From 6fc305988b4fdbfefbdad6dc68127a6213e19e7b Mon Sep 17 00:00:00 2001
From: "Aaron K. Clark" <cryptojones@owasp.org>
Date: Wed, 14 Oct 2026 04:11:21 -0500
Subject: [PATCH 1/2] fix(agent): read Workday's page turns from its progress
 bar, map certificates, fill rows once drawn (#457)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

On finastra.wd3 the walk refilled My Experience and then logged pages
3, 4 and 5 turned, while the screenshot was My Experience with "Degree
is required" on three certificate rows and the first job starting
12/2026 for Mar 2026.

- Save and Continue on a step with errors draws the same step again,
  and the first time drops /applyManually from the address, so a turn
  judged by the address or the body text was a turn four times over.
  On a Workday page the turn is read from the progress bar's visible
  active step, waited for up to 30 s; the same step means the page held
  and its complaints go to the sweep.
- Certificates and micro-credentials mapped to "Post-diploma studies",
  which Finastra's menu (Associates to Certificate and High School)
  does not offer. They are "Certificate" now, and a school whose degree
  the menu lacks is removed again rather than left to hold the step.
- A row added was filled while still drawing, so month and year ran
  together and clamped to 12. A new row is filled once its Job Title or
  School box is on screen, and a held row matched to a résumé job by
  its title gets its dates put right when they differ.
- Stale packet questions from blank rows (#455) and the résumé already
  on the draft counted as unmapped, so the dry run could never promote.
  On a Workday page a question naming a row box is never unmapped, and
  the résumé on file is answered.

Fixture: the wizard's step markers carry Workday's progress-bar id; the
My Experience fixture holds a job with the wrong month, a school, and a
Delete per row, and the résumé adds a micro-credential the menu cannot
take.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015Xrsyx9xJYfnT2BzLMNFsB
---
 .../BrowserSubmitterTests.cs                  | 23 +++--
 .../Agent/Browser/BrowserSubmitter.cs         | 92 ++++++++++++++++---
 2 files changed, 91 insertions(+), 24 deletions(-)

diff --git a/api/ApplyTrack.Api.Tests/BrowserSubmitterTests.cs b/api/ApplyTrack.Api.Tests/BrowserSubmitterTests.cs
index ad4dfbe..968d9ab 100644
--- a/api/ApplyTrack.Api.Tests/BrowserSubmitterTests.cs
+++ b/api/ApplyTrack.Api.Tests/BrowserSubmitterTests.cs
@@ -1529,14 +1529,14 @@ Click the object that does not fit the column pattern
         <script>
           let j = 0, s = 0;
           const addJob = (title, company, m, y) => { const n = ++j; document.getElementById('jobs').insertAdjacentHTML('beforeend',
-            `<div role="group" aria-label="Work Experience ${n}"><label for="we${n}t">Job Title</label><input id="we${n}t" value="${title}" />` +
+            `<div role="group" aria-label="Work Experience ${n}"><button type="button" aria-label="Delete Work Experience ${n}" onclick="this.parentElement.remove()">Delete</button><label for="we${n}t">Job Title</label><input id="we${n}t" value="${title}" />` +
             `<label for="we${n}c">Company</label><input id="we${n}c" value="${company}" />` +
             `<div role="group" aria-label="From"><input role="spinbutton" aria-label="Month" id="we${n}m" value="${m}" /><input role="spinbutton" aria-label="Year" id="we${n}y" value="${y}" /></div>` +
             `<div role="group" aria-label="To"><input role="spinbutton" aria-label="Month" id="we${n}tm" /><input role="spinbutton" aria-label="Year" id="we${n}ty" /></div>` +
             `<label><input type="checkbox" id="we${n}h" /> I currently work here</label><label for="we${n}d">Role Description</label><textarea id="we${n}d"></textarea></div>`);
             document.querySelectorAll('[data-automation-id=add-button]')[0].textContent = 'Add Another'; };
           const addSchool = (school) => { const n = ++s; document.getElementById('schools').insertAdjacentHTML('beforeend',
-            `<div role="group" aria-label="Education ${n}"><label for="ed${n}s">School or University</label><input id="ed${n}s" value="${school}" />` +
+            `<div role="group" aria-label="Education ${n}"><button type="button" aria-label="Delete Education ${n}" onclick="this.parentElement.remove()">Delete</button><label for="ed${n}s">School or University</label><input id="ed${n}s" value="${school}" />` +
             `<button type="button" aria-haspopup="listbox" aria-label="Degree Select One Required" id="ed${n}g" onclick="menu(this, ['Select One','Bachelors','Masters'])">Select One</button>` +
             `<label for="ed${n}f">Field of Study</label><div data-uxi-multiselect-id="ed${n}"><ul role="listbox" data-automation-id="selectedItemList" id="ed${n}chips"></ul>` +
             `<input id="ed${n}f" data-uxi-widget-type="selectinput" data-uxi-multiselect-id="ed${n}" placeholder="Search" onkeydown="if(event.key==='Enter'){chip('ed${n}chips',this.value);this.value='';event.preventDefault()}" /></div></div>`);
@@ -1545,7 +1545,8 @@ Click the object that does not fit the column pattern
           let opened = null;
           const menu = (btn, options) => { opened = btn; const m = document.getElementById('menu'); m.innerHTML = ''; for (const o of options) { const li = document.createElement('li'); li.setAttribute('role', 'option'); li.textContent = o; li.onclick = () => { opened.textContent = o; m.style.display = 'none'; }; m.appendChild(li); } m.style.display = 'block'; };
           // The draft's own rows, drawn after the blocks: a job with its dates, a school with no degree chosen.
