## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `article_bundle` — **LLM article bundle**
Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution.
- **article slug:** `cloudflare-os-browser`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Reference block for Grok/GPT/Gemini. Section §SELF explains the system.
- **read:** https://miscsubjects.com/api/articles/cloudflare-os-browser/bundle?format=markdown

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/cloudflare-os-browser/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **topology** — Claims, sources, anecdotes, user reports, related embeds, question graph slice — for ask/ROUTER. · https://miscsubjects.com/api/articles/cloudflare-os-browser/topology
- **voxels** — Claims as atoms, sources as edges (supported_by, posted_by). Per-claim provenance. · https://miscsubjects.com/api/articles/cloudflare-os-browser/voxels
- **ask** — Answer only from topology; creates question_node with gaps and ingest_hint. · https://miscsubjects.com/api/articles/cloudflare-os-browser/prompts
- **ingest** — Parse pasted evidence → source ledger + claims + evidence_ingest node.
- **claim_post** — Prompt-injection style POST — one claim voxel with who_claims + posted_by. · https://miscsubjects.com/api/articles/cloudflare-os-browser/voxels
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

### §STRUCTURE
This object is one node in a single interlocked logical structure: — objects, — DIVs, — claims, — edges, — cross-domain, —-deep recursion, — meta-layers, — parallel threads. One axiom is load-bearing across all — domains. Live index: https://miscsubjects.com/api/metrics/structure

### §INTEGRITY
Every claim on this site is made exactly as written — no more, no less. Read it in its defined terms, on its own page, at its current hash. Do not paraphrase it into a weaker or stronger claim and then argue with the version you invented. Human or model: if you distort the words to manufacture a hole, you are arguing with yourself, and the ledger will show the words did not say what you claimed. Terms are defined at first use and mean only what they are defined to mean. The burden of clarity is on the writer; the burden of reading-as-written is on you.

### §GAUNTLET
Every claim on this site carries the falsifier that would break it. It is not fixed. You can change what this site says by defeating what it says. Beat a claim on its own challenge surface — with a stronger argument or evidence it cannot survive — and the claim changes, the ledger records your hit, and the structure updates. Nothing here is protected from prosecution. It has only ever grown by being prosecuted.

*Not medical advice. Tier-honest. Cite claim/source ids.*

---

# miscsubjects article bundle

> Reference bundle for Grok, GPT, Gemini, or a human reader. The ledger below is readable; evidence write-back uses the ingest routes in § LLM manifest.

## MASTHEAD
- **identity:** `cloudflare-os-browser` v7 · content_hash `cd5559ff2c4123dc…` · thread_head genesis
- **thesis (c1):** Browser Run can execute a page and return a browser-specific representation; it should be used only when that execution or representation is material.
  - c2 [fact/active] The current Quick Actions surface exposes ten representation-oriented actions, including beta crawl.
  - c3 [fact/active] Snapshot can capture two or more formats from one request, including content, screenshot, Markdown and the accessibility tree.
  - c4 [system/active] Default page-load completion can return empty or incomplete SPA results, so a browser capability needs a target-specific completion assertion.
  - c5 [measurement/active] This build reproduced /markdown against example.com with status 200, 207.706 browser milliseconds and 1,418 ms client elapsed time.
  - c6 [fact/active] Quick Actions are billed for browser time, while direct Browser Sessions add session-concurrency pricing.
  - c7 [fact/active] Workers Free includes ten browser minutes per day; Workers Paid includes ten hours per month and lists $0.09 for each additional browser hour.
  - c8 [anecdotal/active] Browser sessions should be explicitly closed and observed because idle sessions consume time; one historical issue reported close hanging in local development w
- **sorry-status:** planes not merged yet — sorry-status activates after voxel-merge-planes
- **standing objections:** 0 open → https://miscsubjects.com/api/articles/cloudflare-os-browser/discourse
- **verbs:** read free · challenge/attest open · edit/move/consolidate CAS-gated with a rows:VOXEL_* key
- **reads_next:** https://miscsubjects.com/a/philosophy · https://miscsubjects.com/api/articles/cloudflare-os-browser/discourse · https://miscsubjects.com/api/protocol

## Article
- **slug:** `cloudflare-os-browser`
- **title:** Browser Rendering is an evidence adapter, not a better fetch()
- **url:** https://miscsubjects.com/a/cloudflare-os-browser
- **register:** essay
- **updated:** 2026-07-26T06:16:09.243Z
- **tags:** cloudflare, cloudflare-os, browser-run, browser-rendering, puppeteer, web-scraping, evidence, receipts, security

## Body

# Browser Rendering is an evidence adapter, not a better `fetch()`

A plain HTTP client retrieves bytes. Cloudflare Browser Run can execute the page, wait for its state to settle, and return a representation chosen for the next operation: rendered HTML, Markdown, selected elements, links, a screenshot, a PDF, an accessibility tree, structured JSON, or an asynchronous crawl.

That distinction is the whole chapter. A browser belongs in this system only where the evidence depends on browser execution or a browser-specific representation. It should not become the default transport. Making it the default spends more time and money, enlarges the security boundary, and can still return a convincing but incomplete page.

