diff --git a/dist/webbrain-chrome-25.8.3.zip b/dist/webbrain-chrome-25.8.3.zip
index 7a6c9f171..7380233b6 100644
Binary files a/dist/webbrain-chrome-25.8.3.zip and b/dist/webbrain-chrome-25.8.3.zip differ
diff --git a/dist/webbrain-edge-25.8.3.zip b/dist/webbrain-edge-25.8.3.zip
index 7a6c9f171..7380233b6 100644
Binary files a/dist/webbrain-edge-25.8.3.zip and b/dist/webbrain-edge-25.8.3.zip differ
diff --git a/dist/webbrain-firefox-25.8.3.zip b/dist/webbrain-firefox-25.8.3.zip
index ab24aea1a..ef1d115c1 100644
Binary files a/dist/webbrain-firefox-25.8.3.zip and b/dist/webbrain-firefox-25.8.3.zip differ
diff --git a/scripts/build-zip.mjs b/scripts/build-zip.mjs
index bb0ec5436..2f91a4424 100644
--- a/scripts/build-zip.mjs
+++ b/scripts/build-zip.mjs
@@ -46,6 +46,56 @@ export function assertMatchingArchiveVersion(expected, actual, label) {
   }
 }
 
+const FLAG_LICENSE_PATH = 'icons/flags/LICENSE.flag-icons.txt';
+const REJECTED_FLAG_LICENSE_PATH = 'icons/flags/LICENSE.flag-icons';
+
+export function listZipEntryNames(filePath) {
+  const archive = readFileSync(filePath);
+  const eocdSignature = 0x06054b50;
+  const centralHeaderSignature = 0x02014b50;
+  const earliestEocd = Math.max(0, archive.length - 0xffff - 22);
+  let eocdOffset = -1;
+  for (let offset = archive.length - 22; offset >= earliestEocd; offset -= 1) {
+    if (
+      archive.readUInt32LE(offset) === eocdSignature
+      && offset + 22 + archive.readUInt16LE(offset + 20) === archive.length
+    ) {
+      eocdOffset = offset;
+      break;
+    }
+  }
+  if (eocdOffset < 0) throw new Error(`${filePath} has no ZIP end-of-central-directory record.`);
+
+  const entryCount = archive.readUInt16LE(eocdOffset + 10);
+  let offset = archive.readUInt32LE(eocdOffset + 16);
+  const entries = [];
+  for (let index = 0; index < entryCount; index += 1) {
+    if (offset + 46 > archive.length || archive.readUInt32LE(offset) !== centralHeaderSignature) {
+      throw new Error(`${filePath} has an invalid ZIP central-directory entry at index ${index}.`);
+    }
+    const nameLength = archive.readUInt16LE(offset + 28);
+    const extraLength = archive.readUInt16LE(offset + 30);
+    const commentLength = archive.readUInt16LE(offset + 32);
+    const nameStart = offset + 46;
+    const nameEnd = nameStart + nameLength;
+    if (nameEnd > archive.length) {
+      throw new Error(`${filePath} has a truncated ZIP filename at index ${index}.`);
+    }
+    entries.push(archive.toString('utf8', nameStart, nameEnd));
+    offset = nameEnd + extraLength + commentLength;
+  }
+  return entries;
+}
+
+export function assertStoreSafeFlagLicenseEntries(entries, label) {
+  if (!entries.includes(FLAG_LICENSE_PATH)) {
+    throw new Error(`${label} is missing ${FLAG_LICENSE_PATH}.`);
+  }
+  if (entries.includes(REJECTED_FLAG_LICENSE_PATH)) {
+    throw new Error(`${label} still contains Opera-rejected ${REJECTED_FLAG_LICENSE_PATH}.`);
+  }
+}
+
 function readJsonAtHead(relativePath) {
   const json = execFileSync('git', ['show', `HEAD:${relativePath}`], {
     cwd: root,
@@ -55,6 +105,18 @@ function readJsonAtHead(relativePath) {
   return JSON.parse(json);
 }
 
+function listTreeEntryNamesAtHead(relativePath) {
+  return execFileSync(
+    'git',
+    ['ls-tree', '-r', '--name-only', `HEAD:${relativePath}`],
+    {
+      cwd: root,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    }
+  ).split(/\r?\n/).filter(Boolean);
+}
+
 function runCli() {
   const workingPackage = JSON.parse(readFileSync(path.join(root, 'package.json'), 'utf8'));
   const headPackage = readJsonAtHead('package.json');
@@ -68,6 +130,10 @@ function runCli() {
   for (const { sourceDir } of targets) {
     const manifest = readJsonAtHead(`src/${sourceDir}/manifest.json`);
     assertMatchingArchiveVersion(version, manifest.version, `HEAD src/${sourceDir}/manifest.json version`);
+    assertStoreSafeFlagLicenseEntries(
+      listTreeEntryNamesAtHead(`src/${sourceDir}`),
+      `HEAD src/${sourceDir}`
+    );
   }
 
   const distDir = path.join(root, 'dist');
@@ -83,6 +149,10 @@ function runCli() {
       ['archive', '--format=zip', '-o', out, `HEAD:src/${sourceDir}`],
       { stdio: 'inherit', cwd: root }
     );
+    assertStoreSafeFlagLicenseEntries(
+      listZipEntryNames(out),
+      `dist/webbrain-${packageName}-${version}.zip`
+    );
     console.log(`  ✓ dist/webbrain-${packageName}-${version}.zip`);
   }
 }
diff --git a/src/chrome/icons/flags/LICENSE.flag-icons b/src/chrome/icons/flags/LICENSE.flag-icons.txt
similarity index 100%
rename from src/chrome/icons/flags/LICENSE.flag-icons
rename to src/chrome/icons/flags/LICENSE.flag-icons.txt
diff --git a/src/chrome/src/agent/adapters.js b/src/chrome/src/agent/adapters.js
index 42af95c7f..86edbfe1f 100644
--- a/src/chrome/src/agent/adapters.js
+++ b/src/chrome/src/agent/adapters.js
@@ -15746,7 +15746,9 @@ const ADAPTERS = [
 - For an existing add-on, use its "Upload New Version" flow. Do not start from "Submit a New Add-on"; the existing manifest ID will fail validation as a duplicate add-on ID.
