the biggest improvement i’ve seen is making the agent return a test contract, not just code.
for each test, require it to state the risk, starting state, exact action path, oracle, final-state readback, evidence saved, and cleanup. also make it label uncertainty instead of guessing when auth, data, timing, or earlier browser state is missing.
in AGENTS.md i’d add one hard rule: a browser task is not done because clicks completed. it is done when the intended state is read back and a failure leaves enough context for another person to inspect. keep generated tests at the lowest layer that preserves the risk, and require human review when the oracle is ambiguous.
the useful regression test for the skill itself is one known-good flow and one seeded failure. check whether it identifies the first mismatch instead of only summarizing the final symptom.