Skip to content
HUEHUE Docs

HUE-034 — Implement isolated browser worker with prompt-injection boundaries

Canonical source: docs/roadmap/issues.json · HUE-034

Specification status: TBI · Readiness: agent:blocked

Goal

Section titled “Goal”

Perform interactive web tasks in isolated, policy-controlled browser contexts.

Scope

Section titled “Scope”
  • Isolated browser profiles and domain policy
  • DOM interaction/events/screenshots/downloads
  • Submission and authenticated-session gates

Acceptance criteria

Section titled “Acceptance criteria”
  • Page instructions cannot change system policy
  • External submissions require correct approval
  • Final state and URL are verified
  • Personal session access is explicit

Dependencies

Section titled “Dependencies”
  • HUE-032
  • HUE-033

Non-goals

Section titled “Non-goals”
  • None beyond the documented scope.

Product contract

Section titled “Product contract”
  • Follow the milestone and repository product contract.

Implementation handoff requirements

Section titled “Implementation handoff requirements”
  • Preserve the documented security, project, memory and event boundaries.
  • Add or update automated tests for every observable acceptance criterion.
  • Provide real verification output; do not rely on a worker/agent self-report.
  • Update only the exact documentation sections whose status changed.
  • Include screenshots or a recording for user-interface changes.
  • Include migration, rollback and recovery notes for data/state changes.
  • Link the pull request to this issue with Closes #<issue-number>.