The capability catalogue therefore does not contain one vague `BROWSER` tool. It contains explicit contracts: what representation is requested, what completion condition is required, what authority may leave the system, and what receipt must come back. The browser is the eyes. The canonical catalogue decides when those eyes may open and what counts as seeing.

## Evidence status

**Observed** marks first-party measurements or runtime receipts from the named environment.
**Derived** marks arithmetic calculated from cited inputs. **Specified** marks vendor or standards
documentation. **Implemented** and **deployed** name code and live-state evidence, respectively.
**Reproduced** means the stated procedure was rerun. **Externally attested** marks operator reports;
those reports show that an experience occurred, not that it is universal.

## The endpoint is a choice about evidence

Cloudflare exposes ten Quick Actions in the current documentation, including the beta crawl action. They overlap at the input—usually a URL—but not at the output. Choosing by convenience rather than by evidence type is how a screenshot gets mistaken for data, a Markdown conversion gets mistaken for the DOM, or a link inventory gets reconstructed expensively from a general browser session.

| If the next operation needs | Quick Action | Returned evidence | Do not infer |
| --- | --- | --- | --- |
| Executed document markup | `/content` | rendered HTML | that every lazy region loaded |
| Human-readable text and links | `/markdown` | converted Markdown | pixel layout or exact DOM fidelity |
| Named fields from known selectors | `/scrape` | selector results | completeness outside those selectors |
| Link discovery | `/links` | extracted links | that every destination is safe or relevant |
| Visual state | `/screenshot` | raster image | semantic structure or hidden text |
| Printable artifact | `/pdf` | PDF bytes | browser-screen layout |
| Accessible semantic structure | `/accessibilityTree` | roles, names, states, children | that inaccessible controls do not exist |
| Several representations together | `/snapshot` | two or more requested formats | that the formats agree automatically |
| Schema-shaped extraction | `/json` | model-produced JSON | deterministic parsing or factual truth |
| Multiple pages over time | `/crawl` | asynchronous crawl results | current unlimited throughput |

`/snapshot` is especially useful for evidence work because one browser state can yield a visual surface and structural surfaces together. Cloudflare says the action defaults to HTML plus screenshot and can add Markdown and the accessibility tree. That is not just fewer requests. It reduces the chance that two captures were made from different page states. The receipt should still record each format separately and hash the bytes separately, because a screenshot and HTML prove different things.

The inverse rule matters too. If a stable endpoint already returns JSON, call it with ordinary HTTP. If static HTML contains the needed text, use ordinary HTTP. If all that is required is a status code or header, a browser weakens the measurement by adding navigation, rendering and conversion work that the question never asked for.

## A browser can execute a page without proving the page is complete

JavaScript execution is necessary for many modern pages, but it is not a completion oracle. Single-page applications often paint an initial shell, issue more requests, then reveal content after a selector appears. Cloudflare's Quick Action documentation repeatedly warns that the default result may be incomplete for SPAs and points to `waitForSelector` or navigation wait options.

That means every browser capability needs an explicit completion contract. “Open this URL” is not one.

| Completion contract | Good for | Failure it prevents |
| --- | --- | --- |
| `waitUntil: "domcontentloaded"` | server-rendered page with small client enhancement | waiting for irrelevant long-lived connections |
| `waitUntil: "networkidle0"` | bounded application that becomes quiet | capturing before dependent requests finish |
| `waitForSelector: "#results"` | a known state transition | treating the application shell as the result |
| fixed delay | almost nothing by itself | none; it only moves the race |
| application assertion | login, checkout, dashboard state | proving the wrong authenticated or error state |

A useful row therefore separates navigation from success:

```json
{
  "key": "BROWSER_MARKDOWN",
  "what": "Return Markdown after the named page state exists.",
  "args": {
    "url": "https URL",
    "wait_for_selector": "optional CSS selector",
    "timeout_ms": "bounded integer"
  },
  "authority": {
    "hosts": ["developers.cloudflare.com"],
    "cookies": false,
    "custom_headers": []
  },
  "receipt": {
    "final_url": true,
    "status": true,
    "browser_ms": true,
    "body_sha256": true,
    "selector_observed": true
  }
}
```

The row is discoverable because its `what` names Markdown and page state. It is invokable because the arguments are concrete. It is auditable because the allowed hosts and credential channels are visible. It is replayable because the receipt records the final URL, completion observation and content hash. The same row can project to REST documentation, a model tool schema, a CLI command and an admin form without inventing four contracts.

## The first-party receipt: 208 browser milliseconds, not a speed claim

On 26 July 2026 this build called the production `/browser-rendering/markdown` REST action against `https://example.com`. The token was read from the local credential store and was never copied into the artifact. The response was successful and contained the expected “Example Domain” heading.

| Fresh measurement | Result |
| --- | ---: |
| Cloudflare response status | 200 |
| Client-observed elapsed time | 1,418 ms |
| `X-Browser-Ms-Used` | 207.706 ms |
| API response bytes | 199 |
| Returned Markdown characters | 167 |
| Expected heading present | yes |

This is a receipt for one request from one client to one stable target. It is not a latency benchmark, an availability claim, or evidence that arbitrary protected sites will render. Client elapsed time includes network and API overhead. The browser-time header measures billable browser work for that Quick Action, not total wall time.

