competition-browser-persistence

1# Competition Browser Persistence
2 
3Use this skill only as a downstream specialization after `$ctf-sandbox-orchestrator` is already active and has established sandbox assumptions, node ownership, and evidence priorities. If that has not happened yet, return to `$ctf-sandbox-orchestrator` first.
4 
5Use this skill when the decisive branch lives in browser-held state rather than only in visible HTML or backend source.
6 
7Reply in Simplified Chinese unless the user explicitly requests English.
8 
9## Quick Start
10 
111. Identify the active persistence surface first: cookie jar, localStorage, sessionStorage, IndexedDB, Cache Storage, or service worker.
122. Record origin, scope, domain, path, expiry, and key names before mutating state.
133. Tie stored state to one concrete effect: request header, rendered branch, cached response, offline behavior, or hidden route access.
144. Separate boot-time state from runtime-mutated state.
155. Reproduce the smallest stateful sequence that reaches the decisive branch.
16 
17## Workflow
18 
19### 1. Map Browser State Surfaces
20 
21- Inspect cookies, storage buckets, service worker registrations, cache entries, and transient globals exposed during boot.
22- Record which origin, host, route, or feature flag each state item actually applies to.
23- Keep auth tokens, refresh material, CSRF state, cached responses, and feature toggles in separate evidence blocks.
24 
25### 2. Tie State To Runtime Behavior
26…