Post #1988944

@matthiasott the "trust boundary" is you not installing the claude extension. that's why native messaging hosts have to specify extension IDs via allowed_origins. this is how it's supposed to work.