6f2bed3529
Add an explicit runtime guard for root-scoped DOM walks and against selector APIs, preserving the no selector/no hidden client framework boundary. req: pitch/002 req: runtime/001 req: target_policy/001