# AI extension site-access review

manifest.review-only.json is an inert manifest illustration. It includes reserved invalid hosts and no code. Do not install it or treat it as a real vendor package. It makes no network requests or browser changes.

Compare its concrete required/optional host scopes with the current extension being reviewed. Complete site-access.csv and the decision record with non-secret administrative evidence. An installed extension’s implementation and data recipients require their own review.

## Guide and sources

Canonical guide: https://aona.ai/resources/guides/ai-browser-extension-company-data/
Source review: 2026-09-21
- Chrome for Developers: Declare permissions: https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions