version: 1
workflow_id: browser.read_only_monitor
objective:
  outcome: return_verified_material_changes
  normal_success: silent
authority:
  allowed:
    - read_approved_sources
    - compare_records
    - update_internal_evidence
  prohibited:
    - submit_forms
    - send_messages
    - spend_money
    - change_identity_or_security
unknown_state:
  missing_source: UNKNOWN_RECONCILING
  write_timeout: RECONCILE_BEFORE_RETRY
executor_order:
  - api_or_cli
  - playwright
  - jev_for_bounded_local_choice
  - frontier_model_for_novel_recovery
verification:
  require_complete_source_coverage: true
  require_authoritative_readback: true
  done_signal_is_proof: false
receipt:
  include:
    - workflow_version
    - source_coverage
    - authority_scope
    - effects
    - evidence
    - uncertainty
    - cost
    - verifier_result