Backlog item §B · B8 — mirrored from docs/roadmap/improvements-backlog.md.
What the audit found
Page-world injection is
detectable/forgeable/spammable by a hostile page
(Host/QADiagnosticsBridge.swift:5-93, main.swift:233-236) while P0 claims
isolated-world helpers. Move what's possible; mark the rest untrusted. See
architecture decision §7.
Milestone: Phase 2 — One host, written once
Before changing behaviour here, read docs/roadmap/what-is-excellent.md — the contracts listed there must survive the fix — and AGENTS.md for build, test, and review conventions.
Definition of done: the change ships with the test named above (or an equivalent), CI is green, and the corresponding line in the backlog file is checked off in the same PR.
What the audit found
Page-world injection is
detectable/forgeable/spammable by a hostile page
(
Host/QADiagnosticsBridge.swift:5-93,main.swift:233-236) while P0 claimsisolated-world helpers. Move what's possible; mark the rest untrusted. See
architecture decision §7.
Milestone: Phase 2 — One host, written once
Before changing behaviour here, read
docs/roadmap/what-is-excellent.md— the contracts listed there must survive the fix — andAGENTS.mdfor build, test, and review conventions.Definition of done: the change ships with the test named above (or an equivalent), CI is green, and the corresponding line in the backlog file is checked off in the same PR.