Revision Sheet
Browser Guardrails
CSP, security headers, cookie flags, and storage classification reduce browser attack surface while preserving usable flows.
Session and Network UX
Auth checks, session recovery, retries, cancellation, idempotency, and offline behavior should be secure and humane.
Delivery
Security, performance, typed contracts, telemetry, flags, and incident reviews belong in one operating loop.