 - On the "Describe Version" step, both "Release Notes" (changelog) and "Notes to Reviewer" are optional. Leave both empty unless the user explicitly asks to provide text; do not generate or paste content merely because the fields are present.
 - If those textareas must be inspected, trust their DOM field names over visual order or a possibly misleading label: \`release_notes...\` is the public release-notes field and \`approval_notes\` is the reviewer-notes field. Call \`verify_form\` before final submission.
-- On AMO compatibility checkboxes, use the tree's native \`checked=true|false\` state and \`set_checked({ref_id, checked:true})\`; never toggle with repeated \`click_ax\`. After a validation-rejected submit, call \`verify_form\` exactly once. If the intended checkbox is still unchecked, go directly to \`set_checked\` and submit only after \`checkedAfter:true\`.
+- AMO compatibility checkboxes are optional platform choices, not validation acknowledgements. Preserve their current state unless the user asked to change platform support. Use the tree's native \`checked=true|false\` state and \`set_checked\`; never toggle with repeated \`click_ax\`.
+- Selecting Firefox for Android opens a confirmation dialog and the checkbox remains unchecked until "Yes, I’ve tested my extension with Firefox for Android" is submitted. Never make that attestation without user-provided evidence. If the user has not said it was tested, choose "No, I have not tested" or leave Android unchecked, then continue. If \`set_checked\` returns \`confirmationRequired:true\`, handle the visible dialog once instead of retrying the checkbox.
+- After a validation-rejected submit, call \`verify_form\` exactly once. Change only the checkbox that the validation result actually requires, and submit only after its verified state matches the intended choice.
 - On a URL matching \`/addon/<addon-slug>/versions/submit/<id>/source\`, answer "No" to "Do You Need to Submit Source Code?" Select the radio labeled "No", then verify the page says "You do not need to submit Source Code" before continuing.
 - After navigation or scrolling, re-read the accessibility tree and use the current ref_id. Never reuse or guess a ref_id from an earlier page state.
 - Continue past package validation only when it reports no errors. Read any rejection-related warnings, then use the existing version-submission flow rather than restarting as a new add-on.`,
diff --git a/src/chrome/src/agent/agent.js b/src/chrome/src/agent/agent.js
index a5430ded4..22621d947 100644
--- a/src/chrome/src/agent/agent.js
+++ b/src/chrome/src/agent/agent.js
@@ -12888,6 +12888,9 @@ Rules: no prose intro, no conclusion, no "this screenshot shows...", no layout d
     if (!response || response.success !== true || response.needsTrustedClick !== true) {
       return response;
     }
+    const confirmationSurfacesBefore = Array.isArray(response._confirmationSurfaces)
+      ? response._confirmationSurfaces
+      : [];
     const beforeDocument = await this._getDevDocumentIdentity(tabId);
     const trustedSelector = String(response.trustedSelector || '');
     const marker = String(response.marker || '');
@@ -12974,6 +12977,17 @@ Rules: no prose intro, no conclusion, no "this screenshot shows...", no layout d
     const stateMatches = !checkboxIdentityMismatch && checkedAfter === args.checked;
     const success = trustedClickSucceeded && (stateMatches || verificationLostAfterTrustedClick);
     const checkboxIdentity = expectedCheckboxIdentity || observedCheckboxIdentity;
+    const confirmationSurfacesAfter = Array.isArray(verified?._confirmationSurfaces)
+      ? verified._confirmationSurfaces
+      : [];
+    const priorConfirmationSignatures = new Set(
+      confirmationSurfacesBefore
+        .map(surface => String(surface?.signature || ''))
+        .filter(Boolean)
+    );
+    const confirmation = confirmationSurfacesAfter.find(
+      surface => !priorConfirmationSignatures.has(String(surface?.signature || ''))
+    ) || null;
     const completed = {
       ...response,
       ...(verified || {}),
