{
  "name": "PriviTools local-processing manifest",
  "version": "2026-08-15",
  "scope": "Production browser flows covered by the repository privacy tests",
  "claims": [
    {
      "id": "pdf-buffer-path",
      "statement": "The tested PDF flows read selected files in the browser and pass their bytes to browser-side processing code; the test rejects canary data in outgoing request URLs and bodies.",
      "evidence": [
        "src/scripts/pdf-workbench.ts",
        "tests/privacy-no-exfiltration.spec.ts"
      ]
    },
    {
      "id": "video-worker-path",
      "statement": "The tested video flow sends the selected file bytes to a Web Worker and returns the generated result to the page.",
      "evidence": [
        "src/scripts/video-audio.ts",
        "src/workers/video-transcoder.ts"
      ]
    },
    {
      "id": "feedback-exception",
      "statement": "The optional feedback form sends the written suggestion to Web3Forms; it does not attach the selected tool file.",
      "evidence": [
        "src/components/FeedbackForm.astro"
      ]
    }
  ],
  "verification": {
    "test": "npx vitest run tests/privacy-no-exfiltration.spec.ts",
    "interpretation": "This is a scoped engineering record, not a certification of every browser, file type, dependency, or future deployment.",
    "lastReviewed": "2026-08-15"
  }
}