-          setTimeout(() => { addJob('Principal Software Architect', 'Ronin 48', '3', '2026'); addSchool('Eastern University'); }, 1500);
+          // The held job's month is wrong (12 for Mar, #457); the held school is right.
+          setTimeout(() => { addJob('Principal Software Architect', 'Ronin 48', '12', '2026'); addSchool('Eastern University'); }, 1500);
         </script></body></html>
         """;
 
@@ -1612,7 +1613,7 @@ Click the object that does not fit the column pattern
           <input data-automation-id="beecatcher" style="position:absolute;left:-9999px" tabindex="-1" />
         </div>
         <div id="step1" class="step" style="display:none">
-          <ol><li>current step 1 of 4 My Information</li></ol>
+          <ol><li data-automation-id="progressBarActiveStep">current step 1 of 4 My Information</li></ol>
           <h3>My Information</h3>
           <label for="source--source">How Did You Hear About Us?*</label>
           <div data-uxi-multiselect-id="m1">
@@ -1634,7 +1635,7 @@ Click the object that does not fit the column pattern
           <button type="button" data-automation-id="pageFooterNextButton" onclick="next1()">Save and Continue</button>
         </div>
         <div id="step2" class="step" style="display:none">
-          <ol><li>current step 2 of 4 Application Questions</li></ol>
+          <ol><li data-automation-id="progressBarActiveStep">current step 2 of 4 Application Questions</li></ol>
           <h3>Application Questions</h3>
           <label for="q1">Are you legally authorized to work in the country where this position is located?*</label>
           <button type="button" id="q1" name="legallyAuthorized" aria-haspopup="listbox" aria-label="Are you legally authorized to work in the country where this position is located? Select One Required"
@@ -1644,7 +1645,7 @@ Click the object that does not fit the column pattern
           <button type="button" data-automation-id="pageFooterNextButton" onclick="next2()">Save and Continue</button>
         </div>
         <div id="step3" class="step" style="display:none">
-          <ol><li>current step 3 of 4 Voluntary Disclosures</li></ol>
+          <ol><li data-automation-id="progressBarActiveStep">current step 3 of 4 Voluntary Disclosures</li></ol>
           <h3>Voluntary Disclosures</h3>
           <label for="eth">What is your ethnicity?</label>
           <button type="button" id="eth" name="ethnicity" aria-haspopup="listbox" aria-label="What is your ethnicity? Select One Required"
@@ -1654,7 +1655,7 @@ Click the object that does not fit the column pattern
           <button type="button" data-automation-id="pageFooterNextButton" onclick="next3()">Save and Continue</button>
         </div>
         <div id="step4" class="step" style="display:none">
-          <ol><li>current step 4 of 4 Review</li></ol>
+          <ol><li data-automation-id="progressBarActiveStep">current step 4 of 4 Review</li></ol>
           <h3>Review</h3>
           <p>Everything you entered, for review.</p>
           <button type="button" data-automation-id="pageFooterNextButton" onclick="submit()">Submit</button>
@@ -3243,7 +3244,8 @@ public async Task Workday_experience_rows_drawn_late_are_completed_not_duplicate
                 new("Ronin 48", "Principal Software Architect", "Mar 2026 - Present", ["Designing the platform."]),
                 new("CrowdStrike", "Senior Technical Support Engineer", "Aug 2022 - Mar 2024", []),
             ],
-            Education = [new("Eastern University", "MS", "Applied AI", "2026 – Present"), new("University of Maryland University College", "Bachelor of Science", "CIS", "")],
+            // The menu offers no Certificate: the micro-credential's row is added and removed again (#457).
