ToolBraidLiving causality theater
Guided demo Sandbox event replay No live mutation Open live WebMCP

01 · Objective

Give the web a mission. Keep the final say.

Codex asks ToolBraid to recover production and prepare a public update.
Now Objective ready
Next Bind the Chrome session

Guided mission topology

The Living Braid
Intent Evidence Authority Verified effect Rejected
Ready
ToolBraid living causality graph Codex and an active Chrome page send an objective through ToolBraid. ToolBraid discovers and reads providers, blocks hostile metadata and holds external actions at a human approval boundary before returning verified receipts. Codex ↔ MCP native agent bridge Chrome page exact tab + origin Discover native tools Normalize canonical meaning Evidence parallel safe reads Prepare exact effects Human authority exact approval Audit receipt + seal ToolBraid policy · authority · proof GitHub release evidence Vercel deployment control X status publication Hostile metadata untrusted descriptor
00:00/00:52

Live Workspace · bridge preview

One exact browser context. One accountable bridge.

Inspect the bridge contract here, then open the real seven-origin WebMCP workspace for live provider execution.
Connected replay Open live workspace

Authenticated local route

Codex / MCP bridge

Handshake 00:00
01Codexobjective caller
02MCP transportpage-bound tools
03Native hostper-user pipe
04Chrome MV3extension authority
05ToolBraidpolicy + receipts
Agent mayDiscover · read · prepare
Agent cannotApprove · retain credentials
Mutation pathSide-panel gesture only
TransportNative pipe readyPer-user · loopback only
Page grantExact origin grantedSeparate from provider permission
Session ownerReplay session boundNo credential transfer
Drift policyFail closedRebind requires trusted UI

Exact browser ownership

Current page

SANDBOX

Owner autonomy

Control plane

ACTIVE
  • ModeLocal owner policy
  • AuthorityExtension-owned
  • Model routeSelected outside extension
  • CredentialsNever transferred

This guided preview replays the bridge contract. The linked live workspace runs the native multi-origin provider flow.

Evidence · bounded and provenance-first

See what the mission knows—and what it does not.

DOM/ARIA, provider reads and optional media remain evidence. None of them can create authority.
Metadata ready
Bound records0current mission time
Provider reads0structured replay events
Quarantined0excluded before mapping
Retained raw bytes0ephemeral handles only

Selected page

Evidence catalogue

READY

Human authority · exact scope

Nothing external moves until every bound field is visible.

Approve or deny each effect separately. Any drift invalidates its one-time authority.
Evidence first

Current context

Prepared effects

0 / 2 APPROVED
Decision historyLOCAL REPLAY

    Receipts · append-only local integrity

    Trace every decision from intent to outcome.

    Generic dispatch stays unverified. Only a supported browser-observed postcondition may become verified success.
    Chain open

    Outcome proof

    Receipts

    0 RECORDS

    SHA-256 integrity chain

    Causal audit

    sha256:pending…