v0.2.2

Fix: /download/ (and any real-file page) false-flagged as a violation — the document hash was compared to the SPA shell's manifest key. The doc now resolves its own key (pathname → dir-index → shell fallback), same as the service worker.

Verified against the live manifest: /download/index.html and /index.html hashes both match — the earlier '✗ /index.html (hash mismatch)' on /download/ was this false positive.

v0.2.1

Fix: the admin console moved to dedicated meet-admin.<base> hosts — the extension injected there but had no identity anchor, so it silently skipped verification, and the legacy :8443 port check never fired on 443.

• IDENTITY_PUBS now anchors all four hosts (meet-web + meet-admin, dev + prod) to each environment's deployment key
• Admin lane detection keys on meet-admin.* hostname (legacy :8443 kept for old deployments)

Universal build — verifies both glow-im.com (dev) and glow-workspace.com (prod) web apps and admin consoles.

v0.2.0

Glow Code Verify browser extension (load-unpacked build).

Install: download glow-code-verify.zip, unzip, then:

• Chrome/Edge/Brave: chrome://extensions → Developer mode → Load unpacked → select the unzipped folder.
• Firefox: about:debugging#/runtime/this-firefox → Load Temporary Add-on → select manifest.json.

Universal build — verifies both glow-im.com (dev) and glow-workspace.com (prod) deployments against their own signing anchors.