diff --git a/isolated-contexts.html b/isolated-contexts.html
index 4885459..d2fdfed 100644
--- a/isolated-contexts.html
+++ b/isolated-contexts.html
@@ -6,7 +6,7 @@
   <link href="https://www.w3.org/StyleSheets/TR/2021/cg-draft" rel="stylesheet">
   <meta content="Bikeshed version 6270e4735, updated Tue Aug 6 12:12:30 2024 -0700" name="generator">
   <link href="https://wicg.github.io/isolated-web-apps/isolated-contexts" rel="canonical">
-  <meta content="35c579b99d9d31d837a08b0c468ca7671c6d68e8" name="revision">
+  <meta content="ee2fccba3cb7728021d08d40f2bc04acd4b84d48" name="revision">
   <meta content="dark light" name="color-scheme">
   <link href="https://www.w3.org/StyleSheets/TR/2021/dark.css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css">
 <style>/* Boilerplate: style-autolinks */
@@ -998,11 +998,16 @@ <h3 class="heading settled" data-level="3.2" id="monkey-html"><span class="secno
 and some algorithms used in combination with those defined in <a href="#monkey-csp">§ 3.1 Content Security Policy</a> to define characteristics of the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object">environment settings object</a>. These characteristics will be examined from <a data-link-type="biblio" href="#biblio-webidl" title="Web IDL Standard">[WEBIDL]</a> when determining whether or not a given IDL construct is exposed on
 the associated <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global" id="ref-for-concept-settings-object-global">global object</a>.</p>
    <h4 class="heading settled" data-level="3.2.1" id="html-integrity"><span class="secno">3.2.1. </span><span class="content">Integrity</span><a class="self-link" href="#html-integrity"></a></h4>
-   <p>A <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group①">browsing context group</a> has an <dfn class="dfn-paneled" data-dfn-for="browsing context group" data-dfn-type="dfn" data-export data-lt="integrity origin" id="browsing-context-group-integrity-origin"> integrity origin</dfn>, which is an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin①">origin</a> or <code>null</code>.</p>
-   <p>A <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group②">browsing context group</a> has an <dfn class="dfn-paneled" data-dfn-for="browsing context group" data-dfn-type="dfn" data-export data-lt="integrity verification algorithm" id="browsing-context-group-integrity-verification-algorithm"> integrity verification algorithm</dfn>, which is <code>null</code> or an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#implementation-defined" id="ref-for-implementation-defined">implementation-defined</a> algorithm that accepts a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#fetch-params-request" id="ref-for-fetch-params-request">request</a> and a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a>, and returns a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#boolean" id="ref-for-boolean①">boolean</a>. A <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group③">browsing context group</a>'s <a data-link-type="dfn" href="#browsing-context-group-integrity-verification-algorithm" id="ref-for-browsing-context-group-integrity-verification-algorithm">integrity verification algorithm</a> MUST be non-null if its <a data-link-type="dfn" href="#browsing-context-group-integrity-origin" id="ref-for-browsing-context-group-integrity-origin">integrity origin</a> is non-null.</p>
-   <p class="note" role="note"><span class="marker">Note:</span> A typical <a data-link-type="dfn" href="#browsing-context-group-integrity-verification-algorithm" id="ref-for-browsing-context-group-integrity-verification-algorithm①">integrity verification algorithm</a> might verify that a
+   <p>An <dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="integrity-verification-algorithm">integrity verification algorithm</dfn> is an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#implementation-defined" id="ref-for-implementation-defined">implementation-defined</a> algorithm that accepts a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#fetch-params-request" id="ref-for-fetch-params-request">request</a> and a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response">response</a>, and returns a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#boolean" id="ref-for-boolean①">boolean</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> A typical <a data-link-type="dfn" href="#integrity-verification-algorithm" id="ref-for-integrity-verification-algorithm">integrity verification algorithm</a> might verify that a
 response body hashes to an expected value, or that it originated from a known
 bundle of resources.</p>
+   <p>A <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent">user agent</a> holds an <dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="origin-integrity-verification-map">origin integrity verification map</dfn>,
+which is a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ordered-map" id="ref-for-ordered-map">map</a> of <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-tuple" id="ref-for-concept-origin-tuple">tuple origins</a> to <a data-link-type="dfn" href="#integrity-verification-algorithm" id="ref-for-integrity-verification-algorithm①">integrity verification algorithms</a>.</p>
+   <p class="note" role="note"><span class="marker">Note:</span> How user agents populate the <a data-link-type="dfn" href="#origin-integrity-verification-map" id="ref-for-origin-integrity-verification-map">origin integrity verification map</a> is
+outside the scope of this specification, which is focused on the properties
+needed to establish integrity and isolation. <a href="https://github.com/WICG/isolated-web-apps/">Isolated Web Apps</a> provide one possible implementation by basing this map on the set of installed
+Isolated Web Apps.</p>
    <h4 class="heading settled" data-level="3.2.2" id="html-environment-properties"><span class="secno">3.2.2. </span><span class="content">Environment Settings Object properties</span><a class="self-link" href="#html-environment-properties"></a></h4>
