{
  "schema": 1,
  "result": "pass",
  "testedAt": "2026-10-27T16:33:06.372Z",
  "author": "DMZ maintainer; not an independent audit",
  "release": {
    "version": "0.1.3 alpha.3",
    "sourceCommit": "7e9c361c054a26f4e577b1814cb4fc0aca5ded8f",
    "sha256": "6e59e15141a251bee8fb0300acb2ff681bba0d213d744ee264e7a94a4ba66c91",
    "bytes": 233913335
  },
  "browser": "156.0.8078.4",
  "node": "v24.22.1",
  "offline": true,
  "negativeControlDetected": true,
  "manifest": {
    "manifest_version": 3,
    "name": "DMZ Chromium extension",
    "description": "Free community tool by Kastro. Best-effort local masking for supported ChatGPT and Claude chats.",
    "version": "0.1.3",
    "permissions": [
      "offscreen",
      "sidePanel"
    ],
    "minimum_chrome_version": "116",
    "version_name": "0.1.3 alpha.3 7e9c361c054a26f4e577b1814cb4fc0aca5ded8f",
    "action": {
      "default_title": "DMZ Chromium extension · Stillingar"
    },
    "web_accessible_resources": [
      {
        "resources": [
          "dmz.wasm",
          "restored.html"
        ],
        "matches": [
          "https://chatgpt.com/*",
          "https://claude.ai/*"
        ]
      }
    ],
    "content_security_policy": {
      "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'; connect-src 'self'; worker-src 'self'"
    },
    "background": {
      "service_worker": "background.js"
    },
    "side_panel": {
      "default_path": "sidepanel.html"
    },
    "content_scripts": [
      {
        "matches": [
          "https://chatgpt.com/*",
          "https://claude.ai/*"
        ],
        "run_at": "document_start",
        "js": [
          "content-scripts/chat.js"
        ]
      }
    ]
  },
  "checks": [
    {
      "site": "https://chatgpt.com/",
      "trainedNamesMasked": true,
      "emailMasked": true,
      "restorationRendered": true,
      "pauseResume": true
    },
    {
      "site": "https://claude.ai/",
      "trainedNamesMasked": true,
      "emailMasked": true,
      "restorationRendered": true,
      "pauseResume": true
    }
  ],
  "observedHttpRequests": [
    {
      "phase": "workflow",
      "method": "GET",
      "url": "https://chatgpt.com/",
      "serviceWorker": false
    },
    {
      "phase": "workflow",
      "method": "GET",
      "url": "https://claude.ai/",
      "serviceWorker": false
    }
  ],
  "fixtureDocumentsFulfilledLocally": 2,
  "unexpectedHttpAttempts": 0,
  "observedWebSocketAttempts": 0,
  "scope": "Fresh isolated Chromium profile; mocked chat pages, no accounts or live AI service. HTTP(S) observation includes BrowserContext service-worker events; page WebSockets are routed. Installed directory must be the unchanged extraction of the checked ZIP.",
  "limitations": [
    "Finite maintainer test, not proof of impossibility or independent certification.",
    "No OS packet capture, DNS/QUIC audit, browser-wide background traffic or exhaustive worker-protocol observation.",
    "Extension-page CSP does not establish a blanket network ban on content scripts.",
    "The live AI page can read drafts and makes its own requests; links deliberately opened by users contact websites.",
    "Applies only to this exact release. A checksum identifies bytes; it does not establish safety."
  ]
}