Use protected fields personally
Password fields, tax identifiers, payment details and API secrets are not material for the guide to read, copy or fill. Northstar marks sensitive regions with data-puntego-ignore. The guide can explain where a field is and why it is needed without handling its value.
Share evidence without secrets
For support, share a request reference, approximate time and the visible error code. Remove personal data and credentials from attachments. If a secret may have been exposed, revoke or rotate it through the system that issued it before sharing more diagnostic information.
A guide does not extend your role
Every operation still needs the current user's permission in the active workspace. Protected markup is one layer; server authorization is another. If a session expires, stop the pending change and authenticate again rather than asking the guide to bypass the sign-in step.