The chat.send path let authorized write-scoped callers persist /verbose session overrides even though the same stored session mutation is admin-only through sessions.patch.

A write-scoped gateway caller could persist verbose output for later runs and expose more reasoning or tool output than the operator intended.

Fixed by commit c603123528 (fix(gateway): require admin for persisted verbose defaults).