test(browser): verify semantic role and name before controlled action

[seonghobae]

Partial implementation of #28, stacked on PR #70.

Buyer-visible gap

PR #70 proves real pinned-Chromium input/click/post-condition execution for the controlled Agent Task. This lane adds bounded browser-computed accessibility role/name evidence before either controlled action proceeds.

Dependency / current stack

This Draft now targets exact current PR #70 head 33ec162e932b99f9f7bd78ea0108b5e8501e7694 and remains Draft while #70/#65 are active. Current exact #71 head is f82a3b27243adbb14c28af22d408a25cb3c296e9.

After #70 gained hardened fixture and URL-invariance follow-up work, this branch was non-destructively aligned to the current prerequisite. Commit f82a3b27243adbb14c28af22d408a25cb3c296e9 has current #70 as a second parent while preserving #71's semantic-evidence tree. Fresh ancestry proves #71 descends from the exact current #70 head; no prerequisite check/review is transferred.

TDD / implemented boundary

1. Exact test-only head 977d2682dc191ca6b26b9de631a3642680abdbc0 required _get_element_semantics, W3C WebDriver computed-role/computed-label endpoints, exact textbox / Task text and button / Submit task semantics, and credential-free evidence booleans.
2. CI run 31454219111, Rust contracts job 93664601520, checked out that exact test-only head and failed at the intended repository contract because _get_element_semantics did not exist.
3. Production reads browser-computed role/name through WebDriver before clear/type or click, fails closed on malformed/mismatched semantics, preserves exact post-condition/input echo/profile cleanup, and inherits test(browser): execute controlled Agent Task on pinned Chrome #70's exact loaded-URL/submission-URL invariant through the current dependency alignment.

Exact-head proof

On unchanged exact head f82a3b27243adbb14c28af22d408a25cb3c296e9 against exact current #70 head 33ec162e932b99f9f7bd78ea0108b5e8501e7694:

• CI run 31542483020: success;
• Manifest V3 Compatibility run 31542482996: success;
• GitHub reports the Draft mergeable against its exact prerequisite base; and
• no inline review threads are currently returned.

No predecessor-head check, review, status, or mergeability result is transferred.

Truth boundary

This remains executable CI evidence, not the final OriginWeave browser runtime. CSS selectors remain controlled test-harness locators; verifying browser-computed role/name does not itself implement role/name search, a versioned WebDriver BiDi/CDP product adapter, OriginWeave SemanticNodeObservation composition, opaque node-handle registration, typed policy dispatch, source-node/network provenance, trusted resource attribution, or real-site compatibility.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e039c6a7-bcf9-44cc-99c6-243216cccba6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}