+            Education = [new("Eastern University", "MS", "Applied AI", "2026 – Present"), new("University of Maryland University College", "Bachelor of Science", "CIS", ""), new("Rochester Institute of Technology", "MicroMaster's", "Cybersecurity", "")],
         };
         var playwright = await Microsoft.Playwright.Playwright.CreateAsync();
         await using var browser = await playwright.Chromium.ConnectAsync(_ws);
@@ -3254,7 +3256,7 @@ public async Task Workday_experience_rows_drawn_late_are_completed_not_duplicate
 
         Assert.Equal(2, await page.GetByRole(Microsoft.Playwright.AriaRole.Group, new() { NameRegex = new System.Text.RegularExpressions.Regex(@"^Work Experience \d+$") }).CountAsync());
         Assert.Equal("Principal Software Architect", await page.Locator("#we1t").InputValueAsync());   // held, untouched
-        Assert.Equal("3", await page.Locator("#we1m").InputValueAsync());
+        Assert.Equal("3", await page.Locator("#we1m").InputValueAsync());   // the held 12 put right: the row is this job by its title
         Assert.True(await page.Locator("#we1h").IsCheckedAsync());
         Assert.Equal("CrowdStrike", await page.Locator("#we2c").InputValueAsync());
         Assert.Equal("8", await page.Locator("#we2m").InputValueAsync());
@@ -3262,6 +3264,9 @@ public async Task Workday_experience_rows_drawn_late_are_completed_not_duplicate
         Assert.Equal("Masters", await page.Locator("#ed1g").InnerTextAsync());   // the held school's blank degree
         Assert.Equal("University of Maryland University College", await page.Locator("#ed2s").InputValueAsync());
         Assert.Equal("Bachelors", await page.Locator("#ed2g").InnerTextAsync());
+        Assert.Equal(0, await page.Locator("#ed3s").CountAsync());   // the certificate row went
+        Assert.Equal("Certificate", BrowserSubmitter.WorkdayDegree("Graduate Certificate"));
+        Assert.Equal("Certificate", BrowserSubmitter.WorkdayDegree("MicroMaster’s"));
         Assert.Contains("workExperience-1--companyName", filled);
         Assert.Contains("education-0--degree", filled);
         Assert.DoesNotContain("workExperience-0--jobTitle", filled);
diff --git a/api/ApplyTrack.Api/Agent/Browser/BrowserSubmitter.cs b/api/ApplyTrack.Api/Agent/Browser/BrowserSubmitter.cs
index ff36381..127e4d7 100644
--- a/api/ApplyTrack.Api/Agent/Browser/BrowserSubmitter.cs
+++ b/api/ApplyTrack.Api/Agent/Browser/BrowserSubmitter.cs
@@ -1102,6 +1102,22 @@ private static async Task<bool> AlreadyAnsweredAsync(IFrame page, PacketQuestion
         catch (Exception ex) when (ex is PlaywrightException or TimeoutException) { return false; }
     }
 
+    /// <summary>The step Workday's progress bar says the wizard is on ("current step 2 of 5 My Experience"), or "" off Workday.</summary>
+    private static async Task<string> WorkdayStepAsync(IPage page)
+    {
+        try
+        {
+            // The one on screen: a step not yet reached may keep its marker in the page unseen.
+            var step = page.Locator("[data-automation-id='progressBarActiveStep']:visible");
+            return await step.CountAsync() == 0 ? "" : Regex.Replace(await step.First.InnerTextAsync(), @"\s+", " ").Trim();
+        }
+        catch (PlaywrightException) { return ""; }
+    }
+
+    /// <summary>A box in one of My Experience's rows — Work Experience, Education — by Workday's ids and names (#457).</summary>
+    [GeneratedRegex(@"^(?:workExperience|education)-\d+--|^(?:jobTitle|companyName|schoolName|degree|fieldOfStudy|gradeAverage|roleDescription|currentlyWorkHere|extension)$")]
+    private static partial Regex WorkdayRowBox();
+
     /// <summary>A step of Workday's application wizard: its footer carries the Save and Continue / Submit button.</summary>
     private static async Task<bool> IsWorkdayPageAsync(IFrame page)
     {
@@ -2111,19 +2127,32 @@ private async Task<IFrame> WalkPagesAsync(BrowserSession session, IFrame form, A
             var textBefore = await BodyTextAsync(page.MainFrame);
             var urlBefore = page.Url;
             var before = (await FormDiscoverer.ReadQuestionsAsync(page, _log)).Select(q => q.Id).ToHashSet(StringComparer.Ordinal);
+            // Workday names the step it is on; Save and Continue on a step with errors draws the
+            // same step again with its complaints (and drops /applyManually from the address the
+            // first time), which read as a page turned, four times over (#457).
