feat: add read-only bank operations console

web/src/components/TrustDisclosure.tsx

@@ -0,0 +1,14 @@
+export function TrustDisclosure() {
+  return (
+    <aside className="trust-disclosure" aria-labelledby="trust-heading">
+      <p className="eyebrow">Trust boundary</p>
+      <h2 id="trust-heading">What this demo does not guarantee</h2>
+      <div className="trust-grid">
+        <p><strong>Unaudited code.</strong> MockUSDC has no value. These contracts are educational and unaudited; real deposits must never be sent here.</p>
+        <p><strong>Central upgrade authority.</strong> The owner can pause customer actions and install arbitrary future logic.</p>
+        <p><strong>Upgrade risk.</strong> UUPS mistakes can corrupt state or permanently brick upgradeability.</p>
+      </div>
+      <p className="professional-note">A real custody product requires professional audits, operational key controls, multisig or timelocked governance, incident procedures, legal advice, and jurisdiction-specific compliance work.</p>
+    </aside>
+  );
+}