Follows Phase 1 of Plan: a very secure browser in Seed. Known-bad site blocklists with an interstitial; tracker and content blocking on by default; anti-spoofing (the pane never covers Seed chrome, fullscreen banner, native dialogs for anything that signs); paste and drag from pages through the editor sanitizer.