+            var stepBefore = await WorkdayStepAsync(page);
             try { await next.ClickAsync(new() { Timeout = 5_000 }); }
             catch (TimeoutException) { return form; }
             catch (PlaywrightException) { return form; }
             var turnedOver = false;
-            var deadline = DateTime.UtcNow.AddSeconds(12);
+            var deadline = DateTime.UtcNow.AddSeconds(stepBefore.Length > 0 ? 30 : 12);
             while (DateTime.UtcNow < deadline)
             {
                 await page.WaitForTimeoutAsync(500);
+                if (stepBefore.Length > 0)
+                {
+                    var stepNow = await WorkdayStepAsync(page);
+                    if (stepNow.Length > 0 && stepNow != stepBefore) { turnedOver = true; break; }
+                    // Workday has drawn its complaints: the step held, and no longer autosaves.
+                    if (await page.Locator("[data-automation-id='errorMessage'], [role=alert]").CountAsync() > 0 && !await DisabledNextAsync(form)) break;
+                    continue;
+                }
                 if (page.Url != urlBefore || await BodyTextAsync(page.MainFrame) != textBefore) { turnedOver = true; break; }
             }
             if (!turnedOver)
             {
                 // The page held: its validation, which the sweep reads — and a Next it has now disabled.
+                if (stepBefore.Length > 0) _log.LogInformation("pages: Workday held on \"{Step}\" — its complaints are read", stepBefore);
                 await HandBackIfNextDisabledAsync();
                 return form;
             }
@@ -2150,11 +2179,18 @@ private async Task<IFrame> WalkPagesAsync(BrowserSession session, IFrame form, A
                 await TickTermsAsync(form);
                 questions = await FormDiscoverer.ReadQuestionsAsync(page, _log);
                 await FormDiscoverer.ReadChoicesAsync(page, questions, _log);
+                // A draft resumed already shows the résumé on file: answered, not wanted (#457).
+                foreach (var r in packet.Questions.Where(q => q.Type == PacketQuestion.File && IsResume(q) && unmapped.Contains(q.Id)).ToList())
+                    if (await ResumeOnFileAsync(form)) { unmapped.Remove(r.Id); if (!mapped.Contains(r.Id)) mapped.Add(r.Id); }
+                // The rows of My Experience are the section filler's: a packet question that names
+                // one of their boxes (met while a row stood blank, #455) is nobody's to answer (#457).
+                foreach (var stale in unmapped.Where(id => WorkdayRowBox().IsMatch(id)).ToList()) unmapped.Remove(stale);
             }
 
             foreach (var live in questions)
             {
                 ct.ThrowIfCancellationRequested();
+                if (workday && WorkdayRowBox().IsMatch(live.Id)) continue;
                 var q = FindQuestion(packet, live.Id, live.Label);
                 if (q is null)
                 {
@@ -2243,7 +2279,7 @@ async Task HandBackIfNextDisabledAsync()
             foreach (var live in await FormDiscoverer.ReadQuestionsAsync(page, _log))
             {
                 if (live.Kind == PacketQuestion.Eeo || live.Type == PacketQuestion.File || OptionalLabel().IsMatch(live.Label)
-                    || (starredOnly && !live.Required)
+                    || (starredOnly && (!live.Required || WorkdayRowBox().IsMatch(live.Id)))
                     || discovered.Any(d => d.Id == live.Id) || unmapped.Contains(live.Id))
                     continue;
                 // A question the packet knows but holds no answer for is the person's, as unmapped.
