Chrome companion / authenticated products

Capture beyond the login wall.

Start at login and the companion explores the public auth graph, returns to wait while you sign in, then resumes automatically across the authenticated app. Start inside an existing session and it begins with the signed-in graph. If you enable the separate native-state pass, disclosures, popovers, and fragments are captured and restored; tabs, forms, and uncertain actions stay in your hands. Reuse a prior export to skip unchanged routes. MFA and CAPTCHA remain entirely user-controlled.

SHA-256
e292fd42e5b074b484cf0ab66f6f5a429dec09b2e18e616bb4e3f494ce2cd307
Permissions
activeTab, debugger, downloads, sidePanel, storage, unlimitedStorage, webNavigation
01Login surfaceOr an existing session
02Safe auth handoffProvider pages skipped
03Post-login graphApproved app origins
Installation / Chrome Manifest V3

Three minutes. No account connection.

  1. 01
    Download and unzip

    Download the companion archive and unzip it somewhere you will keep it.

  2. 02
    Load the extension

    Open chrome://extensions, enable Developer mode, choose Load unpacked, and select the unzipped folder.

  3. 03
    Open the side panel and start

    Click the extension icon to keep Site DNA beside the selected tab. Choose a role and capture budget, optionally load a prior export, then start. It stays open through navigation, manual credentials/MFA/CAPTCHA, and the signed-in graph.

Authority boundary

Automate only what can be restored.

The extension navigates bounded, filtered page links and a narrow set of local controls with explicit state ownership. It records restoration evidence and leaves forms, credentials, theme preferences, billing, destructive actions, and uncertain controls entirely to you.

Credentials stay in Chrome

No cookie API, no password or OTP access, no form-value extraction, no CAPTCHA inspection, and no page images. The companion attaches only for viewport emulation and rendered DOM/style measurements on approved app origins.

Bounded and reversible

One Start covers pre-login discovery, the manual authentication wait, and post-login DFS. Only native disclosures, native popovers, and fragments may be changed automatically, then restored without dispatching app click handlers. Interaction timing otherwise records only actions you perform.

Preview before anything leaves

Structured measurements live in extension-local storage. Replace or omit text, normalize route IDs, remove private terms or origins, inspect the exact JSON, then explicitly export. Additional role exports merge without replacing prior evidence.

Update path / changelog

Replace the unpacked folder, then reload.

Download the new archive, verify its SHA-256 above, replace the old unpacked files, and click Reload on chrome://extensions. Extension-local evidence remains in Chrome unless you remove the extension or use its reset controls.

  1. 0.7
    Reliable recovery

    Retry failed safe routes from the ledger, retain failure reasons, record per-route elapsed time, and keep partial exports available after interruption.

  2. 0.6
    Operational evidence

    Added runtime health, environment probes, source instrumentation, reviewed disposable-account plans, and exact privacy previews.