test: complete control panel fixture UX coverage

docs/CONTROL_PANEL_V1.md

@@ -84,13 +84,23 @@ The UI pages are `/`, `/agents`, `/agents/{agent_id}`, `/blockers`, `/jobs` and
 `/login`. Primary rows show client, display name and hostname; UUIDs remain in
 technical detail.
 
+For dashboard semantics, operator workflows, timestamp presentation, bounded
+filters, and responsive behavior, see
+[`CONTROL_PANEL_OPERATIONAL_UX_V1.md`](CONTROL_PANEL_OPERATIONAL_UX_V1.md).
+
 ## Safe Actions
 
-Human actions require a session, CSRF, explicit confirmation and an
-`audit_events` row. The panel can create reprocess jobs and resolve blockers
-only with explicit context. It cannot enable Firebird/AI writes, alter
-credentials/path/CRT, execute SQL or shell commands, restart Windows services,
-or update Agents automatically.
+Human actions require a session and CSRF; mutating actions are audited in
+`audit_events`. The panel can create reprocess jobs and save blocker context
+only through their validated workflows. It cannot enable Firebird/AI writes,
+alter credentials/path/CRT, execute SQL or shell commands, restart Windows
+services, or update Agents automatically.
+
+Reprocessing an installation presents a separate confirmation page before the
+POST. Saving blocker context is a separate authenticated, CSRF-protected
+workflow that validates the context and queues reprocessing for only that
+blocker's product. See the operational UX contract for validation and audit
+details.
 
 ## Fixture