No server in the middle: how Tracepack moves evidence between two browser tabs

Part 2 of the Local-First Evidence series. Part 1 covered why routing sensitive exports through a third-party server is risky. This post is the mechanics: how the handoff and the hashing actually work