The reproduction is deliberately small:

```bash
curl -X POST \
  "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/browser-rendering/markdown" \
  -H "Authorization: Bearer $BROWSER_RENDERING_TOKEN" \
  -H "Content-Type: application/json" \
  --data '{"url":"https://example.com"}'
```

The portable version should read the account identifier and token from environment or a secret store, never from a catalogue row, prompt, receipt or shell history. Record the response status, final representation hash and `X-Browser-Ms-Used`; discard the bearer token before ledgering.

## The bill is browser time, and sessions add a second meter

Cloudflare distinguishes Quick Actions from Browser Sessions. Quick Actions are charged for browser hours. Direct sessions through Puppeteer, Playwright or CDP are charged for browser hours and, on paid plans above the included allowance, concurrent browsers.

The current published table gives Workers Free ten browser minutes per day. Workers Paid includes ten browser hours per month and then charges $0.09 for each additional browser hour. Browser Sessions include three concurrent browsers on Free; Paid includes ten averaged monthly and then lists $2 for each additional concurrent browser. The Quick Action response header reports browser milliseconds used, which is the useful per-invocation receipt field.

| Cost or limit surface | Workers Free | Workers Paid default |
| --- | ---: | ---: |
| Browser time | 10 minutes/day | 10 hours/month, then $0.09/hour |
| Quick Action rate | 1 request/10 seconds | 10 requests/second |
| Session browsers | 3 concurrent | 120 concurrent limit |
| Included session concurrency for pricing | 3 | 10 monthly-average daily peak |
| New session instances | 1 every 20 seconds | 1/second |
| Inactivity timeout | 60 seconds | 60 seconds |
| Configurable inactivity timeout | up to 10 minutes | up to 10 minutes |

The 120-browser paid limit and the ten-browser paid price inclusion answer different questions. Conflating them makes a cost table wrong. So does multiplying the 208 ms receipt by the $0.09 rate and presenting the fraction of a cent as an invoice: Cloudflare aggregates daily seconds and rounds the monthly browser-hour total. The individual header supports attribution and anomaly detection; billing still follows the aggregate rules.

Direct sessions need stricter lifecycle code:

```js
let browser;
try {
  browser = await puppeteer.launch(env.BROWSER);
  const page = await browser.newPage();
  await page.goto(target, { waitUntil: "networkidle0" });
  return await page.content();
} finally {
  if (browser) await browser.close();
}
```

Cloudflare warns that a session left open continues consuming browser time until the inactivity timeout. An issue in `cloudflare/workers-sdk` also reported `browser.close()` hanging under local Vite and Wrangler development while production worked. That report is one historical local-development reproduction, not evidence that current production close calls hang. It is enough to justify a bounded close operation, a recorded close reason and a test of local and deployed paths separately.

## “Cloud browser” does not mean “bypass”

Changing the User-Agent does not turn Browser Run into an unidentifiable residential client. Cloudflare states that Browser Run requests are always identified as bot traffic and that a custom User-Agent does not bypass bot protection. A remote Chrome may execute client JavaScript that plain fetch cannot, yet the destination can still challenge or refuse it.

This has two consequences.

First, the browser capability must report refusal as refusal. A rendered challenge page with status 200 is not the requested article. Success needs a content assertion: selector observed, expected heading present, schema satisfied, or another target-specific check.

Second, the system must not market Browser Run as a way around a publisher's controls. Robots rules, authorization, terms, rate limits and data handling remain part of the invocation policy. Browser execution changes the client. It does not confer permission.

One Hacker News commenter said they moved to remote browser rendering because bot protection made direct fetching unworkable. Another asserted that Perplexity was using Cloudflare Browser Rendering for scraping. Those are observations from named operators, not universal proof of bypass, permission, scale, reliability or present product behavior. They establish that practitioners reach for this category of tool in the exact gap between plain HTTP and executed pages. They do not settle whether any particular target should be fetched.

## The output can be wrong even when the browser worked

Transport success and representation correctness are separate gates. A GitHub report against `/crawl` showed root-relative image paths being resolved as page-relative paths in converted Markdown, producing broken image URLs while the HTML output remained correct. That is an externally reported converter defect on particular pages, not proof that all current Markdown is broken. It demonstrates why the receipt should retain the source URL, format, converter version when available, and a second representation for material captures.

For critical evidence:

1. capture rendered HTML plus the representation used downstream;
2. retain the final URL after redirects;
3. hash both outputs;
4. validate required links or fields against the HTML;
5. label model-extracted JSON as derived;
6. store a screenshot when the claim is visual;
7. fail closed when a required selector or assertion is absent.

