{
  "name": "Benign Limited-Host Extension",
  "version": "1.0",
  "manifest_version": 3,
  "description": "Has scripting + host permission only for site-a.test. Never granted access to victim.test.",
  "permissions": ["scripting", "tabs"],
  "host_permissions": ["http://site-a.test:8080/*"],
  "background": { "service_worker": "background.js" }
}