{
  "schemaVersion": 1,
  "type": "resource",
  "id": "oversight-sections",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "checked",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "The section filter changed the public list, and activating Transmission created a preview iframe with the expected destination. Child-frame behavior, copying, agent execution and paid access remain untested.",
    "reportUrl": "/design-evaluations/resource-oversight-sections.json",
    "identity": {
      "target": "https://supply.madebyoversight.com/sections",
      "version": "Unversioned public page observed 2026-10-19",
      "integrity": "SHA-256 385e85c09c7345b8aa9a857c8bf9471ef53d5cd5e006076afc5f6f5fa02aa4d1 of one initial HTML response (144933 bytes). This does not fingerprint the entire application or its dependencies."
    },
    "environment": [
      "Windows; Chrome 155.0.8059.82 headless via Playwright, fresh isolated contexts with a 1365 × 900 viewport.",
      "Reduced motion requested. GET/HEAD requests allowed; other methods and WebSocket connections blocked.",
      "No owner browser profile, account, credentials, purchase, upload, private fixture or service write."
    ],
    "tests": [
      {
        "name": "Collection filter",
        "mode": "browser",
        "method": "Select Studio Originals and count the visible preview controls.",
        "result": "pass",
        "observation": "The sampled list changed from 41 previews to 10."
      },
      {
        "name": "Preview iframe destination",
        "mode": "browser",
        "method": "Open Transmission from the filtered list.",
        "result": "pass",
        "observation": "A preview iframe appeared with src https://supply.madebyoversight.com/section-previews/transmission/index.html. Its child-frame content and functionality were not asserted."
      },
      {
        "name": "Copy and implementation",
        "mode": "browser",
        "method": "Copy a section or run its agent instructions in a project.",
        "result": "not-run",
        "observation": "Only the public preview was opened; no instructions or source were executed."
      }
    ],
    "security": {
      "scope": "Public catalog filtering, an iframe preview and passive network observations.",
      "findings": [
        {
          "level": "info",
          "basis": "observed",
          "title": "Preview loads a separate document",
          "detail": "The Transmission example loaded in a same-publisher iframe; the catalog also requested PostHog-related assets. This does not establish what copied section code does in a different application."
        },
        {
          "level": "caution",
          "basis": "advice",
          "title": "Treat copied instructions as reviewable input",
          "detail": "Inspect any prompt, command, package or remote URL before giving copied material to an agent with file or network access."
        }
      ],
      "limits": [
        "Passive public-page observations and the stated bounded sample only; no exploitation, authenticated authorization, backend, retention or comprehensive dependency audit.",
        "Request blocking changes application behavior; no secure/safe certification is implied."
      ]
    },
    "practicalCaveats": [
      "Check each item's Free or Pro access label and reuse terms.",
      "A preview demonstrates presentation; it does not verify the resulting implementation's accessibility or security."
    ],
    "limits": [
      "No copy, account, purchase, package installation or generated-site workflow.",
      "No audit of all sections, iframe isolation or downstream dependencies.",
      "Iframe creation and its destination were observed; child-frame response status, rendered content and interactive behavior were not verified."
    ],
    "sources": [
      {
        "label": "Section library",
        "url": "https://supply.madebyoversight.com/sections"
      },
      {
        "label": "Sampled Transmission preview",
        "url": "https://supply.madebyoversight.com/section-previews/transmission/index.html"
      }
    ]
  }
}