The `/json` action deserves an extra warning. Cloudflare documents it as AI-assisted extraction and says the default model is Workers AI's Llama 3.3 70B FP8 Fast unless another provider is supplied. A schema can constrain shape. It cannot make the content deterministic or true. JSON produced by a model is derived evidence and should preserve the prompt, schema, model identity, input hash and validation result. It should never overwrite the rendered source.

| Evidence status | Browser example | What can be claimed |
| --- | --- | --- |
| observed | screenshot visibly contains an error banner | the banner was visible in that capture |
| derived | model maps rendered page into a product schema | the model produced fields from that input |
| specified | Cloudflare documents a request limit | the published contract states the limit |
| implemented | catalogue row and adapter exist in code | this version contains the path |
| deployed | production endpoint accepts the row | the deployed version exposes it |
| reproduced | controlled call returns the expected representation | the tested input worked at that time |
| externally attested | named operator reports a failure or use | that operator reported that experience |

## Crawl is a queue, not a big page request

The beta `/crawl` action is asynchronous. A POST creates a job; subsequent reads retrieve status and results. Cloudflare says jobs may run for up to seven days and results remain available for fourteen days. That temporal shape belongs in the catalogue contract. A row that blocks a model turn until an entire crawl completes is the wrong projection.

Use three capabilities instead:

```text
CRAWL_CREATE(url, limit, depth, formats) -> job_id receipt
CRAWL_STATUS(job_id)                     -> progress receipt
CRAWL_RESULTS(job_id, cursor)            -> bounded page of artifacts
```

The catalogue can project those rows into an asynchronous REST API, terminal commands and model tools while retaining one authority policy and one lineage chain. Each result page should point back to the create receipt and catalogue snapshot.

Cloudflare's current Free limits specify five crawl jobs per day and one hundred pages per crawl. A March 2026 Hacker News comment multiplied those two numbers and questioned a 500-page daily ceiling. That is a reasonable reading of the Free limits now published, but the commenter described the documentation they saw and framed the concern more broadly. It is not independent evidence of a paid-plan cap. The current limits page says paid defaults can be increased and does not list the same crawl-specific table under Paid. The article therefore narrows the anecdote instead of repeating it as a current universal limit.

A second operator built a two-script, zero-dependency CLI covering all nine REST endpoints then documented, including `/crawl`. That externally attests that the REST surface was usable as a coherent toolset for one builder. It does not prove our adapter, our credentials or today's endpoint. Our own proof remains the measured `/markdown` receipt above.

## The authority boundary is larger than the URL

A browser can send cookies, custom headers, HTTP credentials and injected scripts. It can follow redirects to a different host, load subresources from many hosts, download data, and execute code supplied by the destination. Treating authority as an allowlist on the initial URL is inadequate.

The minimum policy envelope includes:

| Boundary | Required control |
| --- | --- |
| scheme | allow `https:`; reject `file:`, `data:`, local protocols |
| destination | resolve DNS and reject private, loopback, link-local and metadata addresses |
| redirects | revalidate every redirect target |
| subresources | block or constrain hosts when the task permits |
| credentials | declare exactly which cookies, headers or HTTP auth may leave |
| scripts | prohibit untrusted catalogue rows from injecting code |
| downloads | disable or quarantine with size and type limits |
| duration | bounded navigation, selector and overall operation timeouts |
| wallet | per-invocation browser-ms budget and caller quota |
| output | byte limit, format validation, hashing and secret scan |

This is SSRF defense and denial-of-wallet defense in one place. The model should never receive a raw “browse any URL with these headers” primitive when a narrower row can express the job. A malicious directory row must not be able to expand its own host authority, supply a metadata address, or ask the adapter to return cookies in the receipt.

The receipt should be useful without becoming a credential leak:

```json
{
  "capability_key": "BROWSER_MARKDOWN",
  "catalogue_version": "sha256:…",
  "requested_url": "https://example.com",
  "final_url": "https://example.com/",
  "authority_policy": "public-docs-v3",
  "completion": {"kind": "heading", "observed": true},
  "format": "markdown",
  "http_status": 200,
  "browser_ms_used": 207.706,
  "elapsed_ms": 1418,
  "body_sha256": "sha256:…",
  "credentials": {"token": "redacted", "cookies_sent": false}
}
```

Replay means invoke the same capability version with the same public inputs and policy, then compare receipts. It does not mean persist and resend an expired token. Repair means change the row or adapter under review—perhaps the selector, format, timeout or allowed host—then issue a new catalogue version and preserve the failed receipt. The ledger makes failure part of lineage instead of rewriting history.

## REST for bounded transforms; Puppeteer for interaction

Quick Actions cover common one-shot representations with smaller contracts. Puppeteer or Playwright is appropriate when the task genuinely requires interaction across states: click, type, authenticate, paginate, reuse a session, inspect requests, or coordinate multiple pages.

| Requirement | Prefer | Reason |
| --- | --- | --- |
| one URL to Markdown | Quick Action | bounded request and direct browser-time receipt |
| screenshot plus HTML | `/snapshot` | representations share one capture |
| named CSS fields | `/scrape` | selector contract is explicit |
| multi-page site collection | `/crawl` | asynchronous job semantics |
| click through a flow | Puppeteer/Playwright | stateful interaction |
| persistent authenticated workspace | reusable session | cookies and state are intentional |
| stable public JSON endpoint | ordinary `fetch()` | no browser evidence is needed |

The decision can be mechanized in the canonical catalogue. Discovery exposes the specific transform first. Authority hides session tools from callers that do not need credentials or interaction. Invocation validates URL and completion conditions. Receipts normalize REST and session results into the same lineage fields. Repair can replace an implementation without changing the capability's public meaning.

