feat(extension): bind managed Agent Task policy to browser session

[seonghobae]

Partial implementation of #27, stacked on PR #94.

Buyer/security gap

PR #94 makes managed Agent Task extension admission time-bounded but still leaves the policy reusable across OriginWeave browser sessions. A valid managed-extension policy for one isolated Agent Task session must not become ambient authority for another session, and an evaluator must not leak extension allow-list membership across a mismatched session.

Dependency

This Draft is stacked on unchanged exact PR #94 head 759d2f04d81dcf52bca29b88d860fb9aaeca56e8, transitively on #85/#83/#82. Keep Draft while those prerequisites remain active. No prerequisite check, review, status, or mergeability result is transferred.

Current implementation evidence

Exact current head 912e0909169ed2fee1b26bce126f14e9390822bd implements the session-bound policy contract: AgentTaskExtensionPolicy is constructed for one exact BrowserSessionId; evaluation receives the current session; a mismatched session fails with typed DenySessionMismatch before extension allow-list membership is considered; existing validity-window and separate Agent-capability boundaries remain intact.

CI run 31546164773 checked out that exact head and completed successfully. Its Rust contracts job passed repository contracts, formatting, workspace check, full tests, strict Clippy and rustdoc. Its Production coverage job passed exact production function/line/region/branch coverage enforcement. There are currently no submitted formal reviews or inline review threads. CodeRabbit reports only Review skipped: draft pull request, which is not independent review evidence.

This PR remains Draft because its prerequisite stack is still active; the green exact-head evidence does not transfer from or to prerequisite PRs.

Truth boundary

This slice binds deterministic managed-extension admission policy to an OriginWeave browser session. It does not authenticate an administrator, read or attest Chrome enterprise policy, prove the browser profile belongs to that session, attest a clock, install/update/enable extensions, verify signatures or supply-chain provenance, authorize native messaging, grant Agent capabilities, persist policy, or claim managed enterprise extension support complete.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: c9e46ae8-d9a1-499c-b81c-57fc7c0f84fb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}