    <div class="algorithm" data-algorithm="environment settings object mitigates injection"> An <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object①">environment settings object</a> is said to <dfn class="dfn-paneled" data-dfn-for="environment settings object" data-dfn-type="dfn" data-export data-lt="meaningfully mitigate injection attacks" id="environment-settings-object-meaningfully-mitigate-injection-attacks">meaningfully mitigate injection
 attacks</dfn> if its <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-policy-container" id="ref-for-concept-settings-object-policy-container">policy container</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#policy-container-csp-list" id="ref-for-policy-container-csp-list">CSP list</a> <a data-link-type="dfn" href="#csp-list-meaningfully-mitigate-injection-attacks" id="ref-for-csp-list-meaningfully-mitigate-injection-attacks①"> meaningfully mitigates injection attacks</a>. </div>
@@ -1013,30 +1018,26 @@ <h4 class="heading settled" data-level="3.2.2" id="html-environment-properties">
    <div class="algorithm" data-algorithm="environment settings object is an isolated context">
      An <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object③">environment settings object</a> <var>environment</var> is an <dfn class="dfn-paneled" data-dfn-type="dfn" data-export id="isolated-context">isolated context</dfn> if the following algorithm returns <code>true</code>: 
     <ol>
-     <li data-md>
-      <p>Let <var>browsing context group</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group④">browsing context group</a> that <var>environment</var> belongs to.</p>
      <li data-md>
       <p>If <var>environment</var> does not <a data-link-type="dfn" href="#environment-settings-object-meaningfully-mitigate-injection-attacks" id="ref-for-environment-settings-object-meaningfully-mitigate-injection-attacks">meaningfully
 mitigate injection attacks</a>, return <code>false</code>.</p>
      <li data-md>
-      <p>If <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-cross-origin-isolated-capability" id="ref-for-concept-settings-object-cross-origin-isolated-capability①">cross-origin isolated capability</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#cross-origin-isolation-concrete" id="ref-for-cross-origin-isolation-concrete">concrete</a>, return <code>false</code>.</p>
+      <p>If <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-cross-origin-isolated-capability" id="ref-for-concept-settings-object-cross-origin-isolated-capability①">cross-origin isolated capability</a> is
+not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#cross-origin-isolation-concrete" id="ref-for-cross-origin-isolation-concrete">concrete</a>, return <code>false</code>.</p>
      <li data-md>
       <p>If <var>environment</var> does not <a data-link-type="dfn" href="#environment-settings-object-mitigate-ui-redressing-attacks" id="ref-for-environment-settings-object-mitigate-ui-redressing-attacks">mitigate UI
 Redressing attacks</a>, return <code>false</code>.</p>
      <li data-md>
-      <p>If <var>browsing context group</var>’s <a data-link-type="dfn" href="#browsing-context-group-integrity-origin" id="ref-for-browsing-context-group-integrity-origin①">integrity
-origin</a> is null, return <code>false</code>.</p>
-     <li data-md>
-      <p>Let <var>integrity origin</var> be <var>browsing context group</var>’s <a data-link-type="dfn" href="#browsing-context-group-integrity-origin" id="ref-for-browsing-context-group-integrity-origin②">integrity origin</a>.</p>
+      <p>Let <var>origin</var> be <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin①">origin</a>.</p>
      <li data-md>
-      <p>If <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin②">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin">same origin</a> with <var>integrity
-origin</var>, return <code>false</code>.</p>
+      <p>If the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent①">user agent</a>'s <a data-link-type="dfn" href="#origin-integrity-verification-map" id="ref-for-origin-integrity-verification-map①">origin integrity verification map</a>[<var>origin</var>]
+does not <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-exists" id="ref-for-map-exists">exist</a>, return <code>false</code>.</p>
      <li data-md>
       <p>Return <code>true</code>.</p>
     </ol>
    </div>
    <h3 class="heading settled" data-level="3.3" id="monkey-fetch"><span class="secno">3.3. </span><span class="content">Fetch</span><a class="self-link" href="#monkey-fetch"></a></h3>
-   <p>In Fetch, we’ll use the <a data-link-type="dfn" href="#browsing-context-group-integrity-verification-algorithm" id="ref-for-browsing-context-group-integrity-verification-algorithm②">integrity verification algorithm</a> defined in <a href="#html-integrity">§ 3.2.1 Integrity</a> to verify that responses have the expected contents.</p>
+   <p>In Fetch, we’ll use the <a data-link-type="dfn" href="#integrity-verification-algorithm" id="ref-for-integrity-verification-algorithm②">integrity verification algorithm</a> defined in <a href="#html-integrity">§ 3.2.1 Integrity</a> to verify that responses have the expected contents.</p>
    <h4 class="heading settled" data-level="3.3.1" id="fetch-verify-response"><span class="secno">3.3.1. </span><span class="content">Verify the integrity of a response</span><a class="self-link" href="#fetch-verify-response"></a></h4>
    <div class="algorithm" data-algorithm="verify the integrity of a response">
      To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="verify-the-integrity-of-a-response">verify the integrity of a response</dfn> given a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#fetch-params-request" id="ref-for-fetch-params-request①">request</a> <var>request</var> and a <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response" id="ref-for-concept-response①">response</a> <var>response</var>, run these steps. Possible return values are
@@ -1044,13 +1045,10 @@ <h4 class="heading settled" data-level="3.3.1" id="fetch-verify-response"><span
     <ol>
      <li>Let <var>client</var> be <var>request</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-client" id="ref-for-concept-request-client">client</a>.