@@ -13008,6 +13022,7 @@ Rules: no prose intro, no conclusion, no "this screenshot shows...", no layout d
       marker: undefined,
       trustedSelector: undefined,
     };
+    delete completed._confirmationSurfaces;
     if (verificationLostAfterTrustedClick) {
       return {
         ...completed,
@@ -13021,6 +13036,25 @@ Rules: no prose intro, no conclusion, no "this screenshot shows...", no layout d
         warning: 'The trusted checkbox click was sent, but its document disappeared before the checked state could be re-read, likely because the click navigated or reloaded the page. Do not repeat set_checked; observe the current page.',
       };
     }
+    if (
+      trustedClickSucceeded
+      && !stateMatches
+      && !checkboxIdentityMismatch
+      && confirmation
+    ) {
+      return {
+        ...completed,
+        success: false,
+        verified: false,
+        confirmationRequired: true,
+        recoveryRequired: 'confirmation_dialog',
+        observedEffects: ['confirmation_dialog_opened'],
+        confirmation,
+        noProgress: undefined,
+        error: undefined,
+        warning: 'A confirmation dialog opened before the checkbox could reach the requested state. Do not call set_checked again. Re-read the visible accessibility tree and choose a dialog action only when it is supported by the user request or current evidence.',
+      };
+    }
     const failureError = clickError
       ? `Trusted checkbox click did not complete: ${clickError.message || clickError}`
       : checkboxIdentityMismatch
diff --git a/src/chrome/src/agent/tools.js b/src/chrome/src/agent/tools.js
index 86091c5dc..2610752be 100644
--- a/src/chrome/src/agent/tools.js
+++ b/src/chrome/src/agent/tools.js
@@ -49,7 +49,7 @@ export const AGENT_TOOLS = [
     type: 'function',
     function: {
       name: 'set_checked',
-      description: 'Idempotently set a native checkbox to the requested checked state by ref_id. Unlike click_ax, this never blindly toggles: it first reads checkedBefore, does nothing when already correct, performs at most one click when needed, and returns checkedAfter. On Chrome the state-changing click uses trusted selector-backed pointer input.',
+      description: 'Idempotently set a native checkbox to the requested checked state by ref_id. Unlike click_ax, this never blindly toggles: it first reads checkedBefore, does nothing when already correct, performs at most one click when needed, and returns checkedAfter. On Chrome the state-changing click uses trusted selector-backed pointer input. If the click opens a confirmation dialog instead of changing state, returns confirmationRequired:true; handle that dialog from fresh page evidence and do not retry the checkbox.',
       parameters: {
         type: 'object',
         properties: {
diff --git a/src/chrome/src/content/accessibility-tree.js b/src/chrome/src/content/accessibility-tree.js
index e96143ee9..968ddf06c 100644
--- a/src/chrome/src/content/accessibility-tree.js
+++ b/src/chrome/src/content/accessibility-tree.js
@@ -319,6 +319,30 @@
       } catch {}
     }
 
+    // Native form controls can be wrapped by a <label> without using a
+    // matching `for` attribute. `el.labels` covers both that pattern and
+    // explicit label associations, so action results do not expose an
+    // unnamed checkbox even though the page visibly labels it.
+    try {
+      const labelText = Array.from(el.labels || [])
+        .map(label => (label.innerText || label.textContent || '').replace(/\s+/g, ' ').trim())
+        .find(Boolean);
+      if (labelText) {
+        return labelText.length > MAX_NAME_LEN
+          ? labelText.substring(0, MAX_NAME_LEN) + '...'
+          : labelText;
+      }
+      const wrappingLabel = el.closest && el.closest('label');
+      const wrappingText = (wrappingLabel?.innerText || wrappingLabel?.textContent || '')
+        .replace(/\s+/g, ' ')
+        .trim();
+      if (wrappingText) {
+        return wrappingText.length > MAX_NAME_LEN
+          ? wrappingText.substring(0, MAX_NAME_LEN) + '...'
