Public Product Contract / Permissions

Three permissions.
One explicit page.

The Manifest V3 permission budget is exactly activeTab, scripting, and storage. Incognito is not_allowed.

activeTab

Temporary access associated with your toolbar action on the current tab. Product authorization is narrower than Chrome's technical grant: Page Exit and observed same-document navigation end it and require another explicit toolbar action. No persistent host access is requested.

scripting

Injects the Engine and detachable UI into the authorized top-level HTML Document, in the ISOLATED world only. No child-frame injection, MAIN-world execution, History monkey patch, or page communication bridge is used.

storage

Retains one validated reduced result per tab in trusted-context-only session storage. Active source values, DOM references, and the Mutation Journal stay in memory. No permanent or synchronized result history is kept.

Absent permissions and capabilities

No host permissions, persistent content-script match patterns, tabs, webNavigation, clipboardWrite, downloads, debugger, cookies, history, webRequest, or network interception permissions are declared.

Limited tab lifecycle and identity APIs are used without the broad tabs permission. Copy uses the native Clipboard API during a user gesture, with manual fallback; it does not request clipboardWrite. The extension has no application network client, telemetry, remote code, screenshot capture, or automatic export.

Permission does not make every page supported

Chrome-protected pages, non-HTML documents, direct files, other unsupported protocols, iframe documents, and Shadow DOM remain outside the Supported Scope. The extension does not request more access to bypass these restrictions.

Read the Supported Scope and data lifecycle before authorizing a page.