🛡️ VIYUH BDR — DLP Test Range · Category 4 · 1-by-1 · verified-status

Load BDR (v0.9.62+), enrolled. Each section simulates its destination via data-dlp-host (works only on localhost). PASTE: click 📋 Copy → click the box → ⌘V. TYPE: type the value (don't paste). UPLOAD: pick the file. After each → in-page alert + a detection on localhost:3000/bdr. Use the 🌐 real site when the range can't simulate it. Safe dummy values only.

Default posture: high-confidence (cards / SSN / secrets / any GenAI destination) = hard BLOCK (no "Proceed anyway"); medium-confidence (IBAN / MRN / passport / source-code / risky-upload destinations) = JUSTIFY (must type a logged reason to proceed — no silent bypass); typing / print / copy = soft warn (can't be un-done). Set mode: warn for monitor-only, where everything is proceed-able.

LIVE — fires on this range now REAL-SITE — live, but range can't fake it CONFIG-FIRST — set a policy, then test NOT WIRED — core built, no live hook yet

⚙️ Policy controls — POST to `:4004/api/org/global/config` (then reload the extension or wait for the next bundle)

If a button fails (CORS / backend down), run the shown curl instead — it prints in the toast.

⚙️ Policy controls — POST to :4004/api/org/__global__/config (then reload the extension or wait for the next bundle)

⚙️ Policy controls — POST to `:4004/api/org/global/config` (then reload the extension or wait for the next bundle)