fix: validate control panel runtime paths

central/app/api.py

@@ -16,6 +16,8 @@ from .context_keys import validate_entry
 from .models import AgentSnapshot, BlockedProduct, FiscalContextEntry, ClassificationCache, ClassificationRequest, ClassificationResult, Dataset, Installation, Job
 from .events import record_event
 from .installation_identity import compute_agent_health, compute_version_drift, sanitize_registration
+from .control_plane import list_jobs
+from .human_auth import require_human
 
 logger = logging.getLogger("gti_fiscal_hub")
 
@@ -331,6 +333,15 @@ def router(session_factory, bootstrap_token):
             return _job_view(job)
         finally: session.close()
 
+    @routes.get("/jobs/global")
+    def global_jobs(request: Request, page: int = 1, page_size: int = 50, status: str | None = None, kind: str | None = None):
+        session = session_factory()
+        try:
+            require_human(request, session)
+            return list_jobs(session, page=page, page_size=page_size, status=status, kind=kind)
+        finally:
+            session.close()
+
     @routes.get("/jobs/{job_id}")
     def get_job(job_id: int, identity=Depends(principal)):
         session, agent = identity