# 000 Research

## OIDC Issue
release.sh uses GitHub Actions OIDC Trusted Publishing.
Direct npm publish fails with E401.
Stale v0.2.0 tag and GitHub release exist from wrong publish attempt.

## Post-MVP
H-008: Action/domain policy - allowlist + restricted actions
H-009: Encrypted state - AES-256-GCM for session JSON
H-010: Output budget - configurable max observation size
H-011: CLI split - extract lifecycle from 3750-line browser.mjs