{"data":{"status":"fail","kind":"chrome-extension","expanded":true,"added":[{"category":"permission","item":"tabs","risk":"warns"},{"category":"host-access","item":"<all_urls>","risk":"all-hosts"}],"removed":[],"witnesses":[{"ruleId":"chrome.permission","detail":"permission \"tabs\" added; Chrome warns: Read your browsing history.","path":"permissions","actual":"tabs"},{"ruleId":"chrome.host","detail":"host access <all_urls> is not covered by any host_permissions or content_scripts match in the old manifest","path":"host_permissions","actual":"<all_urls>"}],"versions":{"engine":"permission-delta/1","chromePermissions":"developer.chrome.com/docs/extensions/reference/permissions-list, as of 2026-11-04","androidPermissions":"AOSP frameworks/base core/res/AndroidManifest.xml (protectionLevel), android.googlesource.com refs/heads/main, as of 2026-11-04","npmScripts":"docs.npmjs.com/cli/v11/using-npm/scripts, as of 2026-11-04"},"limits":["Only the two documents are compared: Android manifest merging, npm lockfile resolution and Chrome enterprise policy are not applied.","Chrome optional permissions and optional host access are listed but never fail the check.","Android components without android:exported count as exported only when they declare an intent-filter (non-provider); launcher-only activities are ignored.","'Sensitive without a warning' Chrome permissions (cookies, webRequest, scripting, ...) are a judgement list, not a Chrome classification."],"deterministic":true},"_provenance":{"version":"writerslogic-provenance/1","issuer":"did:web:agents.writerslogic.com","verify":{"endpoint":"POST /api/v1/verify-provenance","did":"did:web:agents.writerslogic.com"},"manifest":{"format":"application/json","instance_id":"xmp:iid:6336a83e-38a0-4f19-a7ff-5ea64c9ba113","claim_generator_info":[{"name":"WritersLogic x402 Agent Hub","version":"2.0.0"}],"title":"Privilege expansion between two manifests: npm, Chrome extension, Android","assertions":[{"label":"c2pa.actions.v2","data":{"actions":[{"action":"c2pa.created","when":"2026-11-06T01:30:29.171Z","softwareAgent":{"name":"writerslogic-agent-hub/permission-delta","version":"2.0.0"},"digitalSourceType":"http://cv.iptc.org/newscodes/digitalsourcetype/algorithmicMedia","parameters":{"endpoint":"POST /api/v1/permission-delta","inputDigest":{"alg":"sha256","hash":"ec753ad42ac114aa839c15d3037e66ba50d6262ddead92b4db533f7c2ff6218a","canonicalization":"JCS"}}}]}},{"label":"c2pa.hash.data","data":{"alg":"sha256","hash":"b762ea3c1cef558329c7e66269a4be9320e531092f8ee6f70f09c0736a3a3efe","name":"jcs-canonical-json(data)"}}]},"credential":{"@context":["https://www.w3.org/ns/credentials/v2"],"id":"urn:uuid:b8c0c238-bd07-4a1a-9e65-4ffecbad2955","type":["VerifiableCredential","AgentOutputCredential"],"issuer":"did:web:agents.writerslogic.com","validFrom":"2026-11-06T01:30:29.171Z","credentialSubject":{"id":"urn:sha256:b762ea3c1cef558329c7e66269a4be9320e531092f8ee6f70f09c0736a3a3efe","agent":"permission-delta","endpoint":"POST /api/v1/permission-delta","outputDigest":{"alg":"sha256","value":"b762ea3c1cef558329c7e66269a4be9320e531092f8ee6f70f09c0736a3a3efe","canonicalization":"JCS"},"inputDigest":{"alg":"sha256","value":"ec753ad42ac114aa839c15d3037e66ba50d6262ddead92b4db533f7c2ff6218a","canonicalization":"JCS"},"manifestDigest":{"alg":"sha256","value":"a6b82fed3aaa5016e838f4a7ea1d38e2ecabe7ac889b318e8bd55119648c3a2d","canonicalization":"JCS"},"ingredients":[],"payment":{"scheme":"api-key","network":"eip155:8453","payer":"sample"}},"proof":{"type":"DataIntegrityProof","cryptosuite":"eddsa-jcs-2022","created":"2026-11-06T01:30:29.171Z","verificationMethod":"did:web:agents.writerslogic.com#key-1","proofPurpose":"assertionMethod","proofValue":"z1TcJGeFPaT93qVYYNwizPttAZXAZGbge5ejekvGq3UNnjQkxbsc4m2iUV2H15rbLmqyVDA2y8aDQYLrQbTa7XRb"}},"ethSignature":{"type":"EIP-191","signer":"did:pkh:eip155:8453:0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","address":"0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","message":"writerslogic-provenance:ba94aab35408f9a991e37e1f6489ab8eb9f5203e7a3b7403ced2436e1c75e53b","signature":"0x1643d3f42c15a2c07fac748b71dd1bb2201311c223c51c0e0c9b7b3cf8ad91b85af0905a4e498ddcd68497b9e665772c8804d2520aa80917a1b6d0d4dfc818bc1c"}}}