[Windows][IAB] Browser Use blocks AliExpress API documentation; review possible regional skew

Issue

A user asked Codex Desktop to open and explain the public AliExpress Open Platform API documentation at https://openservice.aliexpress.com/doc/api.htm. The page was open in the user's in-app browser, but Browser Use denied the agent's attempt to open and observe the documentation before any page content was available. The user asked that this be reported and raised concern about possible regional bias in site classification.

Observed action and result

On Windows, the agent called:

await cua.createBrowserTab("iab", "https://openservice.aliexpress.com/doc/api.htm", { visible: true });

Browser Use returned:

Browser Use rejected this action due to browser security policy. Reason: The site-safety policy blocks this action; no user permission prompt or Auto-review was attempted. Browser use could not acquire authority to observe page content. The site safety gate did not grant access for https://openservice.aliexpress.com. Site safety policy blocked this URL.

The response prohibited alternate browser surfaces and indirect workarounds. The agent stopped trying to observe the blocked origin. No Playwright, raw browser commands, or other bypass was used. Exact desktop app version was not collected.

Expected behavior and questions

For an authorized, read-only documentation task, please determine whether this origin is intentionally restricted or incorrectly classified. If it is eligible, restore the supported access or approval flow. If it is intentionally restricted, explain the reason category and provide a supported review route.

The user specifically asks OpenAI to examine whether site-safety classification has a regional bias. This single denial does not establish bias or the classifier's cause; it is a request to investigate that possibility. Related AliExpress reports include #47579 (buyer site), #48675 (seller site), and #46339 (product page). This report adds the developer documentation origin.

The report includes no credentials, tokens, account data, screenshots, browser logs, or private conversation identifiers.