{
  "schema": "reashield.browser-csp-benchmark/v1",
  "startedAt": "2026-10-21T02:27:23.491Z",
  "status": "passed",
  "execution": {
    "provider": "e2b",
    "boxId": "iadac228d1pu7ts7o877c",
    "templateId": "sqf3lma3j3xvfildvtny",
    "source": "operator-provided environment; not runtime attestation",
    "openShellEnforcement": "not observed"
  },
  "revision": "767758e-dirty",
  "scope": "Owned ESM fixture in real Chromium, before and after the browser-csp source transform.",
  "limits": [
    "Owned fixture only; no framework, PWA, service worker, browser extension or arbitrary web application qualification.",
    "No mobile runtime, APK, native binary, agent campaign or reverse-engineering resistance measurement.",
    "One local-browser run; timings describe this run and are not throughput or production performance estimates.",
    "Chromium process sandbox disabled inside the E2B box; no claim of an additional Chromium sandbox boundary."
  ],
  "tools": {
    "node": "v22.23.3",
    "platform": "linux",
    "architecture": "x64",
    "playwright": "1.64.1",
    "chromium": "156.0.8078.4"
  },
  "browserLaunch": {
    "headless": true,
    "chromiumSandbox": false,
    "args": [
      "--no-sandbox"
    ]
  },
  "csp": {
    "header": "default-src 'none'; script-src 'self'; style-src 'none'; img-src 'none'; connect-src 'none'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; worker-src 'none'; form-action 'none'",
    "source": "HTTP Content-Security-Policy response header",
    "bypassCSP": false
  },
  "expected": [
    {
      "id": "initial-state",
      "result": {
        "kind": "return",
        "value": {
          "balance": 0,
          "currency": "CAD"
        }
      }
    },
    {
      "id": "unicode-string",
      "result": {
        "kind": "return",
        "value": "Bonjour, Zoé !"
      }
    },
    {
      "id": "deposit-integer",
      "result": {
        "kind": "return",
        "value": 3
      }
    },
    {
      "id": "deposit-fraction",
      "result": {
        "kind": "return",
        "value": 5.5
      }
    },
    {
      "id": "negative-rejected",
      "result": {
        "kind": "throw",
        "name": "RangeError",
        "message": "amount must be non-negative"
      }
    },
    {
      "id": "wrong-type-rejected",
      "result": {
        "kind": "throw",
        "name": "TypeError",
        "message": "amount must be a finite number"
      }
    },
    {
      "id": "state-after-errors",
      "result": {
        "kind": "return",
        "value": {
          "balance": 5.5,
          "currency": "CAD"
        }
      }
    },
    {
      "id": "withdraw-fraction",
      "result": {
        "kind": "return",
        "value": 4.25
      }
    },
    {
      "id": "overdraw-rejected",
      "result": {
        "kind": "throw",
        "name": "RangeError",
        "message": "insufficient balance"
      }
    },
    {
      "id": "state-after-overdraw",
      "result": {
        "kind": "return",
        "value": {
          "balance": 4.25,
          "currency": "CAD"
        }
      }
    },
    {
      "id": "reset-state",
      "result": {
        "kind": "return",
        "value": {
          "balance": 0,
          "currency": "CAD"
        }
      }
    },
    {
      "id": "zero-amount",
      "result": {
        "kind": "return",
        "value": 0
      }
    }
  ],
  "protectionMs": 9.830581999999993,
  "artifacts": {
    "baseline": {
      "sha256": "738651799d9698223d797c756220860f861af4db0e1a654a815a3bf689b4ace1",
      "bytes": 819
    },
    "protected": {
      "sha256": "3886ccfcffa9c1b49f76e17b97d147dfdf46fb61be3e55045c2d17e39a00a6aa",
      "bytes": 3273
    },
    "harnessSha256": "7f1fb69340a7f1d640d956763b32c3482960870f01f39226ac708bf67fc40a26",
    "benchmarkSha256": "249fabd7c2c9ab6808fe2feead5078658b77b255d87b9bfd5f5ea61e9e488b06",
    "engineSha256": "7125ea6f294bdd2e26a11dbbad1d55259a070a581706c08d24e2ef40b45478db"
  },
  "variants": {
    "baseline": {
      "exports": [
        "deposit",
        "greeting",
        "reset",
        "snapshot",
        "withdraw"
      ],
      "scenarios": [
        {
          "id": "initial-state",
          "result": {
            "kind": "return",
            "value": {
              "balance": 0,
              "currency": "CAD"
            }
          },
          "elapsedMs": 2.7999999999883585
        },
        {
          "id": "unicode-string",
          "result": {
            "kind": "return",
            "value": "Bonjour, Zoé !"
