What this module is
The Ariada browser surface is an in-page overlay:
a self-contained shadow-DOM element injected by a bookmarklet (or by the companion
browser extension) that runs @ariada-org/core-browser on the current
document and renders a compact findings badge — no page navigation, no server call,
no account.
packages/core-browser. Every screenshot below is from
the end-to-end Playwright harness, not a design tool.
- Type
- In-page overlay injected via bookmarklet or extension content-script
- Where it lives
packages/core-browser— the WebAssembly-compatible in-browser adapter for the scan engine- What it runs
- The six OSS domain analyzers on the current document's DOM; cross-origin sub-resources are excluded (same-origin security model)
- Zero outbound calls
- Confirmed: zero network requests during scan (verified in harness — 2 requests total, all pre-scan page load)
- Bundle size
- 12 407 bytes (limit: 50 000 bytes) — PASS
- Status
- Built and test-covered; Chrome Web Store bookmarklet listing not yet published
Who uses it & why
| Role | How they use it | Value |
|---|---|---|
| Developer / QA engineer | Instant in-page check while browsing; no tool-switch needed | High — zero friction |
| Accessibility engineer | Overlay on any visited page across six domains, keyboard-navigable | High |
| Compliance reviewer | Spot-check a vendor page without installing a full extension | Medium-High |
| Non-technical user | One-drag bookmarklet install; plain badge with finding counts | Medium |
The browser surface is the lowest-friction entry point: one bookmarklet drag and the scanner is available on every page the user visits.
Distribution — free and open source
The browser surface and the scan engine it runs are free and open source under the EUPL-1.2 licence. There is no account, no upload, and no obligation to use the in-page overlay scan.
| Capability | Availability |
|---|---|
| In-page six-domain overlay scan | Free · open source |
| Keyboard-navigable shadow-DOM overlay | Free · open source |
| Zero outbound network calls during scan | Free · open source |
| Bookmarklet install — no account required | Free · open source |
Getting started
- Discover — bookmarklet drag from
ariada.orgor npm install. - First value — drag the bookmarklet once; click it on any page for an instant overlay.
- Habit — use during daily development and QA on any page you visit.
- Integrate — embed the
core-browserpackage in your own web application for in-app scan results.
Documentation & help — current state
- Bookmarklet install
- A one-liner drag-to-bookmarks-bar install is the target;
the bookmarklet generator is in
packages/core-browser/bookmarklet.ts. - Docs site
apps/docs(Astro Starlight) needs a "Browser surface" guide covering install → using the overlay → keyboard navigation → when to use the full extension.- Privacy note
- A prominent "runs locally — zero outbound calls" disclosure is recommended on the install page and in the overlay itself (verified in harness).
AI chat & digital-adoption helpers — plan
- Inline "explain this finding" button — calls a managed model only on user action; kept off the deterministic scan path.
- Overlay accessibility — the overlay already uses shadow DOM for style isolation; the AI call would also be scoped to the shadow root.
Screenshots — click any image to open it full size
From the end-to-end Playwright harness. Each thumbnail opens a full-size, zoomable overlay.
Assessment summary
Full assessment is in assessment.html. Headline: the overlay is keyboard-operable, shadow-DOM isolated, and generates zero outbound network calls. Open gap: the 375 px mobile viewport shows horizontal overflow when the overlay max-width of 420 px exceeds the viewport — a layout fix is the top follow-up.




