- Keep all tests offline by default.
- Preserve explicit challenge classification; never infer CAPTCHA from a status code alone.
- Keep rate limits, retries, rotations, and challenge attempts bounded.
- Do not add proxy lists, live target fixtures, credentials, cookies, or solution payloads.
- Run
python -m unittest discover -s tests -vandpython scripts/smoke_test.pybefore opening a pull request.
Changes to session fingerprint fields or failure/action mappings must include a focused unit test and documentation update.