2026-07-29 - launch candidate
Product
- Published the local-first scan flow, synthetic example report, pricing explanation, and trust pages.
- Kept checkout disabled pending seller, tax, refund, payment, and mailbox configuration.
Engine
- Engine version
0.1.0; report schema1.0. - Documented bounded archive handling, non-execution, local processing, and incomplete-result limits.
Rules
| Ruleset version | chrome-edge-2026.07.29.2 |
|---|---|
| Release date | |
| Rules added | EG-RHC-001, EG-PERM-004, EG-MAN-008, EG-DATA-008, and EG-MAN-018 |
| Detection changes | Added fail-closed graph-build deadlines, Chrome Web Store description/icon checks, all-zero version rejection, complete manifest match-pattern surfaces, normalized manifest paths, and member-form fetch analysis. |
| Severity changes | None; this is the first public ruleset. |
| False-positive fixes | Explicit match-pattern ports are accepted, FTP patterns are rejected, currently supported manifest keys no longer produce unknown-key findings, and local Wasm requires a valid streaming fetch shape. |
| Official sources reviewed | Chrome Web Store policies and troubleshooting, Manifest V3 remote-code and permissions guidance, plus Microsoft Edge porting, publishing, and developer policies. |
| Policy effective date | for Chrome's July 2026 privacy and disclosure update; no separate effective date is asserted for the other source reviews. |
Every published rule includes evidence, remediation, static-analysis limits, official sources, last review date, and version history.
Policy review
- Human-reviewed Chrome's July 1, 2026 policy announcement and August 1 enforcement date.
- Human-reviewed current Chrome troubleshooting, Manifest V3 remote-code, Edge porting, publishing, and developer-policy pages.
How to read this log
Product changes affect the user workflow. Engine changes affect parsing or report output. Rule changes affect a public finding definition. Severity changes and false-positive fixes are called out explicitly, including when there are none. Policy reviews record source freshness and do not imply that a store endorsed ExtensionGate.
Browse public rules