Fails closed
If identity cannot be confirmed, nothing is clicked.
Product / Platform / Computer use
API first. Where there is none, Qvrone reads the screen as named elements from the accessibility tree or the page. The gate confirms every proposed action before it runs and verifies the effect after.
accessibility tree
model propose click(e14)
gate re-read tree · e14 = button “Save” in form “Receipt” ✓
gate policy: save_voucher → allow · receipt r-7c1 (one use)
hands click e14 · receipt spent
check re-read · status “Voucher saved” appeared → confirmed
The screen as named elements, not pixels.
The gate re-reads the tree to confirm role, name and ancestry; a one-use receipt authorises the action.
A fresh read checks the effect.
If identity cannot be confirmed, nothing is clicked.
Vision may propose a point; a live hit-test supplies identity.
No unattended computer use until each stage is proven.
API or MCP first, code next, the screen last.