Pixel Auditor, Approval & Takeover

1. 01

   Concepts & system design

   60 min· read · map the mechanismtimer

   R33 — Playwright screenshots, locators & bounding boxes

   R41 — Agentic approval & takeover

   R17 — NIST Privacy deletion

   R10 — Logging retention

   Read the assigned sections; map the mechanism, threat model and trade-offs.

2. 02

   Project implementation

   120 min· build · integrate · debugtimer

   Complete D9: before any sensitive click/type action, capture a fresh screenshot, run OCR/visual target inspection, compare visual coordinates against DOM accessibility bounds to detect deceptive overlays/drift, and require parameter-bound human approval or emergency stop/human takeover (C6).

   Test deleting a user's record end-to-end across SQL primary storage, Qdrant/Chroma vector indexes, Redis/in-memory caches, and logs. Document exact deletion guarantees and unavoidable retention limits.

   Build, integrate, debug and improve the increment in the active project.

3. 03

   Security lab

   60 min· attack your own systemtimer

   No separate task text for this block on day 61 — the sourced work sits in the block above. Keep the time box.

   Test the abuse case, failure path, authorization bypass or resource limit.

4. 04

   Verification & evidence

   30 min· test · record evidencetimer

   D9 coordinate-drift/overlay detection and emergency-stop tests + end-to-end cross-store deletion verification test.

   Add or run regression tests; record the 9-point evidence record.

5. 05

   Deliberate practice & Socratic review

   30 min· explain aloud · update gapstimer

   Answer the 8 Socratic questions without notes: What? Why? How? What if? Why not? How can I prove it? Where can it break? What have I learned?

   Re-explain the hardest concept aloud, inspect one edge case, update the gap log.

6. total5 h

• R10OWASP Cheat Sheet Series↗ cheatsheetseries.owasp.org

  Authorization, SQL Injection Prevention, File Upload, SSRF, Secrets Management, and Logging Cheat Sheets.

• R17NIST Privacy Framework↗ nist.gov

  Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P lifecycle controls.

• R33Playwright Documentation↗ playwright.dev

  Isolated BrowserContext, downloads, permissions, screenshots, bounding boxes, locators, and tracing.

• R41OWASP Agentic AI Resources↗ genai.owasp.org

  Agentic threat taxonomy: tool misuse, excessive agency, memory poisoning, inter-agent trust, and human oversight.

Read only the named sections needed for today's task. Reading sits inside the 60-minute concepts block; it is not extra time.

• docsPlaywright · API reference
  Locator | Playwright

  Documents boundingBox() and element screenshots, the API that returns the DOM accessibility geometry you compare against OCR pixel coordinates to detect overlay drift before a sensitive click.

  R33checked 2026-11-11
• docsNIST · reference
  Privacy Framework | NIST

  Defines Identify-P, Govern-P, Control-P, Communicate-P and Protect-P, the lifecycle controls you cite when writing down deletion guarantees and retention limits for the record-deletion test.

  R17checked 2026-11-11
• videoDave Ebbelaar · 25 min
  How to Build Human-in-the-Loop for AI Agents (Practical Guide)

  Implements approval gating and pause/resume around sensitive tool actions, the pattern behind parameter-bound human approval and emergency takeover before a destructive click or type.

  R41R10checked 2026-11-11
• videoPortSwigger · 4 min
  Testing for clickjacking using Burp Suite

  Shows how invisible overlay frames make a user click something other than what they see, the deceptive-overlay class your pixel audit detects by diffing rendered pixels against DOM bounds.

  R10R33checked 2026-11-11
• articleTian Pan · ~12 min read
  The User You Can't Delete: Right to Be Forgotten in AI Systems

  Traces how one person's data spreads across weights, vector indexes, caches and logs, which is the map you follow when testing end-to-end deletion and documenting what cannot be erased.

  R17checked 2026-11-11

A lab is complete only when it produces evidence. Installing PyRIT, Garak, Presidio or TransformerLens is not completion. Saved on this device only.