Docs
Browser Extension Architecture
Manifest V3 for Chrome, Brave, Edge and other Chromium browsers.
Components
- Service worker: vault, signing, session permissions
- Content script: injects EIP-1193 / EIP-6963 provider (window.ethereum)
- Popup + full-page UI
- Hardware wallets via WebHID/WebUSB — keys stay on device
Hardening
- Minimal permissions, no <all_urls> host access beyond injection
- Strict CSP, no remote code
- Per-origin permission store; explicit approval for every request
Items marked NATIVE must be implemented as audited native code (Swift, Kotlin, Rust or C++), not in the web app.

