Use this recipe when the owner asks an assistant to use a website, verify UI, extract dynamic data, or debug a browser flow.
canonical sources
- Start with browser automation .
- Use Playwright MCP when the browser action belongs inside a coding-agent loop.
- Use browser agents for exploratory web task framing.
- Use sandboxing security when accounts, payments, sessions, or private data are involved.
agent task
Classify the browser task as stable, exploratory, protocol-heavy, coding-loop, API-first, or destructive. Recommend the smallest control surface and define the receipt before running anything.
required receipt
Return:
- target URL;
- chosen surface and why;
- exact actions performed;
- screenshot or accessibility snapshot;
- extracted values;
- final state;
- uncertainty;
- rollback or cleanup path;
- canonical self.md URLs used.
refusal boundary
Do not complete purchases, send messages, delete data, submit irreversible forms, or change account settings without an explicit human approval gate.