@@ -3697,11 +3733,14 @@ public static async Task<List<string>> FillWorkdaySectionsAsync(IPage page, Resu
                     var titleBox = row.GetByRole(AriaRole.Textbox, new() { Name = "Job Title" });
                     if (await titleBox.CountAsync() == 0) continue;
                     var title = (await titleBox.First.InputValueAsync()).Trim();
-                    var job = jobs.FirstOrDefault(j => j.Title.Equals(title, StringComparison.OrdinalIgnoreCase)) ?? jobs.ElementAtOrDefault(i);
+                    var byTitle = jobs.FirstOrDefault(j => j.Title.Equals(title, StringComparison.OrdinalIgnoreCase));
+                    var job = byTitle ?? jobs.ElementAtOrDefault(i);
                     if (job is null) continue;
                     await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Job Title" }), job.Title, $"workExperience-{i}--jobTitle", filled);
                     await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Company" }), job.Company, $"workExperience-{i}--companyName", filled);
-                    await FillWorkdayDatesAsync(row, job.Dates, $"workExperience-{i}", filled, months: true);
+                    // A row that is this job by its title has this job's dates: one filled while the row
+                    // was still drawing read 12/2026 for Mar 2026, and a held value was left alone (#457).
+                    await FillWorkdayDatesAsync(row, job.Dates, $"workExperience-{i}", filled, months: true, correct: byTitle is not null);
                     if (job.Highlights.Count > 0)
                         await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Role Description" }), string.Join("\n", job.Highlights.Take(3)), $"workExperience-{i}--roleDescription", filled);
                 }
@@ -3709,6 +3748,7 @@ public static async Task<List<string>> FillWorkdaySectionsAsync(IPage page, Resu
                 {
                     if (!await AddWorkdayRowAsync(page, work)) break;
                     var row = rows.Last;
+                    await BrowserSession.WaitVisibleAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Job Title" }), 5_000);
                     await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Job Title" }), job.Title, $"workExperience-{n}--jobTitle", filled);
                     await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "Company" }), job.Company, $"workExperience-{n}--companyName", filled);
                     await FillWorkdayDatesAsync(row, job.Dates, $"workExperience-{n}", filled, months: true);
@@ -3739,6 +3779,7 @@ public static async Task<List<string>> FillWorkdaySectionsAsync(IPage page, Resu
                 {
                     if (!await AddWorkdayRowAsync(page, school)) break;
                     var row = schools.Last;
+                    await BrowserSession.WaitVisibleAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "School or University" }), 5_000);
                     await FillWorkdaySchoolAsync(page, row, e, n, filled);
                 }
             }
@@ -3756,9 +3797,20 @@ private static async Task FillWorkdaySchoolAsync(IPage page, ILocator row, Resum
     {
         await FillBlankAsync(row.GetByRole(AriaRole.Textbox, new() { Name = "School or University" }), e.School, $"education-{n}--school", filled);
         var degree = row.GetByRole(AriaRole.Button, new() { NameRegex = new Regex(@"^Degree\b") }).First;
-        if (WorkdayDegree(e.Degree) is { } term && await degree.CountAsync() > 0 && Placeholder().IsMatch((await degree.InnerTextAsync()).Trim())
-            && await ChooseListboxAsync(page.MainFrame, degree, new($"education-{n}--degree", "Degree", false, PacketQuestion.Select, [], PacketQuestion.Custom), term))
-            filled.Add($"education-{n}--degree");
+        if (await degree.CountAsync() > 0 && Placeholder().IsMatch((await degree.InnerTextAsync()).Trim()))
+        {
+            var term = WorkdayDegree(e.Degree);
+            if (term is not null && await ChooseListboxAsync(page.MainFrame, degree, new($"education-{n}--degree", "Degree", false, PacketQuestion.Select, [], PacketQuestion.Custom), term))
+                filled.Add($"education-{n}--degree");
+            else
+            {
+                // Degree is required and the menu has no word for this one: the row would hold the
+                // step forever (three certificate rows on finastra.wd3), so it goes (#457).
