Complete synthetic encrypted API example
This example contains no third-party site, endpoint, key, or content. All hosts use the reserved .invalid namespace.
What it demonstrates
Separate site, API, and CDN origins with strict HTTPS/origin validation.
A complete
rotating_sbox_json decoder with five synthetic keys and explicit envelope validation.A lightweight initial chapter plan followed by synchronous resolution of only the selected IDs.
Atomic failure for changed IDs, empty chapters, malformed JSON, invalid encryption, or media outside the declared CDN.
The alternative AES/CBC
IV_HEX:CIPHERTEXT_HEX contract supported by the native parser.Files
- plugin.json
- browser/download_target.js
- Decoded work fixture
- Decoded chapter fixture
- Detailed walkthrough
The values are documentation fixtures, not credentials. A real plugin must be mapped and validated against an authorized source.