{
  "date": "2026-10-17",
  "runtime": "v24.19.0",
  "versions": {
    "node": "24.19.0",
    "acorn": "8.17.0",
    "ada": "3.4.4",
    "amaro": "1.1.10",
    "ares": "1.34.6",
    "brotli": "1.2.0",
    "cldr": "48.0",
    "icu": "78.3",
    "llhttp": "9.4.3",
    "merve": "1.2.2",
    "modules": "137",
    "napi": "10",
    "nbytes": "0.1.4",
    "ncrypto": "0.0.1",
    "nghttp2": "1.69.0",
    "nghttp3": "",
    "ngtcp2": "",
    "openssl": "3.5.7",
    "simdjson": "4.6.4",
    "simdutf": "6.4.0",
    "sqlite": "3.53.3",
    "tz": "2026b",
    "undici": "7.29.0",
    "unicode": "17.0",
    "uv": "1.52.1",
    "uvwasi": "0.0.23",
    "v8": "13.6.233.17-node.51",
    "zlib": "1.3.2.1-motley-3246f1b",
    "zstd": "1.5.7"
  },
  "app_sha256": "b5b23e8c7028a1ee6ede9b41b459f5213af44661fc42f3d8c07b4a45f99c0644",
  "method": "Synthetic fixtures, not Claude samples. Actual homepage script in minimal DOM. Checkbox state and dash mode recorded in each row. Observations are fixture-specific, not general application tests.",
  "rows": [
    {
      "label": "Interrupted closing tag",
      "stage": "direct string",
      "mode": "keep",
      "enabled": true,
      "input": "</scr​ipt>",
      "output": "</script>",
      "input_codepoints": "U+003C U+002F U+0073 U+0063 U+0072 U+200B U+0069 U+0070 U+0074 U+003E",
      "output_codepoints": "U+003C U+002F U+0073 U+0063 U+0072 U+0069 U+0070 U+0074 U+003E",
      "status": "Removed 1 invisible character",
      "before": {
        "json": "{\"text\":\"</scr​ipt>\"}",
        "containsScriptEndPrefix": false,
        "escapedJson": "{\"text\":\"\\u003C/scr​ipt>\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      },
      "after": {
        "json": "{\"text\":\"</script>\"}",
        "containsScriptEndPrefix": true,
        "escapedJson": "{\"text\":\"\\u003C/script>\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      }
    },
    {
      "label": "Closing tag",
      "stage": "direct string",
      "mode": "keep",
      "enabled": true,
      "input": "</script>",
      "output": "</script>",
      "input_codepoints": "U+003C U+002F U+0073 U+0063 U+0072 U+0069 U+0070 U+0074 U+003E",
      "output_codepoints": "U+003C U+002F U+0073 U+0063 U+0072 U+0069 U+0070 U+0074 U+003E",
      "status": "No selected invisible characters found",
      "before": {
        "json": "{\"text\":\"</script>\"}",
        "containsScriptEndPrefix": true,
        "escapedJson": "{\"text\":\"\\u003C/script>\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      },
      "after": {
        "json": "{\"text\":\"</script>\"}",
        "containsScriptEndPrefix": true,
        "escapedJson": "{\"text\":\"\\u003C/script>\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      }
    },
    {
      "label": "Less-than text",
      "stage": "direct string",
      "mode": "keep",
      "enabled": true,
      "input": "a < b",
      "output": "a < b",
      "input_codepoints": "U+0061 U+0020 U+003C U+0020 U+0062",
      "output_codepoints": "U+0061 U+0020 U+003C U+0020 U+0062",
      "status": "No selected invisible characters found",
      "before": {
        "json": "{\"text\":\"a < b\"}",
        "containsScriptEndPrefix": false,
        "escapedJson": "{\"text\":\"a \\u003C b\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      },
      "after": {
        "json": "{\"text\":\"a < b\"}",
        "containsScriptEndPrefix": false,
        "escapedJson": "{\"text\":\"a \\u003C b\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      }
    },
    {
      "label": "Plain control",
      "stage": "direct string",
      "mode": "keep",
      "enabled": true,
      "input": "AB",
      "output": "AB",
      "input_codepoints": "U+0041 U+0042",
      "output_codepoints": "U+0041 U+0042",
      "status": "No selected invisible characters found",
      "before": {
        "json": "{\"text\":\"AB\"}",
        "containsScriptEndPrefix": false,
        "escapedJson": "{\"text\":\"AB\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      },
      "after": {
        "json": "{\"text\":\"AB\"}",
        "containsScriptEndPrefix": false,
        "escapedJson": "{\"text\":\"AB\"}",
        "roundtrip": true,
        "method": "String boundary check, not browser execution"
      }
    }
  ]
}