Making 'Nothing Leaves Your Browser' a Promise the Browser EnforcesArchitecture
How I used a Content Security Policy, a service worker exception and a test suite to turn a privacy claim on a client-side developer-tools site into something enforced and checkable.