Unmodified, store-signed Bitwarden extension builds, promoted here only after the vw-guard canary validated them against our Vaultwarden servers. Browsers are pointed at this channel via enterprise policy, so they never auto-update to an untested release.
/GREEN - plain-text version marker.
policies.json in the app's distribution/ dir:
{"policies":{"ExtensionSettings":{
"{446900e4-71c2-419f-a6a7-df9c091e268b}":{
"installation_mode":"force_installed",
"install_url":"https://ext.ekaii.fr/firefox/bitwarden-green.xpi",
"updates_disabled":true}}}}
Off-store force-install from a private update_url only applies on managed (domain / Entra / MDM) machines. On an unmanaged home Chrome/Edge this policy is ignored - use canary-as-alert + disable the extension's auto-update instead, updating manually only when green.
Personal / family project. Not related to Dedale (bitwarden.softwareclub.app). Repo: forgejo.ekaii.fr/exo/vw-guard.