Security research console

Single-operator access only. Every run this console executes is logged, and active/exploit-tier tools require typed confirmation against an allowlisted target before they run.