quest: plan the follow-ups of #78

quest/m0/README.md

@@ -101,6 +101,8 @@ repository.
 - [Web studio](/quest/m0/web.md) - the full studio in wasm on WebGPU and WebCodecs, served from this repository
 - [Virtual camera](/quest/m0/vcam/README.md) - the program or a published scene exposed as a system camera on Linux, Windows, and macOS
 - [Browser sources on the GPU under Mesa](/quest/m0/cef-headless.md) - shared-texture pages paint on Intel and AMD under Wayland, and a page that cannot paint fails loudly
+- [The program reaches a relay on every runner](/quest/m0/relay-test-flake.md) - the relay engine test stops failing the nightly on GitHub's runner
+- [Browser sources make no outside requests](/quest/m0/browser-offline.md) - no component updates, spellcheck downloads, or network time from the helper
 - [A browser helper exits with the studio](/quest/m0/browser-helper-exit.md) - no orphaned CEF helper after a crash, kill, or timed-out test
 - [Nightly and the browser suite pass](/quest/m0/nightly-green.md) - render-sw, cookies, and the X11 clipboard test fixed at their causes
 - [The Apple signing identity is available](/quest/m0/signing.md) - the Apple credentials packaging and the macOS camera need; Windows ships unsigned

quest/m0/browser-offline.md

@@ -0,0 +1,24 @@
+# [S] Browser sources make no outside requests
+
+## Goal
+
+The CEF browser helper contacts only what its pages load: no component
+updates, spellcheck dictionary downloads, network time, or other background
+requests to Google. The browser suite asserts that no outside request is
+made.
+
+## Plan
+
+From [moq-dev/studio#78](https://github.com/moq-dev/studio/pull/78), picked
+2026-11-07 (maintainer away under /afk, recommended option), m0 by the rule
+that fixes join m0: each request is a privacy leak and a network dependency
+nobody asked for.
+
+Seen from the helper: the component updater (`update.googleapis.com`,
+`edgedl.me.gvt1.com`), the spellcheck dictionary (`redirector.gvt1.com`),
+network time (`clients2.google.com`), and `www.google.com/async/folae`.
+Chromium's switches, such as `--disable-component-update` and
+`--disable-background-networking`, and turning spellcheck off should stop
+them; confirm each one is gone rather than assuming. Pages run without
+Chromium's sandbox on Linux (decided on #78), so keep the helper's switches
+in one place.

quest/m0/relay-test-flake.md

@@ -0,0 +1,20 @@
+# [S] The program reaches a relay on every runner
+
+## Goal
+
+`engine::tests::the_program_reaches_a_relay` passes every time on GitHub's
+Ubuntu runner, as it does on the maintainer's hosts, so it never fails the
+nightly before the browser suite runs.
+
+## Plan
+
+From [moq-dev/studio#78](https://github.com/moq-dev/studio/pull/78), picked
+2026-11-07 (maintainer away under /afk, recommended option), m0 by the rule
+that fixes join m0.
+
+In the nightly's Software render job (run 42350943682, attempt 1), the test
+failed with `Stream(NotFound)` before the browser suite ran. It passed 30 of
+30 times on nixos2. Reproduce it, for example under CPU contention or on a
+fresh runner, find which stream is not found and why (a subscribe racing the
+announce is a first suspect), and fix the cause. Never add a retry, sleep,
+or timeout.