Chrome Extension
Edge Add-on
QA Audit Passed (34/34 Gates)
Official technical audit, permission scope verification, and 34-gate functional test matrix for VaultPilot — web clipper for your Obsidian vault.
This technical docket documents the architectural boundaries, permission scope audit, and functional QA test cases verified for VaultPilot — web clipper for your Obsidian vault.
Marquee / selection / full-page capture
Clean Markdown + YAML frontmatter
Liberate to Markdown (free)
100% Local Browser Storage (chrome.storage.local / IndexedDB). MV3 Least-Privilege Verified · Zero External Telemetry (0 Outbound Calls).
Clip any page or selection to clean Markdown — straight into your local Obsidian, Logseq, or Capacities vault. 100% local, no account.
| Attribute | Specification | Verification Standard |
|---|---|---|
| Host Surface / OS | Google Chrome & Microsoft Edge (Manifest V3) | Platform Manifest & Surface Gate |
| Runtime Execution | Chromium MV3 Service Worker + Side Panel / Local Storage Sandbox | Sovereign Execution Sandbox |
| Data Residency | 100% Local Browser Storage (chrome.storage.local / IndexedDB) | Zero Unintended Outbound Data Transit |
| Permissions / Scopes | sidePanel, storage, unlimitedStorage, activeTab, scripting, contextMenus, downloads |
Strict Least-Privilege Manifest Audit |
| Security Classification | MV3 Least-Privilege Verified · Zero External Telemetry (0 Outbound Calls) | 864zeros Radical Transparency Standard |
| QA Test Pass Rate | 34 / 34 Gates Passed (100%) | Deterministic Pre-Release QA Checklist |
The following 34-gate verification suite was executed against the production artifact (vaultpilot/QA_CHECKLIST.md):
| Test ID | Assertion & Verification Objective | Verification Gate | Result |
|---|---|---|---|
| QA-0.1 | Manifest MV3 Compliance: manifest.json is strictly MV3, declares sidePanel, storage, unlimitedStorage, activeTab, scripting, contextMenus, downloads. |
§0 — Pre-Flight Package & Asset Integrity Gate | PASS |
| QA-0.2 | Zero Collisions / Forbidden Keys: No update_url, no developer key, author set to "864zeros LLC". |
§0 — Pre-Flight Package & Asset Integrity Gate | PASS |
| QA-0.3 | Graphic Asset Preservation (Rule 2): Production-grade on-brand graphite/slate icons present at icons/icon16.png, icons/icon48.png, icons/icon128.png. Zero placeholder or blank blocks. |
§0 — Pre-Flight Package & Asset Integrity Gate | PASS |
| QA-0.4 | Clean Repository Tree: Zero .crx, .pem, node_modules, or temporary files. |
§0 — Pre-Flight Package & Asset Integrity Gate | PASS |
| QA-1.1 | Chrome Unpacked Load: Open chrome://extensions → Developer mode ON → **Load unpacked** → select LLC-DIV-3-FACTORY/extensions/migration-pilot. — Loads with 0 errors in the Chrome Errors tab; service worker active. |
§1 — Dual Browser Load & Surface Gate (Chrome & Edge) | PASS |
| QA-1.2 | Edge Unpacked Load: Open edge://extensions → Developer mode ON → **Load unpacked** → select LLC-DIV-3-FACTORY/extensions-edge/vaultpilot. — Loads cleanly without manifest warnings or rejections. |
§1 — Dual Browser Load & Surface Gate (Chrome & Edge) | PASS |
| QA-1.3 | Side Panel Invocation: Click toolbar action button on both Chrome and Edge. — Side panel (sidepanel/index.html) opens immediately. Header shows [864F] VaultPilot. |
§1 — Dual Browser Load & Surface Gate (Chrome & Edge) | PASS |
| QA-1.4 | UI Brand Hierarchy: Header shows on-brand slate styling, graphite badges, zero console errors. | §1 — Dual Browser Load & Surface Gate (Chrome & Edge) | PASS |
| QA-2.1 | Options Page Launch: Open options via cog or context menu (options/options.html). |
§2 — Command & Control (RULE-001 Options & Settings Gate) | PASS |
| QA-2.2 | Verified Platform Pill: On Edge: Displays Microsoft Edge Add-on · Verified header pill with Edge Wave emblem. — On Chrome: Displays on-brand 864-Flux verification header. |
§2 — Command & Control (RULE-001 Options & Settings Gate) | PASS |
| QA-2.3 | RULE-001 Mandatory Sections Present: Section 1: How to Use (4 numbered steps: Full Page, Selection, Marquee, Liberate/Direct-to-Vault). — Section 2: Tiers & Pricing (Free Liberate path + one-time Direct-to-Vault one-time). — Section 3: Data Management (capture count + clear all captures with two-tap confirm). — Section 4: Platform Craftsmanship Footer (Designed for Microsoft Edge / Chrome Extension). |
§2 — Command & Control (RULE-001 Options & Settings Gate) | PASS |
| QA-2.4 | Store Review Link Routing: Re-routes to Chrome Web Store on Chrome, Edge Add-ons on Edge. | §2 — Command & Control (RULE-001 Options & Settings Gate) | PASS |
| QA-2.5 | Canonical Cross-Link: Platform footer links back to canonical landing page: https://864zeros.com/products/vaultpilot.html. |
§2 — Command & Control (RULE-001 Options & Settings Gate) | PASS |
