browser-action-receipt
A small library that binds browser approval to a target fingerprint and refuses execution if the page changes. Its privacy-minimal receipt records the decision and resulting ArtifactRef without copying page content or URL query data.