Five reading tools went through ready(), which starts a real Firefox when none is running and can reopen the url a restored session was owed. A question launched a 665 MB engine and reached the network.
0.47.0 made the declaration honest by dropping readOnlyHint. This goes the other way, which is the better half: these commands all need a browser, so it has to have been opened first, with the command that opens it. They now refuse and name the way out, and readOnlyHint is true again because the behaviour moved rather than the label. The principle was already written one function down, in looking(): a question is not a command.
A command still opens. browser_navigate, the clicks, the typing and browser_open all still go through ready(), so the way in is one step and the ladder still begins with an action.
Three gates moved with it. The addressing scan knew two funnels and now knows four: when the five tools moved it found nine instead of fourteen, and the floor caught it rather than being lowered.