Follows Phase 2 of Plan: a very secure browser in Seed. Agents: read-only default with a second approval for click, type and navigate; a visible action log. Process: hostile page suite on every pull request; Electron security scanner in CI; release checks for Electron major, fuses, signed manifest and entitlements; SECURITY.md with a contact; one external penetration test before the pane leaves the experiment.