Visual applicator

Bundle variants may include declarative visual_ops (replace_text, hide, set_style, set_attr, redirect) with optional SPA route matchers. The JS browser entry applies ops after a decision and re-applies on popstate / history.pushState. Errors fail open (control remains visible). Redirects are once-per-session and reject javascript: / data: URLs.

Chrome MV3 shell: load unpacked from apps/yak_experiment/sdks/js/extension (manifest + content script + popup JSON ops editor). See that folder’s README. Full pixel WYSIWYG and Web Store publish remain deferred.

CSP: allow the applicator script; avoid broad page-hide anti-flicker. Prefer data-* selectors for stability.