FlowHunni Veo Flow Extension v0.8.6
Artifact: SINGLE PRODUCTION ZIP
Phase: 8.4 Studio-Parity Auto Download Hotfix
Build ID: fh-prod-v0.8.6-2c65b020662d85ef22ac5af5
Server/API/heartbeat changes: none
Provider cookies: memory-to-Chrome injection only; stored/logged values: none
Cookie cleanup: exact extension-owned labs.google identities only
Usage journal: chrome.storage.local crash-durable lifecycle; secrets and prompts excluded
Control cycle: one-minute overview, reconciliation, heartbeat order on existing routes
Idle/background: 15-minute Flow idle, 30-minute background grace, active-job protection
Abrupt-removal fallback: fixed 120-second cookie TTL in every slot state, renewed by one-minute control alarm
Sticky close: last-tab close allows one 90-second same-assignment reconnect before automatic release
Dead-man: one-second local runtime identity check locks and blanks orphaned Flow pages
Message boundary: exact extension ID, popup/Flow sender, active tab binding, schema, age, size and replay checks
Risk preflight: exact cookie-tool IDs plus cookies and broad Google host capability pair; owner allowlist preserved
Native exit: secure cleanup precedes browser disable/uninstall confirmation
Install types: development, normal, admin
Distribution: flowhoney.com ZIP, permanent folder, Developer Mode, Load unpacked
Build: deterministic, minified, obfuscated, no source maps, no remote code, binary integrity metadata included
Obfuscation budget: 580586/234638 bytes (2.474x)
DOM query budget: 24 querySelectorAll call sites; wildcard hot scans zero
Client-side integrity is deterrence and fail-closed policy, not a substitute for server enforcement
