LocalMuse — origin check

This is not the product. It is a placeholder whose only job is to prove that the response headers, the cross-origin isolation they produce, and the granted Content-Security-Policy all behave on a real host the way they behave on 127.0.0.1. Every measurement this project has taken so far was against localhost, and a localhost origin is not a pages.dev origin.

It loads no model, stores nothing, and sends nothing anywhere. The one network request it makes is a single byte — an HTTP range request for the first byte of a pinned weight file — to check that the fetch a first run would make is not blocked here.

Verdict

measuring…

What was measured

Full record

Copy this into docs/evidence/browser/ if you ran it by hand. The Playwright spec deploy/e2e/deployed-origin.spec.ts writes it for you.

…