⚠️ This page MUST be opened from a real https:// origin (not file:// and not http://) to reproduce the mixed-content + Chrome PNA scenario the hosted dashboard faces. See README-mac-test.md for how to host it over https. If you open it via file://, the WSS test may pass trivially and won't prove the real cross-origin case. Watch the browser DevTools console for “Mixed Content” or “Private Network Access” errors — those are the failure signatures we care about (esp. in Safari).