# web-send.org — W3C Origin Isolation & Tor Browser Privacy RFC Specification Archive
> Independent technical specification archive preserving Web Introducer, Capability URLs, cross-origin state partitioning, and Tor Browser `window.name` isolation research (`https://web-send.org/`).

## Editorial Scope & Non-Affiliation
- Focus: Cross-origin browser state partitioning (Tor First-Party Isolation, Chrome CHIPS & Storage Partitioning, Safari ITP), `window.name` clearing invariants, CORS / `postMessage` / COOP / COEP isolation policies, and Capability URL / Web Introducer architecture (2010–2026).
- Provenance: Independent archival specification site. Not affiliated with, endorsed by, or an official publication of the World Wide Web Consortium (W3C), The Tor Project, Google, or UC Berkeley Law. Full provenance disclosure is consolidated at `/about/#historical-disclosure`.

## Canonical Specification Routes
- `/` — Main RFC Specification Index, Interactive State Isolation Sandbox, and Protocol Comparison Matrix (Tor FPI vs. Chrome CHIPS vs. Capability URLs)
- `/introducer/` — Web Introducer & Waterken Capability URL Architecture (2010–2026 Spec & W3C Web & TV Trace)
- `/bookmark-protocol/` — Bookmark Introducer & 19-Criteria Link Sharing Privacy Scorecard (Restored `/bookmark` and `/features.html` Lineage)
- `/tor-window-name/` — Tor Browser `window.name` Isolation, Click-Navigation Side Channels & HTML Living Standard Reset
- `/isolation-sandbox/` — Interactive CORS, `postMessage`, Storage Partitioning & COOP/COEP Policy Workbench
- `/berkeley-privacy-symposium/` — Privacy Standardization Lineage, UC Berkeley Law BCLT Symposium & QCon 2010 Trace
- `/about/` — Archival Charter, Editorial Contact (`editorial@web-send.org`), and Historical Disclosure Hub (`/about/#historical-disclosure`)

## Core Technical Invariants
- Partition Key Tuple: `(top-level site, frame site)` for Cookies (CHIPS `Partitioned`), IndexedDB, Cache API, and Service Workers; Tor FPI keys all state strictly by first-party URL bar domain.
- `window.name` Cross-Origin Reset: Tor Browser clears `window.name` on cross-origin navigation unless explicitly white-listed; modern HTML Living Standard clears `window.name` on browsing context group switches triggered by cross-origin navigation without `opener`.
- Capability URL Isolation: Secret unguessable bearer capability placed in URI `#fragment` (never sent in HTTP `Referer` or server access logs), paired with `postMessage` origin verification.