With only a browser.solve_challenge grant, the vision child run was denied browser.click_at, so the loop stopped after the first screenshot (REAL-2 task 4). Steps inside a run spawned by solve_challenge are now allowed; ancestors' allowlist and step budget still apply. Needs image rebuild. Co-Authored-By: Claude Opus 5.5 <[email protected]>