chrome-extension-6.47.0-download.png / .svg — WITHDRAWN 2026-09-25

What they were: QR images encoding the download URL of the chrome-boss-agent-extension-6.47.0.zip asset on GitHub release chrome-extension-v6.47.0 (published 2026-08-28). docs/EXTENSION_DOWNLOAD.md embedded the .svg.

Why they were withdrawn: 6.47.0 is the build the 2026-09-02 security review examined (../reports/CHROME_EXTENSION_SECURITY_REVIEW_2026-09-02.md): it ships <all_urls> content scripts with passive selection capture (C1) and *.run.app / localhost host permissions (C2). Review §10 (2026-09-25) withdraws every 6.47.0 artifact; install is permitted for 6.48.1 only, and no 6.48.1 GitHub release exists yet (an owner action), so there is no URL for a replacement QR code.

Where the files went: history/chrome-extension-6.47.0-download.png (sha256 86ecdde40b0425929e43ee03145548962c7600ac5094b6ac020912c4dbd7c50b) and history/chrome-extension-6.47.0-download.svg (sha256 e581b28f27c2cc897635d2da4855d1b44b12cf59c9d01bb0bc32635a89d486ee), bytes unchanged. Do not embed them anywhere.

Where the gated download path is: ../EXTENSION_DOWNLOAD.md (6.48.1 only).