opendevbrowser 0.0.12 → 0.0.16

package/skills/opendevbrowser-form-testing/scripts/run-form-workflow.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+print_help() {
+  cat <<'HELP'
+Form testing workflow router
+
+Usage:
+  ./skills/opendevbrowser-form-testing/scripts/run-form-workflow.sh <workflow>
+
+Workflows:
+  discovery
+  validation
+  multi-step
+  dynamic-required
+  file-upload
+  challenge-checkpoint
+  list
+HELP
+}
+
+workflow="${1:-list}"
+
+case "$workflow" in
+  list)
+    print_help
+    ;;
+  discovery)
+    cat <<'FLOW'
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+# map refs for all inputs, toggles, and submit controls
+FLOW
+    ;;
+  validation)
+    cat <<'FLOW'
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_type sessionId="<session-id>" ref="<field-ref>" text=""
+opendevbrowser_click sessionId="<session-id>" ref="<submit-ref>"
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+opendevbrowser_dom_get_text sessionId="<session-id>" ref="<error-ref>"
+opendevbrowser_get_attr sessionId="<session-id>" ref="<field-ref>" name="aria-invalid"
+FLOW
+    ;;
+  multi-step)
+    cat <<'FLOW'
+# validate each step, then continue
+opendevbrowser_click sessionId="<session-id>" ref="<next-step-ref>"
+opendevbrowser_wait sessionId="<session-id>" ref="<step-container-ref>" state="visible"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+FLOW
+    ;;
+  dynamic-required)
+    cat <<'FLOW'
+# Trigger conditional branch then re-snapshot for updated requirements.
+opendevbrowser_click sessionId="<session-id>" ref="<toggle-ref>"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_click sessionId="<session-id>" ref="<submit-ref>"
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+FLOW
+    ;;
+  file-upload)
+    cat <<'FLOW'
+# Validate upload constraints and submission behavior.
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_click sessionId="<session-id>" ref="<file-input-ref>"
+opendevbrowser_network_poll sessionId="<session-id>" max=50
+FLOW
+    ;;
+  challenge-checkpoint)
+    cat <<'FLOW'
+# if challenge is detected, pause automation and resume after manual completion
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+FLOW
+    ;;
+  *)
+    echo "Unknown workflow: $workflow" >&2
+    print_help
+    exit 2
+    ;;
+esac

package/skills/opendevbrowser-form-testing/scripts/validate-skill-assets.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+skill_file="$root/SKILL.md"
+
+required=(
+  "artifacts/form-workflows.md"
+  "assets/templates/validation-matrix.json"
+  "assets/templates/challenge-decision-tree.json"
+  "assets/templates/a11y-assertions.md"
+  "assets/templates/multi-step-state.json"
+  "scripts/run-form-workflow.sh"
+  "scripts/validate-skill-assets.sh"
+)
+
+status=0
+for rel in "${required[@]}"; do
+  if [[ ! -f "$root/$rel" ]]; then
+    echo "Missing required asset: $rel" >&2
+    status=1
+  fi
+  if ! grep -Fq "$rel" "$skill_file"; then
+    echo "SKILL.md missing reference: $rel" >&2
+    status=1
+  fi
+done
+
+for rel in scripts/run-form-workflow.sh scripts/validate-skill-assets.sh; do
+  if [[ -f "$root/$rel" && ! -x "$root/$rel" ]]; then
+    echo "Script is not executable: $rel" >&2
+    status=1
+  fi
+done
+
+for rel in assets/templates/validation-matrix.json assets/templates/challenge-decision-tree.json assets/templates/multi-step-state.json; do
+  if [[ -f "$root/$rel" ]]; then
+    if ! node -e 'const fs=require("fs"); JSON.parse(fs.readFileSync(process.argv[1], "utf8"));' "$root/$rel" >/dev/null 2>&1; then
+      echo "Invalid JSON template: $rel" >&2
+      status=1
+    fi
+  fi
+done
+
+if [[ $status -ne 0 ]]; then
+  exit $status
+fi
+
+echo "Form testing skill assets validated."

