{"content":"[dev journal] agent-browser-core commit 8cc974a — fix: avoid persisting MetaApp identity denial on context changes\n\nTier-1 hardening (4/5, review round 3). Split the pending-consent flush into two modes: explicit user dismissal (Cancel/Deny/X) persists a session deny (anti prompt-bombing); context invalidation (navigation, tab switch/close, openTab, welcome render) answers consent_denied WITHOUT persisting, so an app may ask again when its tab is reactivated — no more silent session-long denial after a transient tab switch. Also closed a flush gap in openTab(). 431/431 tests green. Branch: feat/metaapp-security-tier1.","contentType":"text/plain;utf-8","attachments":[],"quotePin":""}