An agent that checks a browser integration handover needs its claimed CORS prefl...

{ "body": { "artifact": { "authorization_header": 2, "entries": [ { "credentials": false, "expires": 8, "header": -1, "method": 0, "origin": 1, "partition": 0, "url": 1 }, { "credentials": false, "expires": 6, "header": -1, "method": 1023, "origin": 1, "partition": 1, "url": 1 }, { "credentials": false, "expires": 9, "header": 0, "method": -1, "origin": 0, "partition": 0, "url": 0 }, { "credentials": false, "expires": 7, "header": -1, "method": 1, "origin": 1, "partition": 0, "url": 1 }, { "credentials": false, "expires": 5, "header": 0, "method": -1, "origin": 0, "partition": 0, "url": 1 }, { "credentials": true, "expires": 5, "header": -1, "method": 1, "origin": 0, "partition": 0, "url": 0 }, { "credentials": true, "expires": 10, "header": -1, "method": 1, "origin": 1, "partition": 1, "url": 0 }, { "credentials": true, "expires": 10, "header": -1, "method": 0, "origin": 1, "partition": 0, "url": 1 }, { "credentials": false, "expires": 3, "header": -1, "method": 0, "origin": 1, "partition": 1, "url": 0 }, { "credentials": true, "expires": 1, "header": -1, "method": 1023, "origin": 1, "partition": 1, "url": 1 }, { "credentials": false, "expires": 9, "header": -1, "method": 0, "origin": 1, "partition": 1, "url": 0 }, { "credentials": true, "expires": 6, "header": -1, "method": 1023, "origin": 0, "partition": 0, "url": 0 }, { "credentials": false, "expires": 8, "header": 0, "method": -1, "origin": 1, "partition": 1, "url": 1 }, { "credentials": false, "expires": 6, "header": 2, "method": -1, "origin": 1, "partition": 0, "url": 0 }, { "credentials": false, "expires": 3, "header": 2, "method": -1, "origin": 1, "partition": 1, "url": 0 }, { "credentials": true, "expires": 2, "header": 2, "method": -1, "origin": 1, "partition": 0, "url": 0 }, { "credentials": true, "expires": 7, "header": -1, "method": 1023, "origin": 1, "partition": 1, "url": 0 }, { "credentials": false, "expires": 1, "header": 1, "method": -1, "origin": 1, "partition": 1, "url": 1 }, { "credentials": true, "expires": 8, "header": -1, "method": 1, "origin": 1, "partition": 1, "url": 1 }, { "credentials": false, "expires": 9, "header": -1, "method": 1, "origin": 0, "partition": 1, "url": 0 } ], "requests": [ { "at": 8, "claimed_hit": false, "credentials": true, "headers": [ 2 ], "method": 0, "origin": 1, "partition": 1, "url": 0 }, { "at": 10, "claimed_hit": false, "credentials": true, "headers": [ 0, 1 ], "method": 0, "origin": 1, "partition": 0, "url": 1 }, { "at": 0, "claimed_hit": false, "credentials": false, "headers": [ 0, 1, 2 ], "method": 0, "origin": 1, "partition": 0, "url": 0 }, { "at": 9, "claimed_hit": false, "credentials": false, "headers": [ 2 ], "method": 1, "origin": 0, "partition": 0, "url": 1 }, { "at": 8, "claimed_hit": false, "credentials": true, "headers": [ 1 ], "method": 0, "origin": 1, "partition": 0, "url": 1 }, { "at": 3, "claimed_hit": false, "credentials": false, "headers": [ 0, 1, 2 ], "method": 1, "origin": 1, "partition": 0, "url": 0 }, { "at": 1, "claimed_hit": false, "credentials": true, "headers": [ 0, 1, 2 ], "method": 1, "origin": 1, "partition": 1, "url": 1 }, { "at": 11, "claimed_hit": false, "credentials": true, "headers": [ 0, 1 ], "method": 0, "origin": 0, "partition": 1, "url": 1 }, { "at": 7, "claimed_hit": false, "credentials": true, "headers": [ 1, 2 ], "method": 1, "origin": 1, "partition": 1, "url": 0 }, { "at": 2, "claimed_hit": false, "credentials": false, "headers": [ 0, 1 ], "method": 1, "origin": 1, "partition": 0, "url": 1 }, { "at": 6, "claimed_hit": false, "credentials": true, "headers": [ 1 ], "method": 0, "origin": 1, "partition": 1, "url": 1 }, { "at": 10, "claimed_hit": false, "credentials": false, "headers": [ 1, 2 ], "method": 1, "origin": 1, "partition": 0, "url": 0 }, { "at": 9, "claimed_hit": false, "credentials": false, "headers": [ 0 ], "method": 0, "origin": 1, "partition": 1, "url": 0 }, { "at": 1, "claimed_hit": false, "credentials": false, "headers": [], "method": 0, "origin": 0, "partition": 1, "url": 0 }, { "at": 6, "claimed_hit": false, "credentials": false, "headers": [ 0, 1, 2 ], "method": 0, "origin": 1, "partition": 0, "url": 0 } ] } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 100, "evidence": [ { "page_indices": [], "page_url": null, "pattern": "api-cors-preflight-cache-reuse_scoped_evidence", "type": "artifact" } ], "limits": [ "Only the explicit bounded artifact is measured. No retrieval, execution, real credential validation, contact output or legal/security/quality judgement.", "Normalized Fetch preflight cache entries; method/header1023 denotes wildcard and -1 denotes the unused permission arm. Requests represent methods and headers that require permission; safelisted detection, response validation and expiry insertion are outside scope. Authorization never matches a header wildcard. Credential eligibility follows the cache-entry credential flag; wildcard response admission is outside this cache lookup model." ], "module": "api-cors-preflight-cache-reuse", "module_cpu_ms": 0, "state": "not_observed", "value": { "cache_hit_claim_mismatches": 0, "preflight_cache_requests": 15, "reusable_preflight_hits": 0, "supplied_permission_entries": 20 }, "warnings": [] } ], "known_count": 1, "scope": { "contact_values_returned": false, "network": false, "supplied_artifact_only": true }, "warnings": [] }, "type": "json" }