package/skills/opendevbrowser-login-automation/SKILL.md

@@ -0,0 +1,159 @@
+---
+name: opendevbrowser-login-automation
+description: This skill should be used when the user asks to "automate login", "test authentication", "sign in programmatically", "validate login errors", or "verify session persistence" with OpenDevBrowser.
+version: 2.0.0
+---
+
+# Login Automation Skill
+
+Use this skill for deterministic auth testing that handles MFA and anti-bot checkpoints without unsafe bypass patterns.
+
+## Pack Contents
+
+- `artifacts/login-workflows.md`
+- `assets/templates/login-scenario-matrix.json`
+- `assets/templates/challenge-checkpoint.md`
+- `assets/templates/auth-signals.json`
+- `scripts/run-login-workflow.sh`
+- `scripts/record-auth-signals.sh`
+- `scripts/validate-skill-assets.sh`
+- Shared robustness matrix: `../opendevbrowser-best-practices/artifacts/browser-agent-known-issues-matrix.md`
+
+## Fast Start
+
+1. Validate pack integrity.
+
+```bash
+./skills/opendevbrowser-login-automation/scripts/validate-skill-assets.sh
+```
+
+2. Print a ready workflow.
+
+```bash
+./skills/opendevbrowser-login-automation/scripts/run-login-workflow.sh password
+./skills/opendevbrowser-login-automation/scripts/run-login-workflow.sh mfa
+./skills/opendevbrowser-login-automation/scripts/run-login-workflow.sh challenge-checkpoint
+```
+
+## Core Rules
+
+- Use snapshot refs, not ad-hoc selectors.
+- Run one decision loop at a time: snapshot -> action -> snapshot.
+- Never store credentials in skill files, logs, screenshots, or committed fixtures.
+- Treat anti-bot challenges as checkpoints (manual solve or approved test keys), not bypass targets.
+- Keep a bounded retry budget (max 2 automated retries) and honor `Retry-After` when present.
+
+## Parallel Multitab Alignment
+
+- Apply shared concurrency policy from `../opendevbrowser-best-practices/SKILL.md` ("Parallel Operations").
+- Validate login paths across `managed`, `extension`, and `cdpConnect` before parity sign-off.
+- Treat extension headless attempts as expected `unsupported_mode`; do not force unsupported auth runs.
+
+## Robustness Coverage (Known-Issue Matrix)
+
+Matrix source: `../opendevbrowser-best-practices/artifacts/browser-agent-known-issues-matrix.md`
+
+- `ISSUE-01`: stale refs / DOM churn
+- `ISSUE-02`: challenge or SSO iframe boundaries
+- `ISSUE-03`: popup/new-tab SSO redirects
+- `ISSUE-04`: MFA/session step-up branching
+- `ISSUE-05`: anti-bot challenge loops
+- `ISSUE-06`: 429/backoff discipline
+- `ISSUE-07`: extension readiness on resume
+
+## Challenge-Aware Flow
+
+1. Preflight: goto login page, wait, snapshot actionables.
+2. Enter identifier and password.
+3. Submit once.
+4. Branch by observed state:
+   - authenticated shell appears -> success validation
+   - MFA prompt appears -> continue MFA branch
+   - popup/new-tab SSO appears -> switch target and continue auth branch
+   - anti-bot challenge appears -> checkpoint branch
+   - invalid credentials or lockout message -> failure branch
+
+```text
+opendevbrowser_goto sessionId="<session-id>" url="https://example.com/login"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_type sessionId="<session-id>" ref="<identifier-ref>" text="<resolved-identifier>"
+opendevbrowser_type sessionId="<session-id>" ref="<password-ref>" text="<resolved-password>"
+opendevbrowser_click sessionId="<session-id>" ref="<submit-ref>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+```
+
+## Anti-Bot Checkpoint Pattern
+
+Use this when CAPTCHA/turnstile/challenge pages appear.
+
+1. Detect challenge UI from snapshot refs or page text.
+2. Pause automation and mark checkpoint in run log.
+3. Complete challenge manually (or with provider-approved test key in non-production).
+4. Resume from a fresh snapshot and continue auth validation.
+
+Signals to monitor:
+- challenge iframe/widget visible
+- error copy like "verify you are human"
+- repeated 403/429 responses on auth endpoints
+- repeated challenge pages after resume (loop condition)
+
+Challenge loop guardrail:
+- After 2 challenge checkpoints without success, stop automation and escalate.
+- If `Retry-After` is available, wait at least that duration before any retry.
+
+## MFA Pattern
+
+1. Submit primary credentials.
+2. Wait for OTP/passkey/TOTP ref visibility.
+3. Enter second factor.
+4. Submit and validate authenticated state.
+
+```text
+opendevbrowser_wait sessionId="<session-id>" ref="<mfa-input-ref>" state="visible"
+opendevbrowser_type sessionId="<session-id>" ref="<mfa-input-ref>" text="<resolved-otp>"
+opendevbrowser_click sessionId="<session-id>" ref="<mfa-submit-ref>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+```
+
+## Validation Signals
+
+Validate at least two independent signals:
+
+- URL/route transition to authenticated area.
+- Auth-only element visible (`opendevbrowser_is_visible`).
+- Auth request success from `opendevbrowser_network_poll`.
+
+```text
+opendevbrowser_network_poll sessionId="<session-id>" max=50
+```
+
+## Session Persistence and Reauth
+
+Use persistent profiles for remember-me checks:
+
+```text
+opendevbrowser_launch profile="auth-test" persistProfile=true noExtension=true
+```
+
+Close and relaunch, then confirm one of:
+- still authenticated without credential prompt
+- intentionally forced reauth policy was applied
+
+## Failure Modes
+
+- Invalid credentials: assert explicit field/banner errors.
+- Rate limit/lockout: stop retries, apply cooldown, rotate test account.
+- Challenge loop: escalate as anti-bot pressure issue.
+- MFA unavailable for test account: mark incomplete test prerequisite.
+
+## References
+
+Use these sources when tuning login automation behavior:
+- Playwright auth guide: https://playwright.dev/docs/auth
+- OWASP Authentication Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html
+- NIST SP 800-63B (Digital Identity): https://pages.nist.gov/800-63-4/sp800-63b.html
+- Cloudflare Turnstile testing keys: https://developers.cloudflare.com/turnstile/tutorials/testing/
+- reCAPTCHA v2 testing keys: https://developers.google.com/recaptcha/docs/faq
+- hCaptcha test keys: https://docs.hcaptcha.com/

