All network activity flows exclusively to Bloomberg's first-party infrastructure ([domain withheld] for uploads and BBCLIPSESSION cookie management; [domain withheld] for note viewing links). The webRequest blocking listener (:397-453) is opt-in behind a checkbox ('Enable link redirects to Terminal') and only intercepts requests to a dynamically-fetched list of financial research broker domains ([domain withheld], [domain withheld], etc.) — consistent with Bloomberg Terminal's compliance-disclaimer flow before viewing broker research. There is a notable manifest mismatch: the bundled ZIP contains a Manifest V2 extension using broad '<all_urls>' permission, while the published CWS listing now shows Manifest V3 with explicit host_permissions scoped to [domain withheld] and the same broker domains; this most likely reflects the CWS listing having been migrated to MV3 while this version (1.0.23, 492 days stale) was never republished, not intentional permission creep. The ML model over-triggered on the <all_urls> permission triplet and the high innerHTML count (jQuery-driven UI templating), both of which are false-positive indicators for this class of enterprise content-clipper extension.