panel",
+      "contract": "surface",
+      "operation": "browse",
+      "subject": "insights-panel",
+      "kind": "behavior",
+      "statement": "The insights panel presents row counts returned by the reader's table descriptions.",
+      "why": "because a row count from the read face already reflects the reader's relation",
+      "file": "spec/71-console.md",
+      "line": 281
+    },
+    {
+      "id": "surface.browse.file-gallery",
+      "contract": "surface",
+      "operation": "browse",
+      "subject": "file-gallery",
+      "kind": "behavior",
+      "statement": "The file gallery presents only paths returned by the reader's governed file listing and previews them through the read face.",
+      "why": "P5",
+      "file": "spec/71-console.md",
+      "line": 283
+    },
+    {
+      "id": "surface.browse.gallery-path-unlisted",
+      "contract": "surface",
+      "operation": "browse",
+      "subject": "gallery-path-unlisted",
+      "kind": "refusal",
+      "statement": "A gallery preview naming a path absent from the governed file listing under the request's `as_of` raises `ConsoleGalleryPathUnlisted` before preview dispatch.",
+      "why": "because the browser must not turn an arbitrary path into a store read",
+      "file": "spec/71-console.md",
+      "line": 285,
+      "scenarios": [
+        "WHEN a Query client requests a path absent from the reader's bound file listing, THEN it raises `ConsoleGalleryPathUnlisted` without a preview call."
+      ]
+    },
     {
       "id": "surface.learn.distillation",
       "contract": "surface",
@@ -20696,7 +20743,7 @@
       "statement": "After the answer streams, a second pass distils the exchange into at most 3 entries shaped `{subject, key, learning}`, zero included.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 283
+      "line": 296
     },
     {
       "id": "surface.learn.unscoped",
@@ -20707,7 +20754,7 @@
       "statement": "A distilled conclusion landing without the reading-session scope raises `ConsoleLearningUnscoped`.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 284
+      "line": 297
     },
     {
       "id": "surface.learn.subject-resolution",
@@ -20718,7 +20765,7 @@
       "statement": "Distillation preserves the subject it observes; recall resolves that subject through entity matching.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 286
+      "line": 299
     },
     {
       "id": "surface.render.client-authored-view",
@@ -20729,7 +20776,7 @@
       "statement": "A view specification arriving from a client, or composed by the model, raises `ConsoleViewNotServerBuilt`.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 293
+      "line": 306
     },
     {
       "id": "surface.render.component-choice",
@@ -20740,7 +20787,7 @@
       "statement": "One row with one measure draws a metric; a date column with a measure over 3 rows on distinct days draws a line; anything else draws a table offering a bar view.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 295
+      "line": 308
     },
     {
       "id": "surface.render.older-transcript",
@@ -20751,7 +20798,7 @@
       "statement": "A client reading a transcript with an unknown component-union member renders its view as a table.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 296
+      "line": 309
     },
     {
       "id": "surface.brief.absence-is-earned",
@@ -20762,7 +20809,7 @@
       "statement": "The card needs a session with no turns, at present time, a live conclusion, an arrived row matching an interest, and a derivation inside its budget. An error or timeout raises `ConsoleBriefUnavailable`, and no card renders.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 332
+      "line": 345
     },
     {
       "id": "surface.brief.topic-tier",
@@ -20773,7 +20820,7 @@
       "statement": "The topic tier needs at least 2 tokens shared between the conclusion's subject and text and the row's label and topics, one of them naming the subject.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 334
+      "line": 347
     },
     {
       "id": "surface.brief.card-subjects",
@@ -20784,7 +20831,7 @@
       "statement": "A card carries at most 3 subjects.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 335
+      "line": 348
     },
     {
       "id": "surface.brief.articles-per-subject",
@@ -20795,7 +20842,7 @@
       "statement": "A subject carries at most 3 entries of matched article.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 336
+      "line": 349
     },
     {
       "id": "surface.brief.catchup-window",
@@ -20806,7 +20853,7 @@
       "statement": "The backend caps the requested window at 7 d.",
       "why": "",
       "file": "spec/71-console.md",
-      "line": 337
+      "line": 350
     },
     {
       "id": "surface.brief.greeting",
@@ -20817,7 +20864,7 @@
       "statement": "Query derives a greeting card from arrived rows matching live conclusions in a turnless present-time session.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 338
+      "line": 351
     },
     {
       "id": "surface.publish-answer.share-affordance",
@@ -20828,7 +20875,7 @@
       "statement": "A surface offering a share control on access-explanation output raises `VisibilityShareAffordance`.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 345
+      "line": 358
     },
     {
       "id": "surface.publish-answer.askerless-audience",
@@ -20839,7 +20886,7 @@
       "statement": "A scheduled job posting to an audience under a service identity raises `VisibilityAskerlessAudience`, naming the destination; a scheduled post's corpus is narrowed in the reviewed manifest to what the destination reaches.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 347
+      "line": 360
     },
     {
       "id": "surface.publish-answer.one-operator-principal",
@@ -20850,7 +20897,7 @@
       "statement": "An answer uses one operator's credential; the console offers no room-intersection principal.",
       "why": "A-surface",
       "file": "spec/71-console.md",
-      "line": 349
+      "line": 362
     },
     {
       "id": "assurance.model.package",
@@ -29988,6 +30035,10 @@
             "clause": "surface.ground.direct-file-read",
             "gloss": "A table function reading stored bytes by path on the caller surface."