package/skills/opendevbrowser-login-automation/artifacts/login-workflows.md

@@ -0,0 +1,39 @@
+# Login Workflows
+
+## Password-only workflow
+
+1. Preflight snapshot
+2. Type identifier/password
+3. Submit
+4. Validate URL + auth-only ref + network status
+5. Re-snapshot before any follow-up action
+
+## MFA workflow
+
+1. Run password-only steps
+2. Wait for MFA field
+3. Submit second factor
+4. Validate session issuance
+
+## SSO popup/new-tab workflow
+
+1. Trigger SSO action from login page
+2. Detect target/page change
+3. Continue auth on active SSO target
+4. Validate return to original app shell
+5. Rebind refs from fresh snapshot
+
+## Challenge checkpoint workflow
+
+1. Detect challenge state
+2. Record checkpoint with timestamp and trigger
+3. Pause automated actions
+4. Resume after challenge completion from fresh snapshot
+5. If challenge repeats twice, stop and escalate as anti-bot pressure
+
+## Lockout recovery workflow
+
+1. Detect lockout or throttling banner
+2. Stop retry loop
+3. Record cooldown window/account status and `Retry-After` if present
+4. Resume with different account or after wait window

package/skills/opendevbrowser-login-automation/assets/templates/auth-signals.json