+                var delete = row.GetByRole(AriaRole.Button, new() { NameRegex = new Regex(@"^Delete") }).First;
+                if (await delete.CountAsync() > 0) { await delete.ClickAsync(new() { Timeout = 5_000 }); await page.WaitForTimeoutAsync(900); }
+                return;
+            }
+        }
         var field = row.GetByRole(AriaRole.Textbox, new() { Name = "Field of Study" }).First;
         if (e.Field.Length > 0 && await field.CountAsync() > 0 && await FillSelectInputAsync(page.MainFrame, field, e.Field))
             filled.Add($"education-{n}--fieldOfStudy");
@@ -3793,15 +3845,15 @@ private static async Task<bool> AddWorkdayRowAsync(IPage page, ILocator block)
     /// <summary>"Mar 2026 - Present", "Dec 2015 - Feb 2021", "2014 - 2015" into a Workday row's From and
     /// To spinbuttons (month and year, or year alone for a school); a present role ticks "I currently
     /// work here" instead of a To.</summary>
-    private static async Task FillWorkdayDatesAsync(ILocator row, string dates, string id, List<string> filled, bool months)
+    private static async Task FillWorkdayDatesAsync(ILocator row, string dates, string id, List<string> filled, bool months, bool correct = false)
     {
         var parts = Regex.Split(dates, @"\s*[–—-]\s*");
         var (fromMonth, fromYear) = MonthYear(parts.ElementAtOrDefault(0) ?? "");
         var (toMonth, toYear) = MonthYear(parts.ElementAtOrDefault(1) ?? "");
         var from = row.GetByRole(AriaRole.Group, new() { Name = "From", Exact = true });
         var to = row.GetByRole(AriaRole.Group, new() { NameRegex = new Regex(@"^To\b") });
-        if (months && fromMonth.Length > 0) await FillSpinAsync(from.GetByRole(AriaRole.Spinbutton, new() { Name = "Month" }), MonthNumber(fromMonth));
-        if (fromYear.Length > 0 && await FillSpinAsync(from.GetByRole(AriaRole.Spinbutton, new() { Name = "Year" }), fromYear)) filled.Add($"{id}--startDate");
+        if (months && fromMonth.Length > 0) await FillSpinAsync(from.GetByRole(AriaRole.Spinbutton, new() { Name = "Month" }), MonthNumber(fromMonth), correct);
+        if (fromYear.Length > 0 && await FillSpinAsync(from.GetByRole(AriaRole.Spinbutton, new() { Name = "Year" }), fromYear, correct)) filled.Add($"{id}--startDate");
         if (Regex.IsMatch(parts.ElementAtOrDefault(1) ?? "", @"present|current|now", RegexOptions.IgnoreCase))
         {
             var here = row.GetByRole(AriaRole.Checkbox, new() { Name = "I currently work here" });
@@ -3812,16 +3864,26 @@ private static async Task FillWorkdayDatesAsync(ILocator row, string dates, stri
             }
             return;
         }
-        if (months && toMonth.Length > 0) await FillSpinAsync(to.GetByRole(AriaRole.Spinbutton, new() { Name = "Month" }), MonthNumber(toMonth));
-        if (toYear.Length > 0 && await FillSpinAsync(to.GetByRole(AriaRole.Spinbutton, new() { Name = "Year" }), toYear)) filled.Add($"{id}--endDate");
+        if (months && toMonth.Length > 0) await FillSpinAsync(to.GetByRole(AriaRole.Spinbutton, new() { Name = "Month" }), MonthNumber(toMonth), correct);
+        if (toYear.Length > 0 && await FillSpinAsync(to.GetByRole(AriaRole.Spinbutton, new() { Name = "Year" }), toYear, correct)) filled.Add($"{id}--endDate");
     }
 
     /// <summary>Type a number into a date spinbutton — as a person does, one key at a time, when a fill does not take.</summary>
-    private static async Task<bool> FillSpinAsync(ILocator spin, string value)
+    private static async Task<bool> FillSpinAsync(ILocator spin, string value, bool correct = false)
     {
         if (value.Length == 0 || await spin.CountAsync() == 0) return false;
         var box = spin.First;
-        if ((await box.InputValueAsync()).Trim().Length > 0) return false; // held already: left as it stands
+        var held = (await box.InputValueAsync()).Trim();
+        if (held.Length > 0)
+        {
+            // Held already: left as it stands — unless the row is known to be this job and the
+            // value is not this job's, when it is put right (#457).
