@zseven-w/dsh-qa

LIMITATIONS

已知限制

- **No false green:** `unknown` action receipts need fresh proof. Runs report `pass`, `inconclusive`, or `fail`; missing coverage is not absence. - **No authority escalation:** driver approvals remain in force. Secure fields and `EXTERNAL_COMMIT_TARGET` are refused; mobile sessions require an explicit device id, with no default-device fallback. - **Replay needs durable targets:** coordinates, ephemeral references, and ambiguous selectors are not promoted into durable scenarios. An action with no settled, provable outcome is excluded from export. - **Vision is advisory:** visual assertions assist triage but do not determine the run status. Model narration is not observed fact. - **Mobile support is conditional:** iOS text input requires live native element-bound primitives and identifiers. Android `type` verifies real focus; Android `fill` remains unavailable. - **Evidence needs care:** structured reports use fail-closed redaction, but screenshots can still contain private content. Use synthetic test data and inspect artifacts before sharing. Login-state injection requires explicit owner authorization for exact origins; see [login state](./docs/LOGIN_STATE.md).