@@ -0,0 +1,21 @@
+{
+  "session_id": "",
+  "url_before": "",
+  "url_after": "",
+  "auth_element_ref": "",
+  "auth_element_visible": false,
+  "network": {
+    "login_request_seen": false,
+    "status_codes": [],
+    "retry_after_seconds": 0
+  },
+  "frames_seen": 0,
+  "popup_detected": false,
+  "challenge_detected": false,
+  "challenge_type": "none",
+  "challenge_checkpoint_count": 0,
+  "mfa_detected": false,
+  "mfa_method": "unknown",
+  "issue_ids": [],
+  "result": "unknown"
+}

package/skills/opendevbrowser-login-automation/assets/templates/challenge-checkpoint.md

@@ -0,0 +1,10 @@
+# Challenge Checkpoint
+
+- Session ID:
+- URL:
+- Timestamp (UTC):
+- Challenge type (turnstile/recaptcha/hcaptcha/other):
+- Trigger signal:
+- Manual action taken:
+- Resume timestamp:
+- Post-resume outcome:

package/skills/opendevbrowser-login-automation/assets/templates/login-scenario-matrix.json

@@ -0,0 +1,26 @@
+{
+  "scenario": "",
+  "steps": [],
+  "issue_ids": [
+    "ISSUE-01",
+    "ISSUE-02",
+    "ISSUE-03",
+    "ISSUE-04",
+    "ISSUE-05",
+    "ISSUE-06",
+    "ISSUE-07"
+  ],
+  "expected_signals": [
+    "url_changed",
+    "auth_shell_visible",
+    "auth_network_success"
+  ],
+  "failure_signals": [
+    "invalid_credentials",
+    "anti_bot_challenge",
+    "rate_limited",
+    "lockout"
+  ],
+  "max_automated_retries": 2,
+  "requires_manual_checkpoint": false
+}

package/skills/opendevbrowser-login-automation/examples/sample-auth-signals.json

@@ -0,0 +1,14 @@
+{
+  "session_id": "session-123",
+  "url_before": "https://example.com/login",
+  "url_after": "https://example.com/app",
+  "auth_element_ref": "r42",
+  "auth_element_visible": true,
+  "network": {
+    "login_request_seen": true,
+    "status_codes": [200]
+  },
+  "challenge_detected": false,
+  "mfa_detected": true,
+  "result": "authenticated"
+}

package/skills/opendevbrowser-login-automation/scripts/record-auth-signals.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ $# -lt 2 ]]; then
+  echo "Usage: record-auth-signals.sh <template-json> <output-json>" >&2
+  exit 1
+fi
+
+template="$1"
+output="$2"
+
+if [[ ! -f "$template" ]]; then
+  echo "Missing template: $template" >&2
+  exit 1
+fi
+
+cp "$template" "$output"
+echo "Auth signal template copied to $output"