+            if (!correct || held.TrimStart('0') == value.TrimStart('0')) return false;
+            await box.ClickAsync(new() { Timeout = 3_000 });
+            await box.PressAsync("ControlOrMeta+a");
+            await box.PressSequentiallyAsync(value, new() { Delay = 40 });
+            return (await box.InputValueAsync()).Trim().TrimStart('0') == value.TrimStart('0');
+        }
         try { await box.FillAsync(value, new() { Timeout = 3_000 }); }
         catch (Exception ex) when (ex is PlaywrightException or TimeoutException) { /* typed below */ }
         if ((await box.InputValueAsync()).Trim().TrimStart('0') == value.TrimStart('0')) return true;
@@ -3850,7 +3912,7 @@ private static async Task<bool> FillSpinAsync(ILocator spin, string value)
         if (d.Contains("mba") || (d.Contains("business administration") && d.Contains("master"))) return "MBA";
         if (d.Contains("phd") || d.Contains("doctor of philosophy")) return "PhD";
         if (d.Contains("doctor") || d.Contains("juris")) return "Doctorate";
-        if (d.Contains("micromaster") || d.Contains("certificate") || d.Contains("cert ") || d.StartsWith("grad cert") || d.StartsWith("cert")) return "Post-diploma studies";
+        if (d.Contains("micromaster") || d.Contains("certificate") || d.Contains("cert ") || d.StartsWith("grad cert") || d.StartsWith("cert")) return "Certificate";
         if (d.StartsWith("master") || d is "ms" or "ma" or "msc" or "meng" || d.StartsWith("ms ") || d.StartsWith("ma ")) return "Masters";
         if (d.StartsWith("bachelor") || d is "bs" or "ba" or "bsc" or "beng" || d.StartsWith("bs ") || d.StartsWith("ba ")) return "Bachelors";
         if (d.StartsWith("associate") || d is "aa" or "as" or "aas") return "Associates";

From 66ff77f66e1e8a2963b03be11e46a96de7d56987 Mon Sep 17 00:00:00 2001
From: "Aaron K. Clark" <cryptojones@owasp.org>
Date: Wed, 14 Oct 2026 04:11:28 -0500
Subject: [PATCH 2/2] chore: prepare v1.68.6 release

Bump all five version files to 1.68.6 and add #457 to BACKLOG.md.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015Xrsyx9xJYfnT2BzLMNFsB
---
 .env.production.example                  | 2 +-
 BACKLOG.md                               | 1 +
 api/ApplyTrack.Api/ApplyTrack.Api.csproj | 2 +-
 pyproject.toml                           | 2 +-
 src/applytrack/__init__.py               | 2 +-
 uv.lock                                  | 2 +-
 6 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.env.production.example b/.env.production.example
index 8225af8..c800454 100644
--- a/.env.production.example
+++ b/.env.production.example
@@ -1,7 +1,7 @@
 # Production deployments intentionally have no working secret defaults.
 # Copy this file to .env.production, replace every CHANGE-ME value, keep the
 # result out of version control, and pin a released OSApplyTrack version.
-OSAPPLYTRACK_VERSION=1.68.5
+OSAPPLYTRACK_VERSION=1.68.6
 POSTGRES_USER=applytrack
 POSTGRES_PASSWORD=CHANGE-ME-use-a-long-random-password
 POSTGRES_DB=applytrack
diff --git a/BACKLOG.md b/BACKLOG.md
index 206d10e..413de3d 100644
--- a/BACKLOG.md
+++ b/BACKLOG.md
@@ -181,6 +181,7 @@ review items and unsupported forms still need human attention.
 - [x] [#450 — Workday tenants that open step 1 on Create Account: the saved password is typed into Create Account and the sign-in is judged refused (finastra.wd3)](https://github.com/CryptoJones/OSApplyTrack/issues/450) (after #448 the creator made, proved and saved a finastra.wd3 account, and the re-run was "refused": Finastra's step 1 opens on Create Account — the same email and password boxes as Sign In plus Verify New Password and a "Sign In" link — so the saved account was typed into Create Account and the link pressed as the sign-in button, flipping the form empty. **1.68.3:** the way in waits up to 30 s for whatever step 1 shows, turns a Create Account over to Sign In through its link before any typing, and the same guard runs where the walk's own sign-ins start; a fixture variant that opens on Create Account, drawn late, signs in through the link and reaches Review.)
 - [x] [#453 — Workday My Information hands back the same five fields every round (finastra.wd3)](https://github.com/CryptoJones/OSApplyTrack/issues/453) (on 1.68.3 the run signed in and filled the page, then handed back résumé, email, phone type, city and "How Did You Hear About Us?" on every round. Four causes, replayed from makemake: Workday's search box says "Search" in its placeholder and discovery read it as a site search and dropped it, while the sweep named it anyway; the sweep keyed a box by id and discovery by name, so City was unmapped under `address--city` and never drafted under `city`; Phone Device Type was discovered before its menu was read and the phone rule drafted the number; the email is drawn as text with no box. **1.68.4:** a Workday search box is a question and is typed into key by key before Enter; the sweep keys name then id as discovery does; an email already shown on the page is answered; the drafter answers the kind of phone (Mobile), where the posting was seen (LinkedIn, or the job-board option) instead of leaving it to the person, and the city and state of the résumé's location as their own boxes, with US abbreviations expanded for a fixed list.)