+          : wrappingText;
+      }
+    } catch {}
+
     if (tag === 'input') {
       const t = (el.getAttribute('type') || '').toLowerCase();
       const valAttr = el.getAttribute('value');
diff --git a/src/chrome/src/content/content.js b/src/chrome/src/content/content.js
index 46c16dd10..6ba099596 100644
--- a/src/chrome/src/content/content.js
+++ b/src/chrome/src/content/content.js
@@ -679,6 +679,70 @@
       || String(el?.innerText || '').trim().slice(0, 160);
   }
 
+  function _axVisibleConfirmationSurfaces() {
+    const surfaces = [];
+    const seen = new Set();
+    const selectors = [
+      '[role="dialog"]',
+      '[role="alertdialog"]',
+      '[aria-modal="true"]',
+      'dialog[open]',
+      '.modal',
+    ].join(',');
+    const visible = (el) => {
+      try {
+        if (!el?.isConnected) return false;
+        const style = getComputedStyle(el);
+        if (style.display === 'none' || style.visibility === 'hidden' || style.opacity === '0') return false;
+        const rect = el.getBoundingClientRect();
+        return rect.width >= 20 && rect.height >= 20;
+      } catch {
+        return false;
+      }
+    };
+    try {
+      for (const surface of document.querySelectorAll(selectors)) {
+        if (!visible(surface)) continue;
+        const id = String(surface.id || '').trim();
+        const role = String(surface.getAttribute('role') || surface.tagName || '').trim().toLowerCase();
+        const heading = surface.querySelector(
+          '[role="heading"],h1,h2,h3,h4,h5,h6,[aria-label]'
+        );
+        const title = String(
+          surface.getAttribute('aria-label')
+          || heading?.innerText
+          || heading?.textContent
+          || ''
+        ).replace(/\s+/g, ' ').trim().slice(0, 160);
+        const actions = [];
+        for (const control of surface.querySelectorAll('button,a,[role="button"]')) {
+          if (!visible(control)) continue;
+          const name = _axAccessibleName(control).replace(/\s+/g, ' ').trim();
+          if (name && !actions.includes(name)) actions.push(name.slice(0, 120));
+          if (actions.length >= 6) break;
+        }
+        const signature = id
+          ? `id:${id}`
+          : `surface:${role}|${title}|${actions.join('|')}`.slice(0, 480);
+        if (!signature || seen.has(signature)) continue;
+        seen.add(signature);
+        surfaces.push({ signature, title, actions });
+        if (surfaces.length >= 8) break;
+      }
+    } catch {}
+    return surfaces;
+  }
+
+  function _axNewConfirmationSurface(before = []) {
+    const previous = new Set(
+      (Array.isArray(before) ? before : [])
+        .map(surface => String(surface?.signature || ''))
+        .filter(Boolean)
+    );
+    return _axVisibleConfirmationSurfaces()
+      .find(surface => !previous.has(surface.signature)) || null;
+  }
+
   function _axCheckboxIdentity(el, refId = '') {
     try {
       const id = String(el?.id || '').trim();
@@ -4107,6 +4171,7 @@
           }
           const checkedBefore = !!el.checked;
           const checkboxIdentity = _axCheckboxIdentity(el, ref_id);
+          const confirmationSurfacesBefore = _axVisibleConfirmationSurfaces();
           const base = {
             method: 'set_checked',
             ref_id,
@@ -4164,6 +4229,7 @@
               needsTrustedClick: true,
               marker: marker || undefined,
               trustedSelector: trustedSelector || undefined,
+              _confirmationSurfaces: confirmationSurfacesBefore,
               ...base,
             };
           }
@@ -4171,6 +4237,9 @@
           el.click();
           const checkedAfter = !!el.checked;
           const success = checkedAfter === checked;
+          const confirmation = success
+            ? null
+            : _axNewConfirmationSurface(confirmationSurfacesBefore);
           return {
             ...base,
             success,
@@ -4184,7 +4253,13 @@
               desiredChecked: checked,
               actualChecked: checkedAfter,
             },
-            ...(success ? {} : {
+            ...(confirmation ? {
+              confirmationRequired: true,
+              recoveryRequired: 'confirmation_dialog',
+              observedEffects: ['confirmation_dialog_opened'],
+              confirmation,
+              warning: 'A confirmation dialog opened before the checkbox could reach the requested state. Do not call set_checked again. Re-read the visible accessibility tree and choose a dialog action only when it is supported by the user request or current evidence.',
+            } : success ? {} : {
               noProgress: true,
               error: `Checkbox remained ${checkedAfter ? 'checked' : 'unchecked'} after one synthetic click. This page may require trusted pointer input.`,
             }),
diff --git a/src/firefox/icons/flags/LICENSE.flag-icons b/src/firefox/icons/flags/LICENSE.flag-icons.txt
similarity index 100%
rename from src/firefox/icons/flags/LICENSE.flag-icons
rename to src/firefox/icons/flags/LICENSE.flag-icons.txt
diff --git a/src/firefox/src/agent/adapters.js b/src/firefox/src/agent/adapters.js
index ab5f279ef..eede90d57 100644
--- a/src/firefox/src/agent/adapters.js
+++ b/src/firefox/src/agent/adapters.js
@@ -15745,7 +15745,9 @@ const ADAPTERS = [
 - For an existing add-on, use its "Upload New Version" flow. Do not start from "Submit a New Add-on"; the existing manifest ID will fail validation as a duplicate add-on ID.
 - On the "Describe Version" step, both "Release Notes" (changelog) and "Notes to Reviewer" are optional. Leave both empty unless the user explicitly asks to provide text; do not generate or paste content merely because the fields are present.
 - If those textareas must be inspected, trust their DOM field names over visual order or a possibly misleading label: \`release_notes...\` is the public release-notes field and \`approval_notes\` is the reviewer-notes field. Call \`verify_form\` before final submission.
-- On AMO compatibility checkboxes, use the tree's native \`checked=true|false\` state and \`set_checked({ref_id, checked:true})\`; never toggle with repeated \`click_ax\`. After a validation-rejected submit, call \`verify_form\` exactly once. If the intended checkbox is still unchecked, go directly to \`set_checked\` and submit only after \`checkedAfter:true\`.
+- AMO compatibility checkboxes are optional platform choices, not validation acknowledgements. Preserve their current state unless the user asked to change platform support. Use the tree's native \`checked=true|false\` state and \`set_checked\`; never toggle with repeated \`click_ax\`.
