Build Log
Aug 2026 build
Gave the always-on agent hands on a browser, without handing it the keys
A credential broker that types secrets from 1Password without the value ever entering the container, a closed nine-operation browser vocabulary behind an origin allowlist, and a readiness ladder proven green twice.
Readiness ladder R1 to R7, green twice
1PasswordChrome DevTools ProtocolDockerTailscale
The agent can fill a login without ever seeing the password. Every browser action comes from a closed vocabulary, every origin is allowlisted, and a human takeover always wins. The live dress rehearsal is the proof: the agent hit a hold, stopped, and waited for the operator’s release before submitting. It can act, and it provably stops where I said stop.