Non-trusted users see joh***@example.com in the confirm() prompt and button title instead of the full address. Trusted staff see the full email unchanged. Matches the obscure_email() pattern already used in ae_comp__badge_obj_li.svelte. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>