+- Selecting Firefox for Android opens a confirmation dialog and the checkbox remains unchecked until "Yes, I’ve tested my extension with Firefox for Android" is submitted. Never make that attestation without user-provided evidence. If the user has not said it was tested, choose "No, I have not tested" or leave Android unchecked, then continue. If \`set_checked\` returns \`confirmationRequired:true\`, handle the visible dialog once instead of retrying the checkbox.
+- After a validation-rejected submit, call \`verify_form\` exactly once. Change only the checkbox that the validation result actually requires, and submit only after its verified state matches the intended choice.
 - On a URL matching \`/addon/<addon-slug>/versions/submit/<id>/source\`, answer "No" to "Do You Need to Submit Source Code?" Select the radio labeled "No", then verify the page says "You do not need to submit Source Code" before continuing.
 - After navigation or scrolling, re-read the accessibility tree and use the current ref_id. Never reuse or guess a ref_id from an earlier page state.
 - Continue past package validation only when it reports no errors. Read any rejection-related warnings, then use the existing version-submission flow rather than restarting as a new add-on.`,
diff --git a/src/firefox/src/agent/tools.js b/src/firefox/src/agent/tools.js
index 130fbd21b..5ed54cbcb 100644
--- a/src/firefox/src/agent/tools.js
+++ b/src/firefox/src/agent/tools.js
@@ -49,7 +49,7 @@ export const AGENT_TOOLS = [
     type: 'function',
     function: {
       name: 'set_checked',
-      description: 'Idempotently set a native checkbox to the requested checked state by ref_id. Unlike click_ax, this never blindly toggles: it first reads checkedBefore, does nothing when already correct, performs at most one click when needed, and returns checkedAfter.',
+      description: 'Idempotently set a native checkbox to the requested checked state by ref_id. Unlike click_ax, this never blindly toggles: it first reads checkedBefore, does nothing when already correct, performs at most one click when needed, and returns checkedAfter. If the click opens a confirmation dialog instead of changing state, returns confirmationRequired:true; handle that dialog from fresh page evidence and do not retry the checkbox.',
       parameters: {
         type: 'object',
         properties: {
diff --git a/src/firefox/src/content/accessibility-tree.js b/src/firefox/src/content/accessibility-tree.js
index e96143ee9..968ddf06c 100644
--- a/src/firefox/src/content/accessibility-tree.js
+++ b/src/firefox/src/content/accessibility-tree.js
@@ -319,6 +319,30 @@
       } catch {}
     }
 
+    // Native form controls can be wrapped by a <label> without using a
+    // matching `for` attribute. `el.labels` covers both that pattern and
+    // explicit label associations, so action results do not expose an
+    // unnamed checkbox even though the page visibly labels it.
+    try {
+      const labelText = Array.from(el.labels || [])
+        .map(label => (label.innerText || label.textContent || '').replace(/\s+/g, ' ').trim())
+        .find(Boolean);
+      if (labelText) {
+        return labelText.length > MAX_NAME_LEN
+          ? labelText.substring(0, MAX_NAME_LEN) + '...'
+          : labelText;
+      }
+      const wrappingLabel = el.closest && el.closest('label');
+      const wrappingText = (wrappingLabel?.innerText || wrappingLabel?.textContent || '')
+        .replace(/\s+/g, ' ')
+        .trim();
+      if (wrappingText) {
+        return wrappingText.length > MAX_NAME_LEN
+          ? wrappingText.substring(0, MAX_NAME_LEN) + '...'
+          : wrappingText;
+      }
+    } catch {}
+
     if (tag === 'input') {
       const t = (el.getAttribute('type') || '').toLowerCase();
       const valAttr = el.getAttribute('value');
diff --git a/src/firefox/src/content/content.js b/src/firefox/src/content/content.js
index 27d4773f8..6656af080 100644
--- a/src/firefox/src/content/content.js
+++ b/src/firefox/src/content/content.js
@@ -952,6 +952,70 @@
       || String(el?.innerText || '').trim().slice(0, 160);
   }
 
+  function _axVisibleConfirmationSurfaces() {
+    const surfaces = [];
+    const seen = new Set();
+    const selectors = [
+      '[role="dialog"]',
+      '[role="alertdialog"]',
+      '[aria-modal="true"]',
+      'dialog[open]',
+      '.modal',
+    ].join(',');
+    const visible = (el) => {
+      try {
+        if (!el?.isConnected) return false;
+        const style = getComputedStyle(el);
+        if (style.display === 'none' || style.visibility === 'hidden' || style.opacity === '0') return false;
+        const rect = el.getBoundingClientRect();
+        return rect.width >= 20 && rect.height >= 20;
+      } catch {
+        return false;
+      }
+    };
+    try {
+      for (const surface of document.querySelectorAll(selectors)) {
+        if (!visible(surface)) continue;
+        const id = String(surface.id || '').trim();