      <li>If <var>client</var> is <code>null</code>, return "<code>not applicable</code>".
-     <li> Let <var>browsing context group</var> be the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group⑤">browsing context group</a> that <var>client</var> belongs to. 
-     <li> Let <var>integrity origin</var> be <var>browsing context group</var>’s <a data-link-type="dfn" href="#browsing-context-group-integrity-origin" id="ref-for-browsing-context-group-integrity-origin③">integrity origin</a>. 
-     <li> Let <var>integrity verification algorithm</var> be <var>browsing context group</var>’s <a data-link-type="dfn" href="#browsing-context-group-integrity-verification-algorithm" id="ref-for-browsing-context-group-integrity-verification-algorithm③">integrity verification algorithm</a>. 
-     <li> If <var>integrity origin</var> or <var>integrity verification algorithm</var> are <code>null</code>,
-    return "<code>not applicable</code>". 
-     <li> If <var>request</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a> is not <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/browsers.html#same-origin" id="ref-for-same-origin①">same origin</a> with <var>integrity
-    origin</var>, return "<code>not applicable</code>". 
+     <li>Let <var>origin</var> be <var>request</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-request-origin" id="ref-for-concept-request-origin">origin</a>.
+     <li> If the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent②">user agent</a>'s <a data-link-type="dfn" href="#origin-integrity-verification-map" id="ref-for-origin-integrity-verification-map②">origin integrity verification map</a>[<var>origin</var>]
+    does not <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-exists" id="ref-for-map-exists①">exist</a>, return "<code>not applicable</code>". 
+     <li> Let <var>integrity verification algorithm</var> be the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent③">user agent</a>'s <a data-link-type="dfn" href="#origin-integrity-verification-map" id="ref-for-origin-integrity-verification-map③">origin integrity verification map</a>[<var>origin</var>]. 
      <li> If <var>response</var>’s <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-response-body" id="ref-for-concept-response-body">body</a> is <code>null</code>, return "<code>invalid</code>". 
      <li> If the result of executing <var>integrity verification algorithm</var> given <var>request</var> and <var>response</var> is <code>false</code>, return "<code>invalid</code>". 
      <li> Return "<code>valid</code>". 
@@ -1124,15 +1122,16 @@ <h4 class="heading settled" data-level="3.4.2" id="monkey-webidl-exposed"><span
    </div>
    <h3 class="heading settled" data-level="3.5" id="monkey-storage"><span class="secno">3.5. </span><span class="content">Storage</span><a class="self-link" href="#monkey-storage"></a></h3>
    <p>The <a data-link-type="dfn" href="https://storage.spec.whatwg.org/#obtain-a-storage-key-for-non-storage-purposes" id="ref-for-obtain-a-storage-key-for-non-storage-purposes">obtain a storage key for non-storage purposes</a> algorithm is extended to
-require double-keying on all storage within a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group⑥">browsing context group</a> containing <a data-link-type="dfn" href="#isolated-context" id="ref-for-isolated-context④">Isolated Contexts</a>.</p>
+require double-keying on all storage belonging to an <a href="https://html.spec.whatwg.org/multipage/webappapis.html#environment"> environment</a> with a <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin" id="ref-for-concept-environment-top-level-origin">top-level origin</a> known by the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent④">user agent</a> to have
+an <a data-link-type="dfn" href="#integrity-verification-algorithm" id="ref-for-integrity-verification-algorithm③">integrity verification algorithm</a>.</p>
    <div class="algorithm" data-algorithm="obtain a storage key for non-storage purposes isolated context">
      To obtain a storage key for non-storage purposes, given an <a href="https://html.spec.whatwg.org/multipage/webappapis.html#environment"> environment</a> <var>environment</var>, run these steps: 
     <ol>
-     <li> Let <var>origin</var> be <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin③">origin</a> if <var>environment</var> is an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object④">environment settings object</a>; otherwise <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-creation-url" id="ref-for-concept-environment-creation-url">creation URL</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin④">origin</a>. 
