Ghost Hands v0.3.0

Ghost Hands v0.3.0 — governed, recorded, replayable agent hands for the web, on our own zero-dependency CDP stack. No Playwright. No Selenium. The browser body is a stdlib Chrome DevTools Protocol client driving Chromium directly.

Highlights

• Governor on every action. Each action is classified readonly / write / consequential, judged against policy, and written to a JSONL provenance trail before it executes. Consequential actions (submits, pay/send/delete-shaped moves) stop for human approval; no approver attached = denied.
• Trails graduate. Any finished run exports into a deterministic, model-free Ghost Hands script — explore with a model once, replay forever for free (proven by execution on real Chromium).
• Two kinds of eyes. DOM eyes walk the composed tree (open shadow roots pierced, same-page iframes tagged); AX eyes build the map from the CDP Accessibility tree. Numbered element maps: the bundled demo reads a page in ~174 estimated tokens.
• v0.3.0 capabilities (every one classified + trailed): AX-tree perception, shadow-DOM piercing, iframe perceive/act, dialog policy, downloads to disk, file upload, network capture into the trail, one-action fill_form (failures named, submit stays gated), structured list/table extract, hover / drag / double-click / right-click / key chords, PDF export, device viewport presets, wait-for conditions, raw click_at (marked raw: true).
• Plus: tabs, session save/load (cookies + localStorage), self-healing targets (heal events on the trail), a stdlib MCP server, and pluggable deciders (scripted / deterministic rules / any OpenAI-compatible endpoint, key from env only).

Verified numbers (Oct 8, 2026)

• pytest: 170 passed
• Bench (offline): 82/82, including live-Chrome fixture cases
• Bench (live): 2/2 — example.com link-follow; a real Wikipedia search for "Oakdale, Tennessee" driven end-to-end by the rules decider
• Runtime dependencies: zero (stdlib only)

Honest limits

• The LLM decider's wire protocol is proven against a local stub endpoint only; live-model driving quality is unproven and is the model's business.
• The Chromium driver is proven on example.com + Wikipedia and local fixtures; arbitrary / authenticated third-party sites are untested.
• No head-to-head speed benchmarks vs Playwright/Stagehand/Browser Use have been run or are claimed.

MIT — Ghost Developer Studio.