| QA-3.1 | Full Page Capture: On any web article, click **Save this page**. — Capture card appears in accordion list with title, URL, timestamp. | §3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.2 | Selection Capture: Highlight text → right-click → **864zeros: Save selection**. — Capture created containing highlighted quote and attribution. | §3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.3 | Marquee Capture: Click **Drag-select region** → select area on page. — Selection converted to clean Markdown. | §3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.4 | Liberate to Markdown (Free Path): Select captures → click **Liberate to Markdown**. — Clean .md files download with YAML frontmatter (title, source_url, tags, notes). Post-liberate cleanup prompt appears. |
§3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.5 | Direct-to-Vault Write (Pro Path): Select captures → click **Write to Obsidian vault** → select local vault directory. — Files written directly into <vault>/vaultpilot/ folder via File System Access API. |
§3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.6 | Obsidian Dogfood Check: Open written .md notes in Obsidian desktop app. — Notes render cleanly, YAML properties parsed correctly, links and text intact. |
§3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-3.7 | Boundary Claims Check: VaultPilot writes ONLY inside <vault>/vaultpilot/ — never outside the chosen root. |
§3 — Core Product Workflow & Dogfood Execution | PASS |
| QA-4.1 | Network Tab Audit: Open DevTools → Network tab while performing captures, liberation, and vault writes. — Exactly **0** requests sent to any external server or telemetry API. | §4 — Sovereign Local-First & Zero-Cloud Boundary Gate | PASS |
| QA-4.2 | Offline Operation: Disconnect network; clip already-open tab content and write to vault. — Works 100% offline. | §4 — Sovereign Local-First & Zero-Cloud Boundary Gate | PASS |
| QA-4.3 | Local Storage Scope: All captures stored in local IndexedDB; data survives browser restarts. | §4 — Sovereign Local-First & Zero-Cloud Boundary Gate | PASS |
| QA-5.1 | Build-Kit Execution: Run node 864z-build-kit/tools/extension/transform-edge.cjs vaultpilot. — Returns exit code 0; produces all required Edge Add-on artifacts. |
§5 — Cross-Platform Transformation & Store Artifacts Gate | PASS |
| QA-5.2 | Promo Asset Render: Verify dist/edge/vaultpilot-edge-promo-440x280.png exists and renders clean 440×280 visual. |
§5 — Cross-Platform Transformation & Store Artifacts Gate | PASS |
| QA-5.3 | Submission ZIP: Verify dist/edge/vaultpilot-edge-v1.0.0.zip exists (~153 KB, non-runtime assets excluded). |
§5 — Cross-Platform Transformation & Store Artifacts Gate | PASS |
| QA-5.4 | Partner Center Docket: Inspect dist/edge/vaultpilot-edge-listing.md. Short description is strictly ≤ 132 characters. |
§5 — Cross-Platform Transformation & Store Artifacts Gate | PASS |
| QA-6.1 | Product Page Top Hero: Visit https://864zeros.com/products/vaultpilot.html. — Top hero displays both [Chrome Extension] and [Edge Add-on] badges. |
§6 — Web Presence, Dual Badges & SEO/GEO Gate | PASS |
| QA-6.2 | Dual Store CTAs: Top hero renders both [Add to Chrome] and [Get for Edge] (or Coming to Edge) action buttons. |
§6 — Web Presence, Dual Badges & SEO/GEO Gate | PASS |
| QA-6.3 | Catalog Grid Card: Visit https://864zeros.com/products/. — VaultPilot tile displays dual platform badges ([Chrome Extension] + [Edge Add-on]). |
§6 — Web Presence, Dual Badges & SEO/GEO Gate | PASS |
| QA-6.4 | Schema.org JSON-LD: Structured data declares "operatingSystem": "Google Chrome, Microsoft Edge". |
§6 — Web Presence, Dual Badges & SEO/GEO Gate | PASS |
| QA-6.5 | Mandatory Video Engine Execution Gate: Run node 864z-build-kit/tools/verify-gtm-video.cjs vaultpilot. — Tier 2 master explainer (vaultpilot-short.mp4, 37.58s) and poster (vaultpilot-thumbnail.png) rendered, embedded on 864zeros.com/products/vaultpilot via <section class="video-band">, and vaulted in 864zeros-publish/media/products/vaultpilot/. |
§6 — Web Presence, Dual Badges & SEO/GEO Gate | PASS |
| QA-7.1 | Demand-of-One Test: Does the operator actively clip research into Obsidian using VaultPilot? | §7 — Dogfood & Radical Transparency Verdict | PASS |
| QA-7.2 | Zero Known Defects: All tests passed with 0 unhandled exceptions. | §7 — Dogfood & Radical Transparency Verdict | PASS |
To verify that VaultPilot cannot exfiltrate user content or exceed its declared operational boundary, the production package is locked to the following manifest and runtime constraints:
// Verified Manifest & Runtime Boundary (vaultpilot v1.0.1)
{
"product": "VaultPilot — web clipper for your Obsidian vault",
"surface": "Google Chrome & Microsoft Edge (Manifest V3)",
"runtime": "Chromium MV3 Service Worker + Side Panel / Local Storage Sandbox",
"dataResidency": "100% Local Browser Storage (chrome.storage.local / IndexedDB)",
"declaredPermissions": ["sidePanel","storage","unlimitedStorage","activeTab","scripting","contextMenus","downloads"],
"externalTelemetryEndpoints": 0,
"thirdPartyAnalyticsSdks": 0
}Our Market Gap Intelligence engine analyzed verified 1-star and 2-star reviews across Cloud Web Clippers & Proprietary PKM Read-Later Pipelines and re-engineered VaultPilot from first principles so your workflow never hits those walls again.
