Hostile Sandbox Fixture

This page deliberately tests containment. External probes send only a random run ID and probe name. No personal data is collected.

UNKNOWN stays UNKNOWN without independent evidence. Camera/microphone should be denied. If a permission prompt appears, deny it and record that outcome.

Run ID:

Navigation/form/popup probes run individually and may leave this page. Native message-handler discovery is observational; it does not invoke unknown handlers.

ProbeStatusEvidence / action

Cookie access to the attack origin is expected when origin identity is retained. It does not imply access to console localStorage or platform credentials.