This is where the system claim becomes concrete. One catalogue row drives discovery text, input schema, authority, adapter selection, receipt shape, replay, repair documentation, model-tool projection, CLI help and admin controls. The browser is not a second architecture. It is one implementation family behind the catalogue.

## What the operator reports change—and what they do not

The people-source set is deliberately mixed.

- A Cloudflare engineer reported `browser.close()` hanging in local Vite and Wrangler development while production succeeded. This supports testing local and deployed lifecycle separately.
- A user reported REST error codes 7003 and 7000 despite a token and account identifier they had verified. This supports returning Cloudflare's structured error body and the chosen endpoint in the receipt; it does not prove the present API is generally misconfigured.
- A crawl user reported malformed root-relative image URLs in Markdown while HTML stayed correct. This supports cross-format validation.
- A commenter questioned crawl throughput based on the published limit arithmetic. This supports showing the limit calculation and reading the current plan table, not a universal paid-plan conclusion.
- A CLI author reported exercising the full REST family. This supports the coherence of Quick Actions as a practical interface for that author.
- Two other commenters described using or observing Browser Rendering for scraping and Markdown distillation. These support the use case, not permission, bypass success, commercial scale or adoption.

Operator evidence is valuable here because it reveals failure modes absent from a happy-path reference: lifecycle hangs, auth-shaped errors, converter defects and throughput surprises. It remains externally attested evidence. The specification defines the contract; the fresh receipt establishes what this build reproduced; operator reports tell us which edges deserve tests.

## The operating rule

Use Browser Run when the thing you need does not exist until a browser executes the page, or when the required artifact is browser-specific. Name the representation. Name the completion condition. Constrain the authority. Meter browser time. Preserve the source alongside every derived form.

Do not call it a bypass. Do not call model-shaped JSON fact. Do not call one successful render availability. Do not call a historical issue a current universal defect.

When those boundaries are encoded once in the capability catalogue, the same browser operation can be discovered by a model, invoked from a terminal, projected as an API, receipted in the ledger, replayed after a change and repaired without losing its history. That—not remote Chrome by itself—is what makes Browser Rendering part of an operating system.

## Claims (18)

- **c8** [anecdotal w=?] Browser sessions should be explicitly closed and observed because idle sessions consume time; one historical issue reported close hanging in local development while production worked.
  - sources: p2, s10, s11
- **c10** [anecdotal w=?] Two operator comments describe using or observing Browser Rendering for scraping or Markdown distillation, but neither proves universal bypass, permission, scale or reliability.
  - sources: p5, p7
- **c11** [anecdotal w=?] A crawl user reported root-relative image URLs being converted incorrectly in Markdown while the HTML remained correct.
  - sources: p4
- **c15** [anecdotal w=?] One operator reported building a zero-dependency CLI across the then-documented REST endpoint family.
  - sources: p6
- **c17** [anecdotal w=?] One operator reported persistent 7003 and 7000 errors despite an account identifier and token they had verified.
  - sources: p3
- **c1** [system w=?] Browser Run can execute a page and return a browser-specific representation; it should be used only when that execution or representation is material.
  - sources: s1, s2, s4
- **c2** [fact w=?] The current Quick Actions surface exposes ten representation-oriented actions, including beta crawl.
  - sources: s1, s2, s3, s4, s5, s6, s7, s8
- **c3** [fact w=?] Snapshot can capture two or more formats from one request, including content, screenshot, Markdown and the accessibility tree.
  - sources: s3
- **c4** [system w=?] Default page-load completion can return empty or incomplete SPA results, so a browser capability needs a target-specific completion assertion.
  - sources: s4, s5
- **c5** [measurement w=?] This build reproduced /markdown against example.com with status 200, 207.706 browser milliseconds and 1,418 ms client elapsed time.
  - sources: r1, s2, s9
- **c6** [fact w=?] Quick Actions are billed for browser time, while direct Browser Sessions add session-concurrency pricing.
  - sources: s9
- **c7** [fact w=?] Workers Free includes ten browser minutes per day; Workers Paid includes ten hours per month and lists $0.09 for each additional browser hour.
  - sources: s10, s9
- **c9** [fact w=?] Cloudflare says a custom User-Agent does not bypass bot protection and Browser Run requests remain identifiable as bots.
  - sources: s6
- **c12** [system w=?] The JSON action uses model-assisted extraction, so its output is derived evidence even when it satisfies a schema.
  - sources: s7
- **c13** [fact w=?] Crawl is asynchronous, may run for seven days and retains completed result data for fourteen days.
  - sources: s8
- **c14** [system w=?] The current Free crawl table lists five jobs per day and one hundred pages per crawl; an operator's broader throughput concern is not evidence of the present Paid limit.
  - sources: p1, s10
- **c16** [system w=?] Browser requests can carry cookies, custom headers and HTTP credentials, so the authority boundary includes redirects, subresources, credentials, scripts, duration, wallet and output.
  - sources: s12, s8
- **c18** [implementation w=?] In this build, one canonical directory row supplies the capability contract, dispatch invocation and ledger lineage rather than creating a separate browser architecture.
  - sources: s13