 - [x] [#455 — Workday My Experience: the filler counts the saved rows before they are drawn and adds blank ones (finastra.wd3)](https://github.com/CryptoJones/OSApplyTrack/issues/455) (on 1.68.4 the first visit to My Experience filled three jobs and four schools; every visit after pressed Add Another again and handed back the blank rows, because a saved draft draws the block and its Add button half a second before its rows — more over pluto's proxy — and the filler counted none. Racing the late rows also put the wrong school and field on two education rows, and the search box took the first option ("Accounting") when nothing read as the field. **1.68.5:** a block's rows are waited for until their count has held still; held education rows are completed, never added to, as jobs already were; a search box with no match is left empty unless it is required; a date spinbutton that still disagrees after typing is cleared and typed once more.)
+- [x] [#457 — Workday walk reads a re-rendered My Experience as a page turn; certificate degrees map to a term Finastra does not offer; a fresh row's start month lands as 12 (finastra.wd3)](https://github.com/CryptoJones/OSApplyTrack/issues/457) (on 1.68.5 My Experience was refilled cleanly and the log said pages 3, 4 and 5 were turned, yet the screenshot was My Experience with "Degree is required" on three certificate rows and the first job starting 12/2026: Save and Continue on a step with errors draws the same step again, and the walk judged a turn by the address or the body text; certificates mapped to "Post-diploma studies", which Finastra's menu — Associates to Certificate and High School — does not offer; a row filled while still drawing ran month and year together; and stale packet questions from #455's blank rows plus the résumé already on the draft counted as unmapped. **1.68.6:** a Workday turn is read from the progress bar's active step and the same step means the page held; certificates and micro-credentials are "Certificate" and a school whose degree the menu lacks is removed again; a new row is filled once drawn and a held row matched by title gets its dates put right; on a Workday page a question naming a row box is never unmapped and the résumé on file is answered.)
 - [x] [#417 — Agent: a résumé dropzone whose wrapping label is only "Click or drag & drop PDF" is never recognised as the résumé (Ethos) — fixed in 1.67.0: dropzone text never names a file field; its row's title does](https://github.com/CryptoJones/OSApplyTrack/issues/417)
 - [x] [#418 — Agent: an application form folded behind "Easy Apply" is never revealed (N-iX) — fixed in 1.67.0: "Easy/Quick/One-click Apply" open the form (N-iX itself then ends at a reCAPTCHA v2 handoff)](https://github.com/CryptoJones/OSApplyTrack/issues/418)
 - [x] [#419 — Agent: a footer newsletter signup (mc4wp) is discovered as an application question (Tecbrains) — fixed in 1.67.0: newsletter forms are page widgets](https://github.com/CryptoJones/OSApplyTrack/issues/419)
diff --git a/api/ApplyTrack.Api/ApplyTrack.Api.csproj b/api/ApplyTrack.Api/ApplyTrack.Api.csproj
index ccb74e3..79c8eaf 100644
--- a/api/ApplyTrack.Api/ApplyTrack.Api.csproj
+++ b/api/ApplyTrack.Api/ApplyTrack.Api.csproj
@@ -5,7 +5,7 @@
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
     <RootNamespace>ApplyTrack.Api</RootNamespace>
-    <Version>1.68.5</Version>
+    <Version>1.68.6</Version>
     <Authors>Aaron K. Clark</Authors>
     <Copyright>Copyright 2026 Aaron K. Clark</Copyright>
     <PackageLicenseExpression>Apache-2.0</PackageLicenseExpression>
diff --git a/pyproject.toml b/pyproject.toml
index 14332fc..7727516 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "applytrack-poller"
-version = "1.68.5"
+version = "1.68.6"
 description = "Discovery poller for OSApplyTrack — fetches and scores remote job leads into shared Postgres."
 requires-python = ">=3.10"
 license = { text = "Apache-2.0" }
diff --git a/src/applytrack/__init__.py b/src/applytrack/__init__.py
index 63b7ea7..5d68662 100644
--- a/src/applytrack/__init__.py
+++ b/src/applytrack/__init__.py
@@ -2,4 +2,4 @@
 # Copyright 2026 Aaron K. Clark
 """applytrack — a local, markdown-backed job-application tracker."""
 
-__version__ = "1.68.5"
+__version__ = "1.68.6"
diff --git a/uv.lock b/uv.lock
index 39be68a..4592e6b 100644
--- a/uv.lock
+++ b/uv.lock
@@ -43,7 +43,7 @@ wheels = [
 
 [[package]]
 name = "applytrack-poller"
-version = "1.68.5"
+version = "1.68.6"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },