Turn an unfamiliar interface into a reviewable workflow map.

MODULE / 01

Read-only first

The default policy follows same-origin navigation, tabs, and low-risk controls. Submits, destructive labels, uploads, uncertain forms, and external origins are blocked or deferred.

• Public-network targets by default
• URL and DNS policy enforced again by the worker
• Authenticated exploration requires secure transport

MODULE / 02

Evidence before inference

Page snapshots, visible controls, screenshots, accessibility snapshots, observations, and graph edges preserve what was actually seen. Candidate rules stay candidates until reviewed.

MODULE / 03

A bounded run, not a crawler promise

Budgets, frontier state, replay paths, and allowed origins constrain exploration. Changed UI, authentication barriers, and ambiguous interactions remain visible as blocked or deferred work.