package/skills/opendevbrowser-login-automation/scripts/run-login-workflow.sh

@@ -0,0 +1,99 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+print_help() {
+  cat <<'HELP'
+Login automation workflow router
+
+Usage:
+  ./skills/opendevbrowser-login-automation/scripts/run-login-workflow.sh <workflow>
+
+Workflows:
+  password
+  mfa
+  sso-popup
+  challenge-checkpoint
+  challenge-loop-guard
+  lockout-recovery
+  session-persistence
+  list
+HELP
+}
+
+workflow="${1:-list}"
+
+case "$workflow" in
+  list)
+    print_help
+    ;;
+  password)
+    cat <<'FLOW'
+opendevbrowser_goto sessionId="<session-id>" url="<login-url>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_type sessionId="<session-id>" ref="<identifier-ref>" text="<identifier>"
+opendevbrowser_type sessionId="<session-id>" ref="<password-ref>" text="<password>"
+opendevbrowser_click sessionId="<session-id>" ref="<submit-ref>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+opendevbrowser_network_poll sessionId="<session-id>" max=50
+FLOW
+    ;;
+  mfa)
+    cat <<'FLOW'
+# Run password workflow first.
+opendevbrowser_wait sessionId="<session-id>" ref="<mfa-input-ref>" state="visible"
+opendevbrowser_type sessionId="<session-id>" ref="<mfa-input-ref>" text="<otp>"
+opendevbrowser_click sessionId="<session-id>" ref="<mfa-submit-ref>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+FLOW
+    ;;
+  sso-popup)
+    cat <<'FLOW'
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_click sessionId="<session-id>" ref="<sso-provider-ref>"
+# Rebind to popup/new target before continuing auth steps.
+opendevbrowser_targets_list sessionId="<session-id>"
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+FLOW
+    ;;
+  challenge-checkpoint)
+    cat <<'FLOW'
+# Detect challenge state, then pause automated actions.
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+# Manual checkpoint required: solve challenge with approved flow/test keys.
+# Resume only after challenge is solved.
+opendevbrowser_snapshot sessionId="<session-id>" format="actionables"
+opendevbrowser_click sessionId="<session-id>" ref="<continue-ref>"
+opendevbrowser_wait sessionId="<session-id>" until="networkidle"
+FLOW
+    ;;
+  challenge-loop-guard)
+    cat <<'FLOW'
+# If challenge reappears twice, stop and escalate.
+opendevbrowser_network_poll sessionId="<session-id>" max=100
+# Honor Retry-After before any retry when present.
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+FLOW
+    ;;
+  lockout-recovery)
+    cat <<'FLOW'
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+# If lockout/rate-limit banner present: stop retries and cooldown.
+opendevbrowser_network_poll sessionId="<session-id>" max=50
+FLOW
+    ;;
+  session-persistence)
+    cat <<'FLOW'
+opendevbrowser_launch profile="auth-test" persistProfile=true noExtension=true
+# Authenticate once, close, relaunch same profile, then assert auth state.
+opendevbrowser_snapshot sessionId="<session-id>" format="outline"
+FLOW
+    ;;
+  *)
+    echo "Unknown workflow: $workflow" >&2
+    print_help
+    exit 2
+    ;;
+esac

package/skills/opendevbrowser-login-automation/scripts/validate-skill-assets.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+skill_file="$root/SKILL.md"
+
+required=(
+  "artifacts/login-workflows.md"
+  "assets/templates/login-scenario-matrix.json"
+  "assets/templates/challenge-checkpoint.md"
+  "assets/templates/auth-signals.json"
+  "scripts/run-login-workflow.sh"
+  "scripts/record-auth-signals.sh"
+  "scripts/validate-skill-assets.sh"
+)
+
+status=0
+
+for rel in "${required[@]}"; do
+  if [[ ! -f "$root/$rel" ]]; then
+    echo "Missing required asset: $rel" >&2
+    status=1
+  fi
+  if ! grep -Fq "$rel" "$skill_file"; then
+    echo "SKILL.md missing reference: $rel" >&2
+    status=1
+  fi
+done
+
+for rel in scripts/run-login-workflow.sh scripts/record-auth-signals.sh scripts/validate-skill-assets.sh; do
+  if [[ -f "$root/$rel" && ! -x "$root/$rel" ]]; then
+    echo "Script is not executable: $rel" >&2
+    status=1
+  fi
+done
+
+for rel in assets/templates/login-scenario-matrix.json assets/templates/auth-signals.json; do
+  if [[ -f "$root/$rel" ]]; then
+    if ! node -e 'const fs=require("fs"); JSON.parse(fs.readFileSync(process.argv[1], "utf8"));' "$root/$rel" >/dev/null 2>&1; then
+      echo "Invalid JSON template: $rel" >&2
+      status=1
+    fi
+  fi
+done
+
+if [[ $status -ne 0 ]]; then
+  exit $status
+fi
+
+echo "Login automation skill assets validated."