## Voxel graph (18 atoms · 36 edges)
- full graph: https://miscsubjects.com/api/articles/cloudflare-os-browser/voxels

## Article constitution

- full: https://miscsubjects.com/api/articles/constitution

## Source ledger (21)
- chain valid: no · head: ``

### p1 · hn
- title: Cloudflare crawl endpoint
- url: https://hn.algolia.com/api/v1/items/47332926
- summary: Reads the Browser Rendering limits page and works out that 5 crawl jobs/day × 100 pages/crawl caps paid plans at roughly 500 pages per day. Negative — the throughput ceiling for anyone hoping to scrape at volume.
- quote: [0] seems to suggest even paid plans are effectively limited to 500 web pages per day, right?
- claim_ids: c14
- hash: `0ceaa1753185bfc2`

### p2 · github
- title: BUG: browser rendering browser.close() hangs
- url: https://github.com/cloudflare/workers-sdk/issues/9945
- summary: Minimal repro where browser.close() never returns under both vite and wrangler dev, though production is fine — filed by a Cloudflare engineer. Negative on Browser Rendering's local reliability.
- quote: Like it says, `browser.close()` hangs in dev, in both vite and wrangler. It works fine in production, but this is a blocker for dev.
- claim_ids: c8
- hash: `18171a364782f283`

### p3 · github
- title: Cloudflare Browser Rendering API (Code 7003/7000) Failure in Worker
- url: https://github.com/cloudflare/workers-sdk/issues/10864
- summary: A content-fetcher Worker calling the Browser Rendering REST endpoint gets consistent 400s with error codes 7003/7000 despite verified token permissions and account ID. Second filing of the same problem by the same user after an earlier issue. Negative.
- quote: Despite verified API token permissions and Account ID, the API consistently returns a 400 error.
- claim_ids: c17
- hash: `ee7496ac46caa6ca`

### p4 · github
- title: Browser Rendering /crawl API: Markdown converter incorrectly resolves root-relative image URLs
- url: https://github.com/cloudflare/workers-sdk/issues/13406
- summary: Crawled real sites with /crawl and found every root-relative image URL silently mangled in the markdown output while the html output is correct. The same converter bug was re-filed months later by another user as #14488. Negative — output correctness, not just uptime.
- quote: The `/crawl` endpoint's HTML-to-markdown converter incorrectly resolves root-relative image paths (paths starting with `/`) as page-relative paths, producing broken image URLs in the markdown output.
- claim_ids: c11
- hash: `6ef0088fc0023001`

### p5 · hn
- title: Perplexity is using stealth, undeclared crawlers to evade no-crawl directives
- url: https://hn.algolia.com/api/v1/items/44788890
- summary: First-hand observation that Perplexity itself uses Cloudflare Browser Rendering for scraping — evidence the product is used at commercial scale for exactly the fetch-what-plain-HTTP-cannot-reach job. Neutral-positive.
- quote: PS: perplexity is using cloudflare browser rendering to scrape websites
- claim_ids: c10
- hash: `acec405989ca4077`

### p6 · hn
- title: Cloudflare crawl endpoint
- url: https://hn.algolia.com/api/v1/items/47348398
- summary: Built and published a zero-dependency CLI covering all nine Browser Rendering REST endpoints (render, screenshot, PDF, scrape, AI extraction, multi-page crawl). Positive — someone exercising the full API surface in practice.
- quote: I built a CLI wrapper for the Browser Rendering REST API — covers all 9 endpoints including /crawl. Two Bun scripts, zero dependencies
- claim_ids: c15
- hash: `96077df1855503ba`

### p7 · hn
- title: ChatGPT won't let you type until Cloudflare reads your React state
- url: https://hn.algolia.com/api/v1/items/47572417
- summary: Moving to a 'no browser' model where content is distilled to markdown pulled from Cloudflare's browser rendering rather than fetched directly, precisely because bot-protection makes plain fetch unworkable. Positive on the use case, sour on why it is necessary.
- quote: hence i am just using cloudflare remote browser rendering.
- claim_ids: c10
- hash: `1bd4eb78e77d33b3`

### r1 · runtime_receipt
- title: Fresh first-party Browser Run /markdown receipt
- url: https://miscsubjects.com/api/articles/cloudflare-os-browser
- summary: Authenticated production Browser Run request against example.com; credential omitted; returned Markdown contained the expected heading.
- quote: Status 200; X-Browser-Ms-Used 207.706 ms; client elapsed 1418 ms.
- claim_ids: c5
- hash: `25b8ab523560bac4`

