<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Implementing Browser Security Controls

## Chrome Policy Registry Keys

```powershell
# Block all extensions except whitelist
reg add "HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist" /v 1 /t REG_SZ /d "*" /f

# Force Safe Browsing
reg add "HKLM\SOFTWARE\Policies\Google\Chrome" /v SafeBrowsingProtectionLevel /t REG_DWORD /d 2 /f

# Block dangerous downloads
reg add "HKLM\SOFTWARE\Policies\Google\Chrome" /v DownloadRestrictions /t REG_DWORD /d 1 /f
```

## Extension Audit

```powershell
Get-ChildItem "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Extensions" -Directory
```

## Agent Script

```bash
node agent.js audit-extensions --profile "/path/to/Chrome/User Data/Default"
node agent.js generate-policy --browser chrome
node agent.js check-compliance --profile "/path/to/Chrome/User Data/Default"
```