+        const role = String(surface.getAttribute('role') || surface.tagName || '').trim().toLowerCase();
+        const heading = surface.querySelector(
+          '[role="heading"],h1,h2,h3,h4,h5,h6,[aria-label]'
+        );
+        const title = String(
+          surface.getAttribute('aria-label')
+          || heading?.innerText
+          || heading?.textContent
+          || ''
+        ).replace(/\s+/g, ' ').trim().slice(0, 160);
+        const actions = [];
+        for (const control of surface.querySelectorAll('button,a,[role="button"]')) {
+          if (!visible(control)) continue;
+          const name = _axAccessibleName(control).replace(/\s+/g, ' ').trim();
+          if (name && !actions.includes(name)) actions.push(name.slice(0, 120));
+          if (actions.length >= 6) break;
+        }
+        const signature = id
+          ? `id:${id}`
+          : `surface:${role}|${title}|${actions.join('|')}`.slice(0, 480);
+        if (!signature || seen.has(signature)) continue;
+        seen.add(signature);
+        surfaces.push({ signature, title, actions });
+        if (surfaces.length >= 8) break;
+      }
+    } catch {}
+    return surfaces;
+  }
+
+  function _axNewConfirmationSurface(before = []) {
+    const previous = new Set(
+      (Array.isArray(before) ? before : [])
+        .map(surface => String(surface?.signature || ''))
+        .filter(Boolean)
+    );
+    return _axVisibleConfirmationSurfaces()
+      .find(surface => !previous.has(surface.signature)) || null;
+  }
+
   function _axCheckboxIdentity(el, refId = '') {
     try {
       const id = String(el?.id || '').trim();
@@ -3422,6 +3486,7 @@
           }
           const checkedBefore = !!el.checked;
           const checkboxIdentity = _axCheckboxIdentity(el, ref_id);
+          const confirmationSurfacesBefore = _axVisibleConfirmationSurfaces();
           const base = {
             method: 'set_checked',
             ref_id,
@@ -3457,6 +3522,9 @@
           await new Promise(resolve => setTimeout(resolve, SET_FIELD_VERIFY_DELAY_MS));
           const checkedAfter = !!el.checked;
           const success = checkedAfter === checked;
+          const confirmation = success
+            ? null
+            : _axNewConfirmationSurface(confirmationSurfacesBefore);
           return {
             ...base,
             success,
@@ -3470,7 +3538,13 @@
               desiredChecked: checked,
               actualChecked: checkedAfter,
             },
-            ...(success ? {} : {
+            ...(confirmation ? {
+              confirmationRequired: true,
+              recoveryRequired: 'confirmation_dialog',
+              observedEffects: ['confirmation_dialog_opened'],
+              confirmation,
+              warning: 'A confirmation dialog opened before the checkbox could reach the requested state. Do not call set_checked again. Re-read the visible accessibility tree and choose a dialog action only when it is supported by the user request or current evidence.',
+            } : success ? {} : {
               noProgress: true,
               error: `Checkbox remained ${checkedAfter ? 'checked' : 'unchecked'} after one synthetic click. Firefox cannot synthesize trusted pointer input for page content.`,
             }),
diff --git a/test/fixtures/run.mjs b/test/fixtures/run.mjs
index bbf42fda1..69ad31d8a 100644
--- a/test/fixtures/run.mjs
+++ b/test/fixtures/run.mjs
@@ -1631,6 +1631,32 @@ for (const browserKind of ['chrome', 'firefox']) {
     }
   });
 
+  test(`set_checked (${browserKind}): wrapped labels and confirmation-gated state are explicit`, async (page) => {
+    await setupContentFixture(page, 'trusted-click-fallback.html', browserKind);
+    const tree = await call(page, 'get_accessibility_tree', { filter: 'all', maxDepth: 10, maxChars: 30000 });
+    const content = String(tree?.pageContent || '');
+    const match = content.match(/checkbox "Firefox for Android compatibility" \[(ref_\d+)\][^\n]*type="checkbox"[^\n]*checked=false/);
+    if (!match) throw new Error(`expected wrapped Android checkbox label in AX tree: ${content}`);
+
+    const result = await call(page, 'set_checked', { ref_id: match[1], checked: true });
+    if (
+      result?.success !== false
+      || result.dispatched !== true
+      || result.checkedBefore !== false
+      || result.checkedAfter !== false
+      || result.verified !== false
+      || result.confirmationRequired !== true
+      || result.recoveryRequired !== 'confirmation_dialog'
+      || result.noProgress === true
+      || result.error
+      || result.confirmation?.title !== 'Firefox for Android compatibility'
+      || !result.confirmation?.actions?.includes('Yes, I’ve tested my extension with Firefox for Android')
+      || !result.confirmation?.actions?.includes('No, I have not tested')
+    ) {
+      throw new Error(`confirmation-gated checkbox was reported as ordinary no-progress: ${JSON.stringify(result)}`);
+    }
+  });
+
