Browser runs withproof and brakes.
A compact control surface for deterministic Playwright checks, evidence capture, failure isolation, prompt-injection containment, and approval-gated agent actions.
Safety architecture
Treat evidence, authority, and side effects differently.
The same design supports a five-minute synthetic monitor and a supervised browser agent: deterministic steps, typed failures, least-privilege access, evidence capture, and explicit stops before consequential actions.
Domain allowlist
Navigation is limited to approved origins and exact redirect rules.
Synthetic identity
OTP and lead tests use client-owned test mode—never real customer data.
Injection boundary
Instructions found in page content cannot rewrite the trusted run plan.
Approval gates
Submissions, messages, purchases, and credential use pause for a person.
Verification record
3/3
Playwright paths
4/4
policy tests
The Playwright suite exercises both Web QA builds and the interactive agent console. The policy tests cover allowlisting, injection rejection, approval gating, and synthetic data.
Open artifacts