           },
+          "ConsoleGalleryPathUnlisted": {
+            "clause": "surface.browse.gallery-path-unlisted",
+            "gloss": "A gallery preview path absent from the reader's governed file listing."
+          },
           "ConsoleLearningUnscoped": {
             "clause": "surface.learn.unscoped",
             "gloss": "A distilled conclusion landing without the reading-session scope."
diff --git a/spec/status.md b/spec/status.md
index 2d65ed677..4ec215353 100644
--- a/spec/status.md
+++ b/spec/status.md
@@ -5,7 +5,7 @@ An unpinned clause is `committed`; a pinned one is `performed` when its Rust, Le
 
 | Contract | Files | Operations | Clauses | Refusals | Limits | Unsettled | Performed | Broken | Floor |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| `assurance` | 2 | 15 | 246 | 59 | 22 | 14 | 142 | 0 | 141 |
+| `assurance` | 2 | 15 | 246 | 59 | 22 | 14 | 142 | 0 | 142 |
 | `authority` | 2 | 16 | 270 | 77 | 27 | 10 | 207 | 0 | 207 |
 | `connector` | 2 | 14 | 349 | 89 | 21 | 15 | 229 | 0 | 229 |
 | `corpus` | 1 | 10 | 79 | 37 | 7 | 0 | 43 | 0 | 43 |
@@ -13,9 +13,9 @@ An unpinned clause is `committed`; a pinned one is `performed` when its Rust, Le
 | `read` | 2 | 15 | 200 | 31 | 22 | 9 | 178 | 0 | 178 |
 | `run` | 3 | 26 | 406 | 102 | 39 | 28 | 306 | 0 | 306 |
 | `store` | 1 | 17 | 252 | 59 | 13 | 19 | 216 | 0 | 216 |
-| `surface` | 2 | 20 | 114 | 52 | 22 | 0 | 68 | 0 | 62 |
+| `surface` | 2 | 20 | 118 | 53 | 22 | 0 | 72 | 0 | 72 |
 | `topology` | 1 | 6 | 70 | 24 | 5 | 5 | 38 | 0 | 38 |
-| **total** | 19 | 155 | 2120 | 596 | 191 | 103 | 1490 | 0 | |
+| **total** | 19 | 155 | 2124 | 597 | 191 | 103 | 1494 | 0 | |
 
 Decision records: 18.
 
@@ -37,7 +37,7 @@ A milestone reads `closed` when its acceptance test computes `passing` and every
 | 9 — Visibility | 6 | 41 | 3 | open | open |
 | 10 — Cadence and the operator plane | 11 | 76 | 64 | passing | open |
 | 11 — The derive tier | 7 | 88 | 79 | passing | closed |
-| 12 — The operator console | 12 | 49 | 9 | open | open |
+| 12 — The operator console | 12 | 53 | 13 | open | open |
 | 13 — Disclosure | 5 | 33 | 13 | open | open |
 | 14 — Assurance | 7 | 146 | 90 | passing | closed |
 
@@ -1455,6 +1455,10 @@ Unscheduled operations: 10.
