Canvas 2D / Blink C++ Source Audit
Order
structured written technical report with specific source references, file names, functions and relevant line numbers, severity ratings, supporting evidence, prioritized recommendations, and a practical validation checklist. The report must clearly distinguish confirmed findings from potential risks or issues requiring further testing. Correctly implemented components should also be identified.
Exclusions:
No source-code modifications, full Chromium rebuild, runtime testing beyond the supplied evidence, or unrelated WebGL/AudioContext audit. Any additional work requires separate agreement.
Acceptance:
The report will be reviewed against the agreed scope, evidence quality, and completeness of the required deliverables.
A finding of no confirmed defects does not itself constitute failure if the agreed review was performed and documented adequately.
