Why: A rejected command appeared as a raw receipt, and expanded permission details exposed internal action/source codes.
Evidence: SELF /tmp/project-settings-readable-rejection-green-20261014-973d52c1.json, /tmp/project-settings-frontend-final-check-20261014-973d52c1.json and /tmp/project-settings-frontend-browser-final-20261014-973d52c1.json record the regression, 285 unit tests, typecheck, unchanged knip baseline, build and 15 browser fixture flows.
Impact: Present the service's readable rejection reason while keeping permission details in user-facing terms. No authority is inferred in the client.
Refs: P6/P7, Dev docs/records/2026-10-14-rdm-settings-completion-contract.md