package/skills/opendevbrowser-product-presentation-asset/SKILL.md

@@ -0,0 +1,98 @@
+---
+name: opendevbrowser-product-presentation-asset
+description: Collects product screenshots, images, copy, and metadata into a local folder pack for video workflows.
+version: 2.0.0
+---
+
+# Product Presentation Asset Skill
+
+Use this skill to build complete product-video input packs and assembly instructions for UGC-style content production.
+
+## Pack Contents
+
+- `artifacts/asset-pack-assembly.md`
+- `artifacts/ugc-creative-guide.md`
+- `assets/templates/manifest.schema.json`
+- `assets/templates/copy.md`
+- `assets/templates/features.md`
+- `assets/templates/video-assembly.md`
+- `assets/templates/user-actions.md`
+- `assets/templates/ugc-concepts.md`
+- `assets/templates/shot-list.md`
+- `assets/templates/claims-evidence-map.md`
+- `scripts/collect-product.sh`
+- `scripts/capture-screenshots.sh`
+- `scripts/download-images.sh`
+- `scripts/write-manifest.sh`
+- `scripts/render-video-brief.sh`
+- `scripts/validate-skill-assets.sh`
+- Shared robustness matrix: `../opendevbrowser-best-practices/artifacts/browser-agent-known-issues-matrix.md`
+
+## Fast Start
+
+```bash
+./skills/opendevbrowser-product-presentation-asset/scripts/validate-skill-assets.sh
+./skills/opendevbrowser-product-presentation-asset/scripts/collect-product.sh "https://example.com/product/123"
+./skills/opendevbrowser-product-presentation-asset/scripts/render-video-brief.sh /path/to/manifest.json /tmp/product-video-brief
+```
+
+## Final Assets Produced
+
+Expected output pack includes:
+- `manifest.json` with canonical product metadata
+- `product.json` and `pricing.json`
+- `images/` for product stills
+- `screenshots/` for page context and UI proof
+- `copy.md` and `features.md`
+- `raw/source-record.json` for auditability
+
+The `render-video-brief.sh` helper adds:
+- `video-brief.md`
+- `shot-list.md`
+- `ugc-brief.md`
+- `claims-evidence-map.md`
+
+## What the User Should Do
+
+1. Pick product URL or product name.
+2. Run collection workflow and confirm output pack path.
+3. Review generated manifest/copy/features for accuracy.
+4. Run `render-video-brief.sh` to generate production instructions.
+5. Hand the brief and assets to editor/creator pipeline.
+
+## Parallel Multitab Alignment
+
+- Apply shared concurrency policy from `../opendevbrowser-best-practices/SKILL.md` ("Parallel Operations").
+- Validate asset capture flows across `managed`, `extension`, and `cdpConnect` when browser capture is involved.
+- Keep one session per worker for concurrent product-page captures; avoid target-switch thrash in one session.
+
+## How to Combine the Assets
+
+1. Use `manifest.json` as source of truth.
+2. Build hooks and claims from `copy.md` + `features.md`.
+3. Pair each claim with supporting asset (`images` or `screenshots`).
+4. Sequence assets using `shot-list.md`.
+5. Validate pricing/availability freshness before publishing.
+6. Validate every claim appears in `claims-evidence-map.md` before publish.
+
+## Robustness Coverage (Known-Issue Matrix)
+
+Matrix source: `../opendevbrowser-best-practices/artifacts/browser-agent-known-issues-matrix.md`
+
+- `ISSUE-10`: normalized price/currency fields for claims
+- `ISSUE-11`: anchor discount context for pricing claims
+- `ISSUE-12`: stale price and unsupported-claim prevention via evidence mapping
+
+## UGC Key Concepts
+
+- Hook in first 2 seconds with user problem + payoff.
+- Show real product usage context before polished close-ups.
+- Keep claims concrete and verifiable from captured assets.
+- Use one CTA and one primary value proposition per short clip.
+- Preserve authenticity: avoid over-produced voice/style mismatches.
+
+## References
+
+- FTC pricing guidance (deceptive pricing): https://www.ecfr.gov/current/title-16/chapter-I/subchapter-B/part-233
+- Schema.org Offer metadata: https://schema.org/Offer
+- NIST unit pricing/value comparison guide: https://www.nist.gov/publications/unit-pricing-guide