feat(browser): 受限 Safe Web 操作者入口与 readiness 收据 #41

Activity

1. Qiyuanqiii

   added

   enhancementNew feature or requestNew feature or request

   help wantedExtra attention is neededExtra attention is needed

   goPull requests that update go codePull requests that update go code

   javascriptPull requests that update javascript codePull requests that update javascript code

   高难度

   browserBrowser runtime and CDP capabilitiesBrowser runtime and CDP capabilities

   blockedBlocked by external evidence or dependencyBlocked by external evidence or dependency

   securitySecurity boundary or high-risk capabilitySecurity boundary or high-risk capability

   on Aug 13, 2026
2. Qiyuanqiii

   added a parent issue on Aug 13, 2026

   • [Epic] Browser Runtime 与 CDP / Browser runtime and CDP #33
3. Qiyuanqiii

   marked this as blocked on Aug 13, 2026

   • bug(browser): Windows WFP 受限浏览器生产探针尚未通过验收 #1
4. Qiyuanqiii commented on Aug 15, 2026

   

   Qiyuanqiii

   on Aug 15, 2026

   MemberAuthor

   More actions

   Windows 实机 smoke 证据（#7）

   这是 issue #1 修复验证时产生的真实管理员生产探针证据（真实 Chrome、真实 WFP 动态会话、UAC 提权）。11 项验收全部为 true，passed: true，退出码 0，探针结束后无残留 WFP 规则/浏览器进程/临时 Profile。

   {
     "protocol_version": "browser_network_containment_evidence.v1",
     "id": "browser-network-probe-1786818963250266100",
     "executable_identity_fingerprint": "9f3582cec7cea08cd8f1d331078f8d71f3ce5c39714ad21232b0eae342cc1d53",
     "acceptance_fingerprint": "2ec37c2299af74442fda0ae92d9cbad8e98f5637e39a7d9eb5f89cd9100c66a6",
     "adapter": "windows_wfp_dynamic.v1",
     "policy_version": "browser_network_containment_policy.v2",
     "operating_system": "windows",
     "architecture": "amd64",
     "collector_identity": "local-operator",
     "dynamic_session_observed": true,
     "atomic_install_observed": true,
     "exact_target_observed": true,
     "wrong_port_denied": true,
     "wrong_loopback_address_denied": true,
     "non_loopback_address_denied": true,
     "ipv6_denied": true,
     "rule_cleanup_observed": true,
     "cdp_used": false,
     "synthetic": false,
     "production": true,
     "passed": true,
     "started_at": "2026-08-15T18:36:03.269728Z",
     "completed_at": "2026-08-15T18:36:06.1084144Z",
     "expires_at": "2026-08-15T18:51:06.1084144Z",
     "fingerprint": "e7504ebd7658c7163f4991ff6d66b9529ecb0b2d17d884d37852a2d5690bb906"
   }

   验收条件映射

   条件	证据
   dynamic_session_observed: true	动态 WFP 会话已建立
   atomic_install_observed: true	过滤器原子安装
   exact_target_observed: true	精确 loopback 目标可达
   wrong_port_denied: true	错误端口被拒
   wrong_loopback_address_denied: true	错误 loopback 地址被拒
   non_loopback_address_denied: true	非 loopback 被拒
   ipv6_denied: true	IPv6 被拒
   rule_cleanup_observed: true	规则清理验证
   synthetic: false / production: true	非伪造、真实生产
   passed: true	全部通过

   依赖说明

   此证据产生于 #1 的 token 修复（PR #69：TOKEN_ALL_ACCESS）。本 #41 分支基于 main，在 PR #69 合并前，其 doctor browser-network-probe 会在本机（Microsoft 账户）复现 #1 的 baseline_process_create_with_token_access_denied。因此本 #41 的实机 smoke 依赖 PR #69 先合并——合并后探针即可通过，doctor browser-network-probe → browser-network-review → browser-readiness 全链路将返回 ready: true。

   自动测试证据

   • Go 侧：internal/{browserruntime,store,application,app,httpapi,runactivity} 全量 go test 通过。
   • Web：typecheck、vitest（59 文件 238 用例）、vite build、check:api 通过。
5. Qiyuanqiii

   closed this as completedin #71on Aug 15, 2026