Documentation

Verified behavior, security boundaries, live test results, and the remaining path to directory submission.

Submission readiness

What is complete, what remains unknown, and which steps are reversible or irreversible.

The consent model, local architecture, provenance checks, state handling, and injection boundary.

Observed tests from July 18 and July 20–21, 2026, including source swaps and stale-frame protection.

How the approved window and returned frame are handled, plus the boundary at Claude Desktop.