Standalone, disposable, no backend, no production account linkage. Every credential this page creates is
local to this browser/device only and is never sent anywhere. Run each section in order, on each
device/browser you're testing. At the end, tap "Copy Report" and paste the result back for the findings memo.
0. Device/Browser Identification
1. Feature Detection
2. Gesture Requirement — automatic call on page load
This already ran automatically when the page loaded, before you clicked anything, to test whether a gesture is truly required.
3. Gesture Requirement — button-triggered call
4. Discoverable Credential Round-Trip
Creates a throwaway, harness-only credential (not linked to any DarcNode account), then attempts to authenticate with it using allowCredentials: [] — the exact discoverable-credential pattern ARC-0008 §9.2 specifies.
5. Conditional Mediation (Autofill)
6. Cancellation Handling
Tap the button above, then dismiss the biometric prompt (Escape, back button, or the Cancel option) as fast as you can — this records how the failure surfaces.
7. No-Credential Behavior
A WebAuthn request is still in flight — wait for it to resolve/reject before starting another. Buttons are disabled until then.
8. Session / Backgrounding
Step B: background this tab/app (switch apps, lock the screen, or minimize) for at least 15 seconds, then come back and tap below.
Report
(results will appear here as you run each section)