chrome-extension-6.46.1-download.png / .svg — WITHDRAWN 2026-09-25

What they were: QR images encoding the download URL of the chrome-boss-agent-extension-6.46.1.zip asset on GitHub release chrome-extension-v6.46.0.

Why they were withdrawn: 6.46.1 pre-dates the extension security review (../reports/CHROME_EXTENSION_SECURITY_REVIEW_2026-09-02.md) and carries the C1 (<all_urls> content scripts) and C2 (*.run.app / localhost host permissions) findings. Review §10 (2026-09-25) withdraws every pre-6.48.1 artifact; a QR code that installs one is install material for a withdrawn build.

Where the files went: history/chrome-extension-6.46.1-download.png (sha256 1963134beb3a62c3b2c0e8cdef5dd57856bf656ae667a6181d02091c94d5efe2) and history/chrome-extension-6.46.1-download.svg (sha256 eae4d5c83975411148866bbc304998b7909779c0e15d7679ce154eddf3522e44), bytes unchanged. Do not embed them anywhere.

Where the gated download path is: ../EXTENSION_DOWNLOAD.md (6.48.1 only).