Browser Workbench Bridge
Purpose
Map browser runtime capability into NOVA without pretending the browser grants unrestricted backend access. The browser can host apps, service workers, storage, manifests, WASM, sockets, and telemetry under origin and permission boundaries.
Required Inputs
- Browser origin
- Console or network trace
- Manifest or service worker status
- Storage report
- User-facing product goal
Workflow
- Record origin and permission boundary.
- Classify available surfaces: service worker, local/session storage, IndexedDB, cache, manifest, WASM, sockets, media, reporting.
- Identify what can become a browser workbench feature.
- Identify what requires a server, extension, native app, or authenticated API.
- Produce a workbench plan and risk report.
Proof Gates
- Origin captured
- Storage boundary captured
- Service worker status captured
- No cross-origin bypass claim
Refusal Boundary
Do not recommend bypassing browser security, MIME checks, CORS, origin policy, auth, or platform terms.
1---2name: browser-workbench-bridge3description: Use when NOVA should analyze browser developer surfaces, service workers, storage, manifests, WASM, console/network telemetry, or browser-hosted workbench capabilities.4---56# Browser Workbench Bridge78## Purpose910Map browser runtime capability into NOVA without pretending the browser grants unrestricted backend access. The browser can host apps, service workers, storage, manifests, WASM, sockets, and telemetry under origin and permission boundaries.1112## Required Inputs1314- Browser origin15- Console or network trace16- Manifest or service worker status17- Storage report18- User-facing product goal1920## Workflow21221. Record origin and permission boundary.232. Classify available surfaces: service worker, local/session storage, IndexedDB, cache, manifest, WASM, sockets, media, reporting.243. Identify what can become a browser workbench feature.254. Identify what requires a server, extension, native app, or authenticated API.265. Produce a workbench plan and risk report.2728## Proof Gates2930- Origin captured31- Storage boundary captured32- Service worker status captured33- No cross-origin bypass claim3435## Refusal Boundary3637Do not recommend bypassing browser security, MIME checks, CORS, origin policy, auth, or platform terms.
ItsNotAILABS