{
  "schemaVersion": 1,
  "type": "resource",
  "id": "oversight-templates",
  "evaluation": {
    "reviewedOn": "2026-10-19",
    "status": "checked",
    "modes": [
      "http",
      "browser",
      "source-review"
    ],
    "summary": "The Framer filter worked, and activating Cherry created a preview iframe with the expected destination. Child-frame behavior, platform integration, paid access and copied agent workflows remain untested.",
    "reportUrl": "/design-evaluations/resource-oversight-templates.json",
    "identity": {
      "target": "https://supply.madebyoversight.com/",
      "version": "Unversioned public page observed 2026-10-19",
      "integrity": "SHA-256 597c301548f12068b7d253a2ddf5f716de18dd36b77895786883096d220c29aa of one initial HTML response (346628 bytes). This does not fingerprint the entire application or its dependencies."
    },
    "environment": [
      "Windows; Chrome 155.0.8059.82 headless via Playwright, fresh isolated contexts with a 1365 × 900 viewport.",
      "Reduced motion requested. GET/HEAD requests allowed; other methods and WebSocket connections blocked.",
      "No owner browser profile, account, credentials, purchase, upload, private fixture or service write."
    ],
    "tests": [
      {
        "name": "Platform filter",
        "mode": "browser",
        "method": "Select the observed Framer link in the catalog.",
        "result": "pass",
        "observation": "The filtered public list showed 12 preview labels."
      },
      {
        "name": "Preview iframe destination",
        "mode": "browser",
        "method": "Open Cherry from the filtered list.",
        "result": "pass",
        "observation": "A preview iframe appeared with src https://ovo-cherry.framer.website/. Its child-frame content and functionality were not asserted."
      },
      {
        "name": "Template adoption",
        "mode": "browser",
        "method": "Copy, purchase, download or deploy a template.",
        "result": "not-run",
        "observation": "No adoption or paid workflow was performed."
      }
    ],
    "security": {
      "scope": "One platform filter and an external iframe preview, with passive request observations.",
      "findings": [
        {
          "level": "info",
          "basis": "observed",
          "title": "Preview crosses to a hosted template site",
          "detail": "The Cherry preview loads a Framer-hosted origin. Treat preview browsing as a separate site's code execution in the browser, not proof of what a copied template will request later."
        },
        {
          "level": "caution",
          "basis": "advice",
          "title": "Review agent-facing material",
          "detail": "Check any copied prompt or command for file access, network calls and dependencies before running it in a project."
        }
      ],
      "limits": [
        "Passive public-page observations and the stated bounded sample only; no exploitation, authenticated authorization, backend, retention or comprehensive dependency audit.",
        "Request blocking changes application behavior; no secure/safe certification is implied."
      ]
    },
    "practicalCaveats": [
      "Verify the selected template's platform and license rather than assuming the whole catalog shares one set of conditions.",
      "A preview can help judge layout; it does not demonstrate account, form or deployment correctness."
    ],
    "limits": [
      "No account, favorite, purchase, copy, package execution or deployment.",
      "Only one platform filter and one template preview were sampled.",
      "Iframe creation and its destination were observed; child-frame response status, rendered content and interactive behavior were not verified."
    ],
    "sources": [
      {
        "label": "Template library",
        "url": "https://supply.madebyoversight.com/"
      },
      {
        "label": "Sampled Cherry preview",
        "url": "https://ovo-cherry.framer.website/"
      }
    ]
  }
}