diff options
| author | Tianren Dong <tianrendong.dtr@gmail.com> | 2026-09-09 23:37:02 -0400 |
|---|---|---|
| committer | Tianren Dong <tianrendong.dtr@gmail.com> | 2026-09-09 23:48:50 -0400 |
| commit | c1f230eeb76aaa50e98d3fe7d838573612b6e36f (patch) | |
| tree | 6e00b9d63a630a674b6a3bf6936bd85f82d4aade /SECURITY.md | |
| parent | 641ae30f7963ad962e162ff0dfbd80966b09a516 (diff) | |
Enforce hard background and release 0.15.48
Diffstat (limited to 'SECURITY.md')
| -rw-r--r-- | SECURITY.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/SECURITY.md b/SECURITY.md index ffc2c06..3d07518 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -27,7 +27,7 @@ The Chrome extension under `extensions/chrome-profile-bridge/browser-extension/` - Loopback bridge only. No remote port. No telemetry. - Chrome real input layer for interactive controls. - Chrome control locked by default; `/chrome authorize` unlocks current Pi session after terminal confirmation, `/chrome revoke` locks it again. -- Run-in-background optional; tab/window focus is observable by default (the user can see Pi acting). +- Hard background mode is on by default: tools cannot override it to explicitly focus windows or activate tabs. `/chrome background off` allows foreground/watch mode. This is not a security sandbox: trusted input, page scripts, native prompts, and Chrome/OS behavior can still affect focus. ## Custom ports |