 | `surface.arm.unknown-trigger` | `crates/contextful-cli/tests/integration/pipeline.rs::an_unknown_trigger_arms_nothing` | performed |
 | `surface.arm.unreadable-schedule` | `crates/contextful-core/tests/integration/surface/arm.rs::an_unreadable_schedule_names_its_diagnostic` | performed |
 | `surface.arm.wake-answer` | `crates/contextful-cli/tests/integration/pipeline.rs::a_wake_answers_within_its_bound_naming_what_still_runs` | performed |
+| `surface.browse.discovered-chips` | `apps/console/test/browse.test.ts::apps/console/test/browse.test.ts::browse advertises admitted tables as humanized chips` | performed |
+| `surface.browse.file-gallery` | `apps/console/test/browse.test.ts::apps/console/test/browse.test.ts::a gallery preview uses context.file with the listing's snapshot bound` | performed |
+| `surface.browse.gallery-path-unlisted` | `apps/console/test/browse.test.ts::apps/console/test/browse.test.ts::a gallery preview refuses paths absent from the governed listing` | performed |
+| `surface.browse.insights-panel` | `apps/console/test/browse.test.ts::apps/console/test/browse.test.ts::insights show governed table row counts` | performed |
 | `surface.dispatch.callback-rejected` | `crates/contextful-core/tests/integration/surface/worker.rs::a_superseded_or_skewed_callback_changes_no_step` | performed |
 | `surface.dispatch.callback-skew` | `crates/contextful-core/tests/integration/surface/worker.rs::the_relay_accepts_a_timestamp_within_the_skew` | performed |
 | `surface.dispatch.children-reaped` | `crates/contextful-cli/tests/integration/pipeline.rs::serve_ends_every_child_it_dispatched` | performed |
diff --git a/spec/terms/surface.toml b/spec/terms/surface.toml
index acd17c663..332d7837d 100644
--- a/spec/terms/surface.toml
+++ b/spec/terms/surface.toml
@@ -70,6 +70,7 @@ ConsoleTokenExchangeRefused   = { clause = "surface.ground.mint-refused", gloss
 ConsolePlannerReachedMemory   = { clause = "surface.plan-turn.planner-reached-memory", gloss = "Planner scaffolding naming a memory relation." }
 ConsoleVantageUnparseable     = { clause = "surface.set-vantage.unparseable", gloss = "A vantage that is neither a calendar day nor an instant." }
 ConsoleWebBoundUnparseable    = { clause = "surface.set-vantage.web-bound-unparseable", gloss = "A web leg whose publication bound does not parse." }
+ConsoleGalleryPathUnlisted    = { clause = "surface.browse.gallery-path-unlisted", gloss = "A gallery preview path absent from the reader's governed file listing." }
 ConsoleLearningUnscoped       = { clause = "surface.learn.unscoped", gloss = "A distilled conclusion landing without the reading-session scope." }
 ConsoleViewNotServerBuilt     = { clause = "surface.render.client-authored-view", gloss = "A view from a client or the model rather than inferred from a result." }
 ConsoleBriefUnavailable       = { clause = "surface.brief.absence-is-earned", gloss = "A greeting derivation that errored or overran its budget." }
diff --git a/tools/ci/src/main.rs b/tools/ci/src/main.rs
index 4947e0587..5bb579006 100644
--- a/tools/ci/src/main.rs
+++ b/tools/ci/src/main.rs
@@ -478,7 +478,11 @@ fn run_stage(root: &Path, stage: &str, only: Option<&[String]>, base: &str, boun
             workspace(root, only)?
         }
         "acceptance" => acceptance(root)?,
-        "evaluate" => measure::evaluate(root)?,
+        "evaluate" => {
+            provision_lean(root)?;
+            provision_wasm(root)?;
+            measure::evaluate(root)?