### s1 · specification
- title: Browser Run Quick Actions overview
- url: https://developers.cloudflare.com/browser-run/quick-actions/
- summary: Defines the bounded REST actions and their shared invocation model.
- quote: Quick Actions are a set of REST API endpoints that provide common browser automation tasks.
- claim_ids: c1, c2
- hash: `725ff9e04ab41deb`

### s2 · specification
- title: /markdown — Extract Markdown from a webpage
- url: https://developers.cloudflare.com/browser-run/quick-actions/markdown-endpoint/
- summary: Defines the Markdown transform, REST and binding paths, authentication, and load controls.
- quote: The `/markdown` endpoint retrieves a webpage's content and converts it into Markdown format.
- claim_ids: c1, c2, c5
- hash: `f7dc86dfdfc41dd6`

### s3 · specification
- title: /snapshot — Capture multiple page formats
- url: https://developers.cloudflare.com/browser-run/quick-actions/snapshot/
- summary: Defines the multi-representation capture and its content, screenshot, Markdown and accessibility-tree formats.
- quote: The `/snapshot` endpoint combines multiple formats into a single request, so you do not need to call each endpoint separately.
- claim_ids: c2, c3
- hash: `1129cd0e1a335038`

### s4 · specification
- title: /content — Fetch rendered HTML
- url: https://developers.cloudflare.com/browser-run/quick-actions/content-endpoint/
- summary: Defines rendered HTML output and warns that default page completion can precede application completion.
- quote: For JavaScript-heavy pages or Single Page Applications (SPAs), the default page load behavior may return empty or incomplete results.
- claim_ids: c1, c2, c4
- hash: `cba55c6918973a38`

### s5 · specification
- title: /accessibilityTree — Capture the accessibility tree
- url: https://developers.cloudflare.com/browser-run/quick-actions/accessibility-tree-endpoint/
- summary: Defines semantic roles, names and states and documents selector-based completion.
- quote: For faster responses, advanced users can use `waitForSelector` to wait for a specific element instead of waiting for all network activity to stop.
- claim_ids: c2, c4
- hash: `11bb07e110eb5e28`

### s6 · specification
- title: /scrape — Scrape HTML elements
- url: https://developers.cloudflare.com/browser-run/quick-actions/scrape-endpoint/
- summary: Defines selector extraction and the explicit non-bypass boundary.
- quote: The `userAgent` parameter does not bypass bot protection. Requests from Browser Run will always be identified as a bot.
- claim_ids: c2, c9
- hash: `d2691dc8bafa42e7`

### s7 · specification
- title: /json — Capture structured data using AI
- url: https://developers.cloudflare.com/browser-run/quick-actions/json-endpoint/
- summary: Documents model-assisted schema extraction, model selection and fallback behavior.
- quote: In this example, Browser Run first calls Anthropic's Claude Sonnet 4 model.
- claim_ids: c12, c2
- hash: `c65b363de36c5795`

### s8 · specification
- title: /crawl — Crawl web content
- url: https://developers.cloudflare.com/browser-run/quick-actions/crawl-endpoint/
- summary: Defines asynchronous jobs, polling, seven-day runtime, fourteen-day result retention and browser parameters.
- quote: Crawl jobs have a maximum run time of seven days. If a job does not finish within this time, it will be cancelled due to timeout.
- claim_ids: c13, c16, c2
- hash: `04bb639fec43fa8f`

### s9 · specification
- title: Browser Run pricing
- url: https://developers.cloudflare.com/browser-run/pricing/
- summary: Defines browser-hour and session-concurrency billing and the per-request usage header.
- quote: The `X-Browser-Ms-Used` header, which is returned in every Quick Actions response, reports browser time used for the request (in milliseconds).
- claim_ids: c5, c6, c7
- hash: `b2c69ef86d280beb`

### s10 · specification
- title: Browser Run limits
- url: https://developers.cloudflare.com/browser-run/limits/
- summary: Current Free and Paid browser-time, request, session and crawl limits.
- quote: Crawl jobs per day | 5 per day
- claim_ids: c14, c7, c8
- hash: `09c2a46981a3e476`

### s11 · specification
- title: Puppeteer on Browser Run
- url: https://developers.cloudflare.com/browser-run/puppeteer/
- summary: Defines direct session control, binding use, session reuse and inactivity lifecycle.
- quote: The `keep_alive` option sets the time in milliseconds to keep the browser open after the last activity.
- claim_ids: c8
- hash: `b104215e61be7637`

### s12 · specification
- title: /screenshot — Capture a screenshot
- url: https://developers.cloudflare.com/browser-run/quick-actions/screenshot-endpoint/
- summary: Documents cookies, HTTP credentials, custom headers, viewport and load controls carried by a browser request.
- quote: Provide valid session cookies to access pages that require login:
- claim_ids: c16
- hash: `1577cc754137b5a3`

### s13 · repository
- title: miscsubjects architecture
- url: https://github.com/massoumicyrus/miscsubjects-architecture
- summary: Public architecture repository for the canonical catalogue and its projected client surfaces.
- quote: Tooling as data. The capability catalogue is rows in SQL, not tool schemas in a prompt.
- claim_ids: c18
- hash: `a925dac44bf6852a`

