Browser agent (extension)

Download, install, and register Chrome workstations — visibility-first GenAI logging per machine

Customer POC framework

Lists Chrome extension agents registered per machine.

Download for customers

Distribute the extension from AI Guard (not from a developer folder). Unzip, then load unpacked in Chrome.

After code changes, run .\scripts\package-browser-extension.ps1 to refresh the ZIP.

Download and unzip ai-guard-browser-extension.zip.
Open chrome://extensions → enable Developer mode.
Click Load unpacked → select the unzipped folder.
Set asset / machine name (required): pin AI Guard (puzzle icon) → click its toolbar icon → enter name → Save. Alternatives: right‑click the extension icon → Set asset / machine name…, or on first install the full settings tab opens automatically (v1.1.2+).
The Extensions Details page only shows metadata (ID, permissions) — it does not include an editable asset name. If you see Extension options at the bottom of Details, you can use that too; otherwise use the toolbar popup.
Set Console URL to https://your-ai-guard-host and agent token: lab-local-dev-token
Leave policy on Monitor — log only for the visibility POC; move to Warn/Block later.
Visit OpenAI, Claude, Grok, Sarvam, Gemini, etc. — yellow visibility banner + logs in extension popup & below.

GenAI site traffic (ChatGPT, Claude, …) goes straight to the internet as usual. The extension is not an HTTP proxy and does not sit in the SSL path.
Telemetry only: small JSON POSTs from the browser to your AI Guard URL (/api/agents/extension-events). Allow outbound HTTPS from workstations to the AI Guard host.
No inbound firewall rule required for the extension.
If a corporate proxy does SSL inspection, allowlist the AI Guard API URL so POSTs are not blocked or broken.
Optional: use MDM/GPO to force-install the extension in production (Chrome enterprise policies).

Full network notes: browser-extension/NETWORK.md

No extension agents yet. Install the extension, set a machine name, and open a GenAI site.