This is chunk C (script + how-it-works) of the Cobblr Labs on-chain mini site, stored on Xahau testnet account rQps6…DiQ1. Inert on its own. Assembled site: pwa.exposed/rBXkj…BQky.
ledger_entry app_loader of accounts B and C.The pwa.exposed portal serves every page in a sandbox on its own subdomain with Cross-Origin-Resource-Policy: same-origin, X-Frame-Options: DENY and no CORS headers. So fetch(), <script src>, stylesheets and iframes from another account's page are all blocked. Reading the ledger directly works.