Evaluate a zero-account browser playground after measuring the corrected beginner path

## User impact and evidence

A browser playground or small visual authoring surface could reduce discovery cost for people who cannot immediately run Docker. Comparative research identifies useful zero-account examples, but the corrected Registry Stack path has not yet been measured with independent readers.

## Why this is non-blocking now

The recovery must first prove the released CLI and Docker Compose path. Adding a browser executor or visual builder now would introduce another runtime, security boundary, and documentation rail without evidence that it is necessary.

## Owner

Registry Stack product and documentation maintainers, with security review.

## Prerequisites

- Completed fresh-reader and country-developer runs against the corrected path.
- A measured friction report that separates download time, container availability, authoring complexity, and documentation defects.
- A threat model for untrusted input, source values, secrets, persistence, sharing, and execution.

## Reconsideration trigger

Promote discovery when human evidence shows that the supported container contract prevents the target audience from reaching the first protected result, or when a country environment cannot use containers.

## Expected verification

- No account, personal data, country endpoint, or production credential is required.
- The surface cannot widen disclosure or turn detected fields into released fields.
- Shared examples are synthetic and cannot persist secrets or source values.
- Browser results match the canonical compiler and validators.
- The existing CLI journey remains supported and does not fork into a second configuration model.

Non vengono indicati file, test o punti di ingresso. Inizia completando le esecuzioni fresh-reader e country-developer con il percorso corretto di CLI e Docker Compose, quindi usa il report sull’attrito e il modello delle minacce per determinare se sia giustificata una superficie browser senza account; completato significa che le condizioni elencate relative a sicurezza, risultato canonico e compatibilità CLI sono state verificate.

Scritto dal modello di indicizzazione a partire dal testo della issue.