   test(`click_ax (${browserKind}): waits for controlled checkbox reconciliation`, async (page) => {
     await setupContentFixture(page, 'trusted-click-fallback.html', browserKind);
     const tree = await call(page, 'get_accessibility_tree', { filter: 'all', maxDepth: 10, maxChars: 30000 });
diff --git a/test/fixtures/trusted-click-fallback.html b/test/fixtures/trusted-click-fallback.html
index e82aabea2..8b351f5ad 100644
--- a/test/fixtures/trusted-click-fallback.html
+++ b/test/fixtures/trusted-click-fallback.html
@@ -83,6 +83,16 @@
       min-height: 54px;
       padding: 16px;
     }
+
+    .modal {
+      display: none;
+      box-sizing: border-box;
+      width: 520px;
+      min-height: 180px;
+      padding: 24px;
+      border: 2px solid #444;
+      background: #fff;
+    }
   </style>
 </head>
 <body>
@@ -161,6 +171,10 @@ <h2>Cola Zero 6-pack</h2>
       <input id="trusted-firefox-checkbox" name="trusted_compatible_apps" value="firefox" type="checkbox">
       Trusted Firefox compatibility
     </label>
+    <label class="external-label">
+      <input id="android-checkbox" name="compatible_apps" value="android" type="checkbox">
+      Firefox for Android compatibility
+    </label>
     <label class="external-label" for="selected-channel-radio">
       <input id="selected-channel-radio" name="channel" value="stable" type="radio" checked>
       Selected channel
@@ -170,6 +184,12 @@ <h2>Cola Zero 6-pack</h2>
       Blocked channel
     </label>
   </form>
+  <div id="android-confirmation" class="modal">
+    <h3>Firefox for Android compatibility</h3>
+    <p>Did you test your extension to ensure it works as expected on Firefox for Android?</p>
+    <button id="android-confirm-yes" type="button">Yes, I’ve tested my extension with Firefox for Android</button>
+    <a id="android-confirm-no" href="#">No, I have not tested</a>
+  </div>
   <div id="covered-wrap">
     <div id="covered-row" class="row" role="listitem" tabindex="0">Covered row</div>
     <div id="cover">Overlay</div>
@@ -195,6 +215,25 @@ <h2>Cola Zero 6-pack</h2>
       window.__trustedCheckboxEvents.push({ trusted: event.isTrusted, checked: event.currentTarget.checked });
       if (!event.isTrusted) event.preventDefault();
     });
+    let androidConfirmed = false;
+    const androidCheckbox = document.getElementById('android-checkbox');
+    const androidConfirmation = document.getElementById('android-confirmation');
+    androidCheckbox.addEventListener('click', (event) => {
+      if (androidConfirmed) return;
+      event.preventDefault();
+      androidConfirmation.style.display = 'block';
+    });
+    document.getElementById('android-confirm-yes').addEventListener('click', () => {
+      androidConfirmed = true;
+      androidCheckbox.checked = true;
+      androidCheckbox.dispatchEvent(new Event('change', { bubbles: true }));
+      androidConfirmation.style.display = 'none';
+    });
+    document.getElementById('android-confirm-no').addEventListener('click', (event) => {
+      event.preventDefault();
+      androidCheckbox.checked = false;
+      androidConfirmation.style.display = 'none';
+    });
     document.getElementById('blocked-channel-radio').addEventListener('click', (event) => {
       event.preventDefault();
     });
diff --git a/test/run.js b/test/run.js
index 98cfc8ce2..3904161cf 100644
--- a/test/run.js
+++ b/test/run.js
@@ -516,7 +516,11 @@ const { bumpSemver, rewriteVersionInJsonText, rewriteVersionByAnchor, isReleaseB
 const { normalizeChangelogBody, buildChangelogSection, insertChangelogEntry } = await import(
   'file://' + path.join(ROOT, 'scripts/update-changelog.mjs').replace(/\\/g, '/')
 );
-const { assertMatchingArchiveVersion } = await import(
+const {
+  assertMatchingArchiveVersion,
+  assertStoreSafeFlagLicenseEntries,
+  listZipEntryNames,
+} = await import(
   'file://' + path.join(ROOT, 'scripts/build-zip.mjs').replace(/\\/g, '/')
 );
 
@@ -1624,6 +1628,86 @@ test('Chrome set_checked completes one selector-backed trusted click and verifie
   }
 });
 
+test('Chrome set_checked reports a newly opened confirmation dialog instead of no progress', async () => {
+  const originalChrome = globalThis.chrome;
+  const originalAttach = cdpClientCh.attach;
+  const originalClickElement = cdpClientCh.clickElement;
+  try {
+    globalThis.chrome = {
+      runtime: {},
+      tabs: {
+        async sendMessage() {
+          return {
+            success: true,
+            method: 'set_checked',
+            ref_id: 'ref_android',
+            checkedBefore: false,
+            checkedAfter: false,
+            desiredChecked: true,
+            checkboxIdentity: 'id:android-checkbox',
+            selector: '#android-checkbox',
+            _confirmationSurfaces: [{
+              signature: 'id:android-confirmation',
+              title: 'Firefox for Android compatibility',
+              actions: [
+                'Yes, I’ve tested my extension with Firefox for Android',
+                'No, I have not tested',
+              ],