+        }
         "features" => features(root, only)?,
         "crate-graph" => {
             committed_lock(root)?;
diff --git a/tools/ci/tests/integration/main.rs b/tools/ci/tests/integration/main.rs
index dd83bc549..0697665cd 100644
--- a/tools/ci/tests/integration/main.rs
+++ b/tools/ci/tests/integration/main.rs
@@ -42,6 +42,9 @@ impl Repo {
         let root = dir.path().to_path_buf();
         let r = Repo { _dir: dir, root };
         r.git(&["init", "-q", "-b", "main"]);
+        r.git(&["config", "--local", "user.name", "t"]);
+        r.git(&["config", "--local", "user.email", "t@example.com"]);
+        r.git(&["config", "--local", "commit.gpgsign", "false"]);
         r.write("Cargo.toml", "[workspace]\nresolver = \"2\"\nmembers = [\"crates/*\"]\n");
         r.write("crates/demo/Cargo.toml", &manifest("demo", ""));
         r.write("crates/demo/src/lib.rs", "pub fn double(x: i32) -> i32 {\n    x * 2\n}\n");
@@ -66,7 +69,6 @@ impl Repo {
 
     pub fn git(&self, args: &[&str]) -> String {
         let out = Command::new("git")
-            .args(["-c", "commit.gpgsign=false", "-c", "user.name=t", "-c", "user.email=t@example.com"])
             .args(args)
             .current_dir(&self.root)
             .output()
diff --git a/tools/ci/tests/integration/stages.rs b/tools/ci/tests/integration/stages.rs
index b6b87b466..812a7bc72 100644
--- a/tools/ci/tests/integration/stages.rs
+++ b/tools/ci/tests/integration/stages.rs
@@ -289,6 +289,41 @@ fn declared_derived_artifact_is_checked_by_schema_stage() {
     assert!(err.contains("schema: spec/custom.md differs from its regeneration"), "{err}");
 }
 
+#[test]
+fn the_evaluate_stage_provisions_required_lean_and_wasm_before_measuring() {
+    const PIN: &str = "leanprover/lean4:fixture";
+    const MEASURED: &str = r###"
+#[test]
+fn required_tools() {
+    assert_eq!(std::env::var("CONTEXTFUL_REQUIRE_LEAN").as_deref(), Ok("1"));
+    assert_eq!(std::env::var("CONTEXTFUL_REQUIRE_WASM").as_deref(), Ok("1"));
+    assert_eq!(std::env::var("ELAN_TOOLCHAIN").as_deref(), Ok("leanprover/lean4:fixture"));
+    let lean = std::process::Command::new("lean").arg("--version").output().unwrap();
+    assert!(lean.status.success());
+    assert_eq!(String::from_utf8(lean.stdout).unwrap().trim(), "fixture Lean");
+    let dir = std::path::PathBuf::from(std::env::var_os("CONTEXTFUL_MEASURE_DIR").unwrap());
+    std::fs::write(dir.join("required-tools.json"), r##"{"id":"required-tools","value":1,"n":1,"seed":7,"run":{"processor":"t","nproc":1,"memory_limit":null}}"##).unwrap();
+}
+"###;
+    let r = Repo::init();
+    r.write("formal/lean-toolchain", &format!("{PIN}\n"));
+    r.write("spec/spec.lock.json", "{\"clauses\":[{\"id\":\"run.journal.entry-key\"}]}\n");
+    r.write("evals/ledger.toml", "[entry.required-tools]\nclause = \"run.journal.entry-key\"\nmetric = \"tools.ready\"\nkind = \"test\"\ntier = \"gate\"\nmethod = { test = \"demo::measured::required_tools\" }\ntarget = { op = \">=\", value = 1 }\nseed = 7\n");
+    r.write("crates/demo/tests/integration/main.rs", "mod double;\nmod measured;\n");
+    r.write("crates/demo/tests/integration/measured.rs", MEASURED);
+    r.commit("a measurement requiring Lean and WebAssembly");
+    let bin = Bin::new();
+    bin.fake("elan", "echo \"elan $*\" >> \"$CALLS\"\n[ \"$*\" = 'toolchain list' ] || exit 1\necho leanprover/lean4:fixture\n");
+    bin.fake("lean", "[ \"$ELAN_TOOLCHAIN\" = leanprover/lean4:fixture ] || exit 1\necho 'fixture Lean'\n");
+    let elan = tempfile::tempdir().unwrap();
+    std::os::unix::fs::symlink(bin.dir.path(), elan.path().join("bin")).unwrap();
+    let o = gate_env(&r, Some(&bin), &[("ELAN_HOME", elan.path().to_str().unwrap())], &["--stage", "evaluate"]);
+    let err = stderr(&o);
+    assert!(o.status.success(), "{err}");
+    assert!(err.contains("measure: required-tools = 1"), "{err}");
+    assert_eq!(bin.calls(), ["elan toolchain list"]);
+}
+
 /// The evaluate stage runs every gate-tier ledger entry and the native case set in the deterministic tier, and reports the floor and baseline verdicts.
 // spec: assurance.gate.evaluate-stage@316d20b1
 #[test]