Tooling Pattern

Good Pattern

Explain local processing, avoid network requests, use external JavaScript under the site CSP, and show clear limitations.

Bad Pattern

Silent uploads, third-party scripts, hidden persistence, ambiguous disclaimers, or tools that facilitate unauthorized activity.

Review Notes

A tooling example should make privacy and processing boundaries visible. The reader should be able to tell whether data leaves the browser, whether state is stored, what limits apply, and what the tool does not claim to prove. Ambiguous tooling examples should not ship.