feat: initialize Hypothesis Machine Pi extension

services/browser-worker/README.md

@@ -0,0 +1,21 @@
+# Browser Use adapter contract
+
+`web_browse` talks only to a local HTTP adapter configured as `browser_use_url`.
+The contract is:
+
+```http
+POST /browse
+Content-Type: application/json
+
+{"url":"https://example.org","task":"inspect the interactive table","allowedDomains":["example.org"],"ephemeralProfile":true}
+```
+
+The adapter must return JSON and must use a fresh browser profile. It must reject
+navigation outside `allowedDomains` and all private/loopback/metadata addresses.
+
+Browser Use's current open-source agent/MCP server requires its own LLM provider
+credentials. Hypothesis Machine deliberately does not copy Pi credentials into a
+Python worker. Consequently Browser Use is an optional adapter boundary in this
+MVP, not started by the default Compose stack. Point `browser_use_url` at a locally
+managed Browser Use service only if it satisfies the contract. Firecrawl remains
+the default for dynamic rendering. See `docs/security.md`.