Enables AI agents to drive a real Chromium browser by receiving compact, token-efficient page maps and only the changes after each action. It guards against hidden prompt injections, blocks payments, sends and deletions until the user approves, and lets agents learn site-specific notes over time.

Gives browser agents a reviewed map of 79 real sites — entry URLs, access verdicts, and role/accessible-name button maps for 104 screens — so an agent can find where things are and know whether it may act at all. Safety rules in code halt irreversible actions such as pay, order, submit and delete pending explicit human approval, while per-site memory recalls which routes worked last time.