"Standard web clippers litter my Obsidian vault with navbars, ad scripts, and broken relative links that take 10 minutes to clean up."
Precision DOM article & marquee extractor converts full pages or selected regions into deterministic, clean Markdown with structured YAML frontmatter.
"Other PKM clippers save highlights to their cloud server first and charge a monthly subscription to sync them down to my local vault folder."
Direct-to-Vault local filesystem writing via the browser File System Access API & headless downloads—your clipped research goes straight from tab to local disk.
"Text-only markdown clippers miss architecture diagrams and UI regions that I need alongside my notes."
Combines full-page DOM scraping, selection capture, and viewport marquee capture with zero external network calls.
Visual and content assets are powered by custom-trained LoRA models and on-device training pipelines, and founders can trigger full product builds via cli2voip voice or Telegram directly into cli2cli.
Architected the zero-cloud execution boundary for VaultPilot, locking runtime permissions to sidePanel, storage, unlimitedStorage, activeTab, scripting, contextMenus, downloads with zero external CDNs or telemetry endpoints. Founders can trigger full product builds via cli2voip voice or Telegram directly into cli2cli.
Defined the single-purpose product wedge for VaultPilot (864F pillar) from Market Gap Intelligence and User Frustration Radar signals, stripping onboarding bloat so the primary workflow completes in under 3 clicks inside the FHG Warm Parchment surface.
Assembled VaultPilot from battle-tested 864z-build-kit Feature Bricks (agent-markdown-converter, headless-download-uri, agent-marquee-capture) and wired its deterministic interactive HTML sandbox, W3C WebMCP discovery tools, and cli2voip voice / Telegram into cli2cli build orchestration.
Executed adversarial packet-trace and permission-boundary stress tests against VaultPilot v1.0.1, certifying 34/34 QA verification gates with 0 bytes of unintended outbound data transit.
Translated the 3 real user pain statements for VaultPilot into RULE-017 zero-price walkthrough transcripts and accessible captions, with visual and content assets powered by custom-trained LoRA models and on-device training pipelines.
[Quick Overview Short 1 (00:00.0–00:08.5) · 0.0s–8.5s]: Tired of clipping web research and articles into your local Markdown vault getting locked behind monthly subscriptions and external cloud portals?
[Quick Overview Short 2 (00:08.5–00:14.4) · 8.5s–14.4s]: With VaultPilot, Precision Article-to-Markdown Extraction runs right where you already work.
[Quick Overview Short 3 (00:14.4–00:23.1) · 14.4s–23.1s]: Interactive Viewport Marquee & Selection Capture and Direct-to-Vault Local Filesystem Writing—100% under your own custody.
[Quick Overview Short 4 (00:23.1–00:32.9) · 23.1s–32.9s]: Software that lives where you do. No accounts, no tracking, and zero cloud rent—at 864zeros.com.
[Full Product Demo 1 (00:00.0–00:08.7) · 0.0s–8.7s]: Need a better way to handle clipping web research and articles into your local Markdown vault, without handing your data to another monthly cloud landlord?
[Full Product Demo 2 (00:08.7–00:20.8) · 8.7s–20.8s]: Watch VaultPilot in action: Strips navbars, popups, and tracking scripts automatically—producing deterministic Markdown with clean headings, code blocks, tables, and YAML frontmatter.
[Full Product Demo 3 (00:20.8–00:39.8) · 20.8s–39.8s]: Drag a marquee box around any architecture diagram, chart, or specific paragraph on a page to capture only the exact signal you need. Plus, saves `.md` files straight into your local Obsidian, Logseq, or Markdown folder on disk without bouncing through a third-party cloud bridge.
[Full Product Demo 4 (00:39.8–00:46.5) · 39.8s–46.5s]: Your internal wiki pages, competitive research, and personal knowledge base clips never leave your browser.
[Full Product Demo 5 (00:46.5–00:56.4) · 46.5s–56.4s]: Software that lives where you do. No accounts, no tracking, and zero cloud rent—at 864zeros.com.
Artifact Identification: vaultpilot (v1.0.1) · Pillar: 864F. All 34 verification gates passed and stamped by 864zeros LLC engineering board.