Chrome Extension Integration

The Chrome extension is the core component that enforces policies in the browser. This guide covers advanced configuration and management.

Extension Overview

The extension:

• Monitors AI platform interactions
• Enforces policies in real-time
• Reports events to dashboard
• Works offline with cached policies

Installation Options

Individual Installation

The extension is published on the Chrome Web Store as Containment AI (extension ID cfliledfjcblpjkeiokhhdadfcpekiog). Users install it directly:

1. Open the Containment AI listing on the Chrome Web Store
2. User clicks "Add to Chrome"
3. Extension connects automatically

MDM Push

Deploy via device management:

• Intune Setup
• Jamf Setup
• Google Workspace Setup

Group Policy (Windows)

Deploy via Windows GPO:

{
  "ExtensionInstallForcelist": {
    "Value": ["cfliledfjcblpjkeiokhhdadfcpekiog;https://clients2.google.com/service/update2/crx"]
  }
}

Configuration

Organization Settings

Configure at Integrations > Chrome Extension:

Setting	Description
Organization ID	Auto-assigned identifier
Update Channel	Stable, Beta, or Dev
Policy Cache Duration	How long policies cached offline
Heartbeat Interval	Health check frequency

Extension Behavior

Setting	Description	Default
Block UI Style	How blocks appear to users	Modal
Detect UI Style	How detections appear	Toast
Show Badge	Display alert count on icon	Yes
Sound Alerts	Play sound on block	No

Policy Sync

Setting	Description	Default
Sync Interval	How often to fetch updates	5 minutes
Offline Mode	Behavior when disconnected	Cache
Conflict Resolution	When policies conflict	Most restrictive

Advanced Configuration

Custom Messages

Customize user-facing messages:

Block Message

Your organization's AI usage policy prevents this action.
Policy: {policy_name}
Contact your administrator for assistance.

Detect Message

This content may violate policy: {policy_name}
This event has been recorded.

Corporate Notice

Professional

Display a notice on AI platforms:

1. Go to Integrations > Site Controls

2. Click Corporate Notice

3. Enter your message:

   AI Usage Notice: All interactions are monitored
   per company policy. Do not share confidential data.

4. Choose display style (banner, modal, etc.)

5. Save

Allowlist/Blocklist

Control where the extension operates:

Allowlist Mode

• Only enforce on listed platforms
• Useful for piloting

Blocklist Mode

• Enforce everywhere except listed
• Exclude internal tools

Monitoring

Health Dashboard

View extension health:

• Connected devices count
• Version distribution
• Error rates
• Sync status

Alerts

Get notified of issues:

• Devices disconnecting
• Version skew
• Sync failures
• Error spikes

Troubleshooting

Extension Not Working

1. Check Installation

   • Verify extension is installed
   • Confirm it's enabled
   • Check for conflicts

2. Check Connection

   • Click extension icon
   • Verify "Connected" status
   • Try "Reconnect" option

3. Check Policies

   • Open extension options
   • View cached policies
   • Force policy sync

4. Check Permissions

   • Extension needs site access
   • Verify in Chrome settings
   • Grant required permissions

Common Error Codes

Code	Meaning	Solution
E001	Not authenticated	Sign in again
E002	Network error	Check connectivity
E003	Policy sync failed	Wait and retry
E004	Invalid organization	Contact admin
E005	Extension outdated	Update extension

Logs

Access extension logs:

1. Right-click extension icon
2. Select "Options"
3. Click "Debug Logs"
4. Export for support

Updates

Automatic Updates

Extensions update automatically via Chrome.

Version Channels

• Stable: Production-ready
• Beta: Pre-release testing
• Dev: Experimental features

Forcing Updates

MDM can force specific versions:

{
  "ExtensionSettings": {
    "cfliledfjcblpjkeiokhhdadfcpekiog": {
      "minimum_version_required": "1.0.1"
    }
  }
}

Security

Permissions

Extension requests minimal permissions:

• activeTab - Current tab access
• storage - Save settings and cached policies
• alarms - Schedule periodic policy sync
• tabs - Detect navigation to supported AI surfaces

Data Handling

• On submit, the extension sends the prompt text over TLS to Containment.AI's policy-check service, which returns an allow/block decision before the prompt reaches the AI provider.
• The policy check does not store the full prompt. Only violation alert metadata is retained for the organization audit log: policy name, severity, violation message, and the matched term or pattern.
• Prompt content goes only to the policy-check service, solely for evaluation. It is never sold or shared with advertisers or data brokers.
• Sessions are stored in chrome.storage.local (per-device, not synced).

Code Security

• Signed by Containment.AI
• Built on Chrome MV3 with a minimal permission set
• Regular security audits

Related Topics

• Quick Start - Initial setup
• MDM Integration - Enterprise deployment
• Site Controls - Per-site configuration