Banking 2FA flows where the SMS/OTP input is not rendered until the user clicks "Send code". Common on retail-bank, telco, and government portals.
Pattern
Initial DOM has email/password + a "Send code" button. The TOTP input does not exist yet. On button click, JS injects a strict-baseline TOTP <input> into the form. window.location.href never changes.
Why this is a real problem
Same as E1 — the autofiller triggers on URL change, which never happens. The MutationObserver in CollectAutofillContentService refreshes pageDetails when the field appears, but does not trigger a new fill.
Expected today
Page-load fill does not fire when the input appears. Manual trigger fills correctly (qualifier sees the field after mutation).
Purpose
Regression bar for any future MutationObserver-driven re-fill on newly-rendered TOTP fields.