          },
          "elapsedMs": 0
        },
        {
          "id": "deposit-integer",
          "result": {
            "kind": "return",
            "value": 3
          },
          "elapsedMs": 0
        },
        {
          "id": "deposit-fraction",
          "result": {
            "kind": "return",
            "value": 5.5
          },
          "elapsedMs": 0
        },
        {
          "id": "negative-rejected",
          "result": {
            "kind": "throw",
            "name": "RangeError",
            "message": "amount must be non-negative"
          },
          "elapsedMs": 3.1000000000058208
        },
        {
          "id": "wrong-type-rejected",
          "result": {
            "kind": "throw",
            "name": "TypeError",
            "message": "amount must be a finite number"
          },
          "elapsedMs": 0
        },
        {
          "id": "state-after-errors",
          "result": {
            "kind": "return",
            "value": {
              "balance": 5.5,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0
        },
        {
          "id": "withdraw-fraction",
          "result": {
            "kind": "return",
            "value": 4.25
          },
          "elapsedMs": 0
        },
        {
          "id": "overdraw-rejected",
          "result": {
            "kind": "throw",
            "name": "RangeError",
            "message": "insufficient balance"
          },
          "elapsedMs": 0
        },
        {
          "id": "state-after-overdraw",
          "result": {
            "kind": "return",
            "value": {
              "balance": 4.25,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0
        },
        {
          "id": "reset-state",
          "result": {
            "kind": "return",
            "value": {
              "balance": 0,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0.09999999997671694
        },
        {
          "id": "zero-amount",
          "result": {
            "kind": "return",
            "value": 0
          },
          "elapsedMs": 0
        }
      ],
      "importMs": 10.89999999999418,
      "scenarioMs": 6.2999999999883585,
      "controls": {
        "eval": {
          "blocked": true,
          "errorName": "EvalError",
          "message": "Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self'\".\n"
        },
        "functionConstructor": {
          "blocked": true,
          "errorName": "EvalError",
          "message": "Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self'\".\n"
        },
        "wasmCompilation": {
          "blocked": true,
          "errorName": "CompileError",
          "message": "WebAssembly.Module(): Compiling or instantiating WebAssembly module violates the following Content Security policy directive because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: \"script-src 'self'\"."
        }
      },
      "violations": [
        {
          "effectiveDirective": "script-src",
          "blockedURI": "eval",
          "disposition": "enforce"
        },
        {
          "effectiveDirective": "script-src",
          "blockedURI": "eval",
          "disposition": "enforce"
        },
        {
          "effectiveDirective": "script-src",
          "blockedURI": "wasm-eval",
          "disposition": "enforce"
        }
      ],
      "userAgent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/156.0.8078.4 Safari/537.36",
      "responseCsp": "default-src 'none'; script-src 'self'; style-src 'none'; img-src 'none'; connect-src 'none'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; worker-src 'none'; form-action 'none'",
      "pageErrors": [],
      "policyControlsPassed": true
    },
    "protected": {
      "exports": [
        "deposit",
        "greeting",
        "reset",
        "snapshot",
        "withdraw"
      ],
      "scenarios": [
        {
          "id": "initial-state",
          "result": {
            "kind": "return",
            "value": {
              "balance": 0,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0.09999999997671694
        },
        {
          "id": "unicode-string",
          "result": {
            "kind": "return",
            "value": "Bonjour, Zoé !"
          },
          "elapsedMs": 0.10000000000582077
        },
        {
          "id": "deposit-integer",
          "result": {
            "kind": "return",
            "value": 3
          },
          "elapsedMs": 1.3000000000174623
        },
        {
          "id": "deposit-fraction",
          "result": {
            "kind": "return",
            "value": 5.5
          },
          "elapsedMs": 0
        },
        {
          "id": "negative-rejected",
          "result": {
            "kind": "throw",
            "name": "RangeError",
            "message": "amount must be non-negative"
          },
          "elapsedMs": 0.29999999998835847
        },
        {
          "id": "wrong-type-rejected",
          "result": {
            "kind": "throw",
            "name": "TypeError",
            "message": "amount must be a finite number"
          },
          "elapsedMs": 0.10000000000582077
        },
        {
          "id": "state-after-errors",
          "result": {
            "kind": "return",
            "value": {
              "balance": 5.5,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0
        },
        {
          "id": "withdraw-fraction",
          "result": {
            "kind": "return",
            "value": 4.25
          },
          "elapsedMs": 0.10000000000582077
        },
        {
          "id": "overdraw-rejected",
          "result": {
            "kind": "throw",
            "name": "RangeError",
            "message": "insufficient balance"
          },
          "elapsedMs": 0
        },
        {
          "id": "state-after-overdraw",
          "result": {
            "kind": "return",
            "value": {
              "balance": 4.25,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0
        },
        {
          "id": "reset-state",
          "result": {
            "kind": "return",
            "value": {
              "balance": 0,
              "currency": "CAD"
            }
          },
          "elapsedMs": 0
        },
        {
          "id": "zero-amount",
          "result": {
            "kind": "return",
            "value": 0
          },
          "elapsedMs": 0
        }
      ],
      "importMs": 23.5,
      "scenarioMs": 2,
      "controls": {
        "eval": {
          "blocked": true,
          "errorName": "EvalError",
          "message": "Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self'\".\n"
        },
        "functionConstructor": {
          "blocked": true,
          "errorName": "EvalError",
          "message": "Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self'\".\n"
        },
        "wasmCompilation": {
          "blocked": true,
          "errorName": "CompileError",
          "message": "WebAssembly.Module(): Compiling or instantiating WebAssembly module violates the following Content Security policy directive because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: \"script-src 'self'\"."
        }
      },
      "violations": [
        {
          "effectiveDirective": "script-src",
          "blockedURI": "eval",
          "disposition": "enforce"
        },
        {
          "effectiveDirective": "script-src",
          "blockedURI": "eval",
          "disposition": "enforce"
        },
        {
          "effectiveDirective": "script-src",
          "blockedURI": "wasm-eval",
          "disposition": "enforce"
        }
      ],
      "userAgent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/156.0.8078.4 Safari/537.36",
      "responseCsp": "default-src 'none'; script-src 'self'; style-src 'none'; img-src 'none'; connect-src 'none'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; worker-src 'none'; form-action 'none'",
      "pageErrors": [],
      "policyControlsPassed": true
    }
  },
  "checks": {
    "scenarioCount": 12,
    "baselineMatchesExpected": true,
    "protectedMatchesExpected": true,
    "beforeAfterEqual": true,
    "exportNamesEqual": true,
    "wrongOutputRejected": true,
    "missingScenarioRejected": true,
    "strictCspEnforcedForBoth": true
  },
  "finishedAt": "2026-10-21T02:27:36.682Z"
}