F32 zero-click chain — evil-poc client

Attacker origin:

idle — if you have a staging SSO cookie, this completes with no interaction.

Then: cross-origin PII read (F1)

waiting for token...