The takeover flow is the part most agent browser tools get wrong, so nice to see it treated as a first-class feature. Pausing screenshots and redacting typed text during takeover is a detail I haven't seen elsewhere.

Question on the vault: if sessions are encrypted with a key my password unlocks, how does an agent resume a saved login when I'm not around? Does the server keep the unlocked key in memory after the first unlock, or does each resume need me? That decides whether the threat model is "stolen disk" or "compromised server".

Also curious about the 55 fps at 1.8 Mbit/s number. Is that tiles plus AV1 only on the moving region, or AV1 for the whole frame while scrolling?

AgPL? Hard pass.