Grant temporary OP safely. Daily rotating passwords, full blackbox audit logging, command blacklist, anti-duplication Clean Room system, and Admin GUI panel. Every action tracked — commands, blocks, items, containers. No permanent OP, full accountability.