No consent, no start
Confirmer name and consent date are required. Future dates are rejected.
Safety
This tool runs against real sites. We enforce controls in code—not only in prompts.
Enforced in codeNot prompt-onlyNo purchase confirmNo CAPTCHA bypass
No purchase execution
Order/payment confirm is refused and ends as pre-checkout reached. Early Buy now is also refused (no checkout credit). Enter/Space too. Unlabeled controls fail closed and are skipped.
Hard caps
Max 40 actions and $2. Budget is preflighted before model turns; overages stop as “action limit” or “cost limit”.
No CAPTCHA bypass
Visible vendor widgets stop the run immediately. Bare data-sitekey alone is not treated as CAPTCHA. No bypass.
Dedicated diagnosis bot name
Accesses as AgentQA-Bot/1.0 (+contact URL). Never impersonates a normal browser.
Target URL restrictions
Public https hosts only. localhost and private IPs are rejected.
Enforced in code—not policy text alone.