+            }],
+          };
+        },
+      },
+    };
+    cdpClientCh.attach = async () => ({ attached: true });
+    cdpClientCh.clickElement = async () => ({
+      success: true,
+      method: 'cdp-mouse',
+      dispatched: true,
+    });
+
+    const response = await new AgentCh({})._completeSetCheckedWithCdp(
+      42,
+      { ref_id: 'ref_android', checked: true },
+      {
+        success: true,
+        needsTrustedClick: true,
+        marker: 'marker-android',
+        trustedSelector: '[data-webbrain-set-checked-target="marker-android"]',
+        checkedBefore: false,
+        checkedAfter: false,
+        checkboxIdentity: 'id:android-checkbox',
+        _confirmationSurfaces: [],
+      },
+      {
+        ref_id: 'ref_android',
+        checked: true,
+        expectedDocumentToken: 'doc-android',
+        probeOnly: true,
+        markForTrustedClick: true,
+      },
+    );
+
+    assert.equal(response.success, false);
+    assert.equal(response.dispatched, true);
+    assert.equal(response.trusted, true);
+    assert.equal(response.verified, false);
+    assert.equal(response.checkedAfter, false);
+    assert.equal(response.confirmationRequired, true);
+    assert.equal(response.recoveryRequired, 'confirmation_dialog');
+    assert.deepEqual(response.observedEffects, ['confirmation_dialog_opened']);
+    assert.equal(response.confirmation.title, 'Firefox for Android compatibility');
+    assert.equal(response.noProgress, undefined);
+    assert.equal(response.error, undefined);
+    assert.equal(response._confirmationSurfaces, undefined);
+    assert.match(response.warning, /Do not call set_checked again/i);
+  } finally {
+    cdpClientCh.attach = originalAttach;
+    cdpClientCh.clickElement = originalClickElement;
+    if (originalChrome === undefined) delete globalThis.chrome;
+    else globalThis.chrome = originalChrome;
+  }
+});
+
 test('Chrome set_checked fails closed when marker verification resolves another checkbox', async () => {
   const originalChrome = globalThis.chrome;
   const originalAttach = cdpClientCh.attach;
@@ -2341,6 +2425,10 @@ test('matches Mozilla Add-ons Developer Hub and guides version submission', () =
   assert.match(chromeAdapter?.notes || '', /Release Notes.*Notes to Reviewer.*optional/s);
   assert.match(chromeAdapter?.notes || '', /Leave both empty unless the user explicitly asks/i);
   assert.match(chromeAdapter?.notes || '', /release_notes\.\.\..*approval_notes.*verify_form/s);
+  assert.match(chromeAdapter?.notes || '', /compatibility checkboxes are optional platform choices/i);
+  assert.match(chromeAdapter?.notes || '', /Firefox for Android opens a confirmation dialog/i);
+  assert.match(chromeAdapter?.notes || '', /Never make that attestation without user-provided evidence/i);
+  assert.match(chromeAdapter?.notes || '', /confirmationRequired:true.*instead of retrying the checkbox/s);
   assert.match(chromeAdapter?.notes || '', /\/addon\/<addon-slug>\/versions\/submit\/<id>\/source/);
   assert.match(chromeAdapter?.notes || '', /answer "No".*Do You Need to Submit Source Code/s);
   assert.match(chromeAdapter?.notes || '', /You do not need to submit Source Code/);
@@ -6887,6 +6975,19 @@ test('build-zip rejects filenames that would disagree with archived manifests',
   );
 });
 
+test('tracked store archives contain the Opera-safe flag license filename', () => {
+  const { version } = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'));
+  for (const browser of ['chrome', 'edge', 'firefox']) {
+    const relativePath = `dist/webbrain-${browser}-${version}.zip`;
+    const archivePath = path.join(ROOT, relativePath);
+    assert.ok(fs.existsSync(archivePath), `${relativePath} is missing`);
+    assert.doesNotThrow(
+      () => assertStoreSafeFlagLicenseEntries(listZipEntryNames(archivePath), relativePath),
+      `${relativePath} must contain the renamed license and omit Opera's rejected filename`,
+    );
+  }
+});
+
 test('firefox manifest uses the AMO extension id', () => {
   const manifest = JSON.parse(fs.readFileSync(path.join(ROOT, 'src/firefox/manifest.json'), 'utf8'));
   assert.equal(manifest.browser_specific_settings?.gecko?.id, 'webbrain@esokullu.com');
@@ -12367,7 +12468,8 @@ test('sidepanel language picker uses the provider-style accessible listbox with
       assert.ok(fs.existsSync(flagPath), `${label}: bundled ${flagCode} flag missing`);
       assert.match(fs.readFileSync(flagPath, 'utf8'), /^<svg\b/, `${label}: ${flagCode} flag should be SVG`);
     }
-    assert.ok(fs.existsSync(path.join(ROOT, prefix, 'icons/flags/LICENSE.flag-icons')), `${label}: flag-icons license missing`);
+    assert.ok(fs.existsSync(path.join(ROOT, prefix, 'icons/flags/LICENSE.flag-icons.txt')), `${label}: flag-icons license missing`);
+    assert.equal(fs.existsSync(path.join(ROOT, prefix, 'icons/flags/LICENSE.flag-icons')), false, `${label}: Opera-rejected extensionless flag-icons license should not be packaged`);
   }
 });