Documents the 7 real gaps (per-class enable, model/provider allow-lists, seats/usage UI, retrieval off-switch, consent) against the existing entitlement.ts/policy.tsx backend, proposed AiConsoleConfig schema, new endpoints, and a 6-section UI layout. Companion visual mockup presented separately. No application code changed — spec + mockup only, as instructed.