A controlled playground that fires positive and negative test cases for the eval_hook and shadow_dom_patch_puppys extension sensors — including inputs that should not match, to prove the filters are tight.
Scoped to internal test users only · uid_pattern: ^uid_fefe · no data is collected or sent by this page
>300 chars and malicious keywords (powershell, curl, iex, frombase64string, Win+R, ✅, "verify you are human").
Fails both gates: <300 chars and no keywords.
Passes the length gate (>300 chars) but has no malicious keyword → keyword gate blocks it.
Has keywords (powershell/iex/curl) but <300 chars → length gate blocks it.
Page-created (main-world) open shadow host with >500 chars of host content + a hidden ClickFix UI in the shadow root.
Open shadow host containing another open shadow host (tests the depth walk).
Host telemetry is reported, but host content is <500 chars → filtered out by the downstream length rule.
Closed shadow roots are invisible to the patch (only mode:"open" is tagged).