• 23 New SOC Detection Patterns — SWIFT/BIC banking codes (3), CPT/HCPCS medical billing codes (11), and OT/ICS protocol patterns (9: Modbus, DNP3, OPC-UA). Brings total to 155 regex patterns.
• Firefox MV3 Support — Firefox 142+ via Manifest V3 with browser_specific_settings.gecko.
• Browser compatibility shim — src/browser-compat.js aliases browser.* to chrome.* for cross-browser support. No-op on Chrome.
• Dynamic injection fix — Background.js content script file list corrected to match manifest.
• 530 tests — 518 passing + 12 skipped (ML perf tests). All green.

AegisGate Lens is a privacy-first browser extension that detects sensitive data in AI chat prompts before you hit send. It runs 100% on-device — no prompt text, URLs, or page content ever leaves your browser.

When you type into an AI chat (ChatGPT, Claude, Gemini, Copilot, etc.), Lens scans your prompt in real-time (debounced 250ms) and shows a banner if it detects:

1. PII — SSN, email, phone, credit cards, medical record numbers, CPT/HCPCS codes, driver's license, passport, bank accounts, SWIFT/BIC codes, international IDs (69 patterns)
2. Secrets — API keys (AWS, GitHub, OpenAI, Stripe, Slack), OAuth tokens, private keys, database credentials (41 patterns)
3. XSS — Cross-site scripting payloads (12 patterns)
4. Compliance — OWASP LLM Top 10, MITRE ATLAS, EU AI Act, NIST CSF, ISO 27001, CCPA, LGPD, PIPEDA, POPIA (24 patterns)
5. OT/ICS Protocols — Modbus, DNP3, OPC-UA control manipulation (9 patterns)
6. ML Threat — Adversarial prompt injection detection via Char CNN-BiLSTM neural network running in pure JavaScript (1 model, ~5-50ms)

The banner lets you Cancel send, Edit manually, or Send anyway. You can also dismiss false positives for 24 hours.

• Zero telemetry by default. No prompt text, no URLs, no page content, no PII, no keystroke timing, no mouse movement, no session IDs, no IP addresses ever collected.
• 100% on-device processing. All detection runs in the browser content script.
• Opt-in anonymous telemetry only. If the user explicitly enables it, only hashed domain names and rounded timestamps are sent — never prompt content.
• 12 privacy non-negotiables documented in docs/PRIVACY-POLICY.md and docs/SECURITY.md.
• data_collection_permissions in the manifest declares "required": ["none"] — no data collection is required for the extension to function.