The guard that stops our automation from following a link

说明与用途

通过在录制和回放过程中检查注册域（eTLD+1）并阻止跳转到第三方网站，防止自动化工作流意外创建账户，确保安全可审计的自动化流程。

问题

Automated form‑filling workflows can unintentionally navigate to third‑party sites that require account creation, payment, or other actions, leading to unintended account creation and data leakage.

结果

The guard prevents automated workflows from following redirects to external domains, ensuring that only safe, same‑site interactions are executed and reducing the risk of unintended account creation.

工作流

• 1. User records a reply flow on the aggregator site.
• 2. During recording, any step that navigates to a different registrable domain is flagged and not recorded.
• 3. On replay, the guard checks the current URL’s registrable domain against the original domain.
• 4. If the domains differ, the guard triggers an "offsite" block and aborts the replay.
• 5. The user is notified of the specific guard that tripped.

证据

Guard at the point data enters the system, not only at the point it is used. A recorded artifact is a persisted decision, and persisting a dangerous one and relying on downstream checks means one missed check turns into a repeatable incident.

来源

Every rule here is deterministic and runs before anything is typed or clicked. None of it is delegated to a model — the whole point is that the refusals are predictable and auditable.

来源