One clear story for experiments, and what a key cannot reach

The experiments page now shows how an experiment really runs: two arms, a control and an experiment, each with its own price and an optional weight. You create one, get each user's stable arm and price, report sales, and compare the arms on views, conversions and revenue. The page no longer shows a three-variant example that the API would refuse.

The Elo A/B test function in the catalog is now described as what it is: a one-call price split into two fixed halves that records nothing, so it is not a way to run an experiment. The significance and bandit entries say they are not callable yet.

For agents: the agent manifest, the API description and the agent guide now say up front which credential reaches which part of workspace administration. Creating and deleting workspaces, workspace settings and the workspace AI key need a person signed in to the dashboard, and no API key or OAuth token reaches them. Team members, roles and invitations work from the dashboard or from an API key holding the team admin scope, which only a workspace owner or admin can create, in the dashboard. A failed wallet sign-in now answers with the same error fields as every other failed sign-in.