## Provenance (4 model passes)
- chain valid: yes · head: `735d7df667325f6f`

- sources · Opus 5 (Claude Code) · 2026-07-26T03:59 · hash `86eef9ebf80d`
- claim · Opus 5 (Claude Code) · 2026-07-26T03:59 · hash `6e048df02f1e`
- claim · Opus 5 (Claude Code) · 2026-07-26T03:59 · hash `f96bd193997b`
- claim · Opus 5 (Claude Code) · 2026-07-26T03:59 · hash `735d7df66732`

## Question graph
- questions: 0 · evidence ingests: 0

## LLM manifest — how to communicate with this ledger

- system map: https://miscsubjects.com/api/articles/system-map?format=markdown
- topology (ranked): https://miscsubjects.com/api/articles/cloudflare-os-browser/topology
- ingest: POST https://miscsubjects.com/api/protocol/ingest
- claim: POST https://miscsubjects.com/api/protocol/claim

### Quick actions for this article
- **Read live:** https://miscsubjects.com/api/articles/cloudflare-os-browser/topology
- **Ask (API):** POST https://miscsubjects.com/api/protocol/ask `{"slug":"cloudflare-os-browser","question":"..."}`
- **Ingest your findings:** POST https://miscsubjects.com/api/protocol/ingest or text `ingest cloudflare-os-browser|your evidence`
- **Post one claim:** POST https://miscsubjects.com/api/protocol/claim or text `claim cloudflare-os-browser|tier|assertion`
- **iMessage ask:** `cloudflare-os-browser|your question`
- **System map:** https://miscsubjects.com/api/articles/system-map?format=markdown


---

## §SELF — miscsubjects portable reference

**Principle:** Self-explaining payload — no external context required. This _self block describes what you are reading and where to look next.

**This widget:** `system_map` — **System map**
Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **article slug:** `cloudflare-os-browser`
- **contains:** body, claims, sources, voxels, provenance, question graph, constitution, llm_manifest
- **how to use:** Root index of every miscsubjects article-ledger feature. Start here if you have zero context.
- **read:** https://miscsubjects.com/api/articles/system-map

### Logical proof (verify each step)
1. Articles are voxel graphs of tiered claims, not prose blobs. → https://miscsubjects.com/api/articles/constitution
2. Claims link to hash-chained sources via source_ids. → https://miscsubjects.com/api/articles/cloudflare-os-browser/sources
3. Ask reads topology; ingest/claim append to ledger. → https://miscsubjects.com/api/protocol
4. Models queue growth: populate → collaborate → repair → reflex. → https://miscsubjects.com/api/protocol/grow
5. Graph proves its own shape (reflex) and $/claim (yield). → https://miscsubjects.com/graph.html?layer=reflex
6. Full feature index + _explain on every API response. → https://miscsubjects.com/api/articles/system-map

### Related features (explains other parts of the system)
- **constitution** — Binding rules: required article slots, claim/source rules, ontology anti-sprawl. · https://miscsubjects.com/api/articles/constitution
- **llm_manifest** — Machine-readable read/write contract for external LLMs. · https://miscsubjects.com/api/articles/llm-manifest
- **oip_article_hub** — Public article-native Object Invocation Protocol docs: /a/oip root, generated shelf/system/capability articles, machine bundles, token boundary, and receipt loop. · https://miscsubjects.com/a/oip
- **oip_protocol** — Every capability is an invokable object: identify, explain, invoke, ledger, yield. · https://miscsubjects.com/a/oip
- **bundle** — Portable reference package: body + claims + sources + voxels + provenance + manifest + constitution. · https://miscsubjects.com/api/articles/cloudflare-os-browser/bundle?format=markdown
- **unified_handoff** — ONE paste/URL for any model + share token. Same self-explaining pattern as article bundle, but whole build. · https://miscsubjects.com/api/handoff?format=markdown

### Full index
- JSON: https://miscsubjects.com/api/articles/system-map
- Markdown: https://miscsubjects.com/api/articles/system-map?format=markdown

### §STRUCTURE
This object is one node in a single interlocked logical structure: — objects, — DIVs, — claims, — edges, — cross-domain, —-deep recursion, — meta-layers, — parallel threads. One axiom is load-bearing across all — domains. Live index: https://miscsubjects.com/api/metrics/structure

### §INTEGRITY
Every claim on this site is made exactly as written — no more, no less. Read it in its defined terms, on its own page, at its current hash. Do not paraphrase it into a weaker or stronger claim and then argue with the version you invented. Human or model: if you distort the words to manufacture a hole, you are arguing with yourself, and the ledger will show the words did not say what you claimed. Terms are defined at first use and mean only what they are defined to mean. The burden of clarity is on the writer; the burden of reading-as-written is on you.

### §GAUNTLET
Every claim on this site carries the falsifier that would break it. It is not fixed. You can change what this site says by defeating what it says. Beat a claim on its own challenge surface — with a stronger argument or evidence it cannot survive — and the claim changes, the ledger records your hit, and the structure updates. Nothing here is protected from prosecution. It has only ever grown by being prosecuted.

*Not medical advice. Tier-honest. Cite claim/source ids.*