DL-640
Propose restricted browser actions, origin-bound brokered secret fill, and generated-credential capture without exposing secret values to the model.
Status: Active (Matt, 2026-10-20)
Record: ../../agent/compass-agent-browser-use/design.md#problem–intent