+     <li> Let <var>origin</var> be <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin②">origin</a> if <var>environment</var> is an <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object" id="ref-for-environment-settings-object④">environment settings object</a>; otherwise <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-creation-url" id="ref-for-concept-environment-creation-url">creation URL</a>'s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin" id="ref-for-concept-settings-object-origin③">origin</a>. 
      <li>
-      <ins> Let <var>integrity origin</var> be the <a data-link-type="dfn" href="#browsing-context-group-integrity-origin" id="ref-for-browsing-context-group-integrity-origin④">integrity origin</a> of the <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group" id="ref-for-browsing-context-group⑦">browsing context group</a> that <var>environment</var> belongs to. </ins>
+      <ins> Let <var>top-level origin</var> be <var>environment</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin" id="ref-for-concept-environment-top-level-origin①">top-level origin</a>. </ins>
      <li>
-      <ins> If <var>integrity origin</var> is non-null, return a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#tuple" id="ref-for-tuple">tuple</a> consisting of <var>integrity origin</var> and <var>origin</var>. </ins>
+      <ins> If the <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#user-agent" id="ref-for-user-agent⑤">user agent</a>'s <a data-link-type="dfn" href="#origin-integrity-verification-map" id="ref-for-origin-integrity-verification-map④">origin integrity verification map</a> [<var>top-level origin</var>] <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#map-exists" id="ref-for-map-exists②">exists</a>, return a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#tuple" id="ref-for-tuple">tuple</a> consisting of <var>top-level origin</var> and <var>origin</var>. </ins>
      <li> Return a <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#tuple" id="ref-for-tuple①">tuple</a> consisting of <var>origin</var>. 
     </ol>
    </div>
@@ -1172,8 +1171,7 @@ <h2 class="no-num no-ref heading settled" id="index"><span class="content">Index
   <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="content">Terms defined by this specification</span><a class="self-link" href="#index-defined-here"></a></h3>
   <ul class="index">
    <li><a href="#dfn-exposed">exposed</a><span>, in § 3.4.2</span>
-   <li><a href="#browsing-context-group-integrity-origin">integrity origin</a><span>, in § 3.2.1</span>
-   <li><a href="#browsing-context-group-integrity-verification-algorithm">integrity verification algorithm</a><span>, in § 3.2.1</span>
+   <li><a href="#integrity-verification-algorithm">integrity verification algorithm</a><span>, in § 3.2.1</span>
    <li><a href="#isolated-context">isolated context</a><span>, in § 3.2.2</span>
    <li><a href="#IsolatedContext">IsolatedContext</a><span>, in § 3.4</span>
    <li><a href="#monkey-main-fetch">main fetch</a><span>, in § 3.3.2</span>
@@ -1188,6 +1186,7 @@ <h3 class="no-num no-ref heading settled" id="index-defined-here"><span class="c
    <li><a href="#csp-list-meaningfully-mitigate-ui-redressing-attacks">mitigate-ui-redressing</a><span>, in § 3.1.10</span>
    <li><a href="#environment-settings-object-mitigate-ui-redressing-attacks">mitigate UI Redressing attacks</a><span>, in § 3.2.2</span>
    <li><a href="#abstract-opdef-obtain-directive">obtain-directive</a><span>, in § 3.1.2</span>
+   <li><a href="#origin-integrity-verification-map">origin integrity verification map</a><span>, in § 3.2.1</span>
    <li><a href="#policy-sufficiently-blocks-insecure-subresources">sufficiently blocks insecure subresources</a><span>, in § 3.1.7</span>
    <li><a href="#policy-sufficiently-mitigates-dom-sinks">sufficiently mitigates DOM sinks</a><span>, in § 3.1.8</span>
    <li><a href="#policy-sufficiently-mitigates-plugins">sufficiently mitigates plugins</a><span>, in § 3.1.3</span>
@@ -1246,9 +1245,10 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="8a30477b">global object</span>
      <li><span class="dfn-paneled" id="43ac8374">origin</span>
      <li><span class="dfn-paneled" id="bd1db03d">policy container</span>
-     <li><span class="dfn-paneled" id="7393da89">same origin</span>
      <li><span class="dfn-paneled" id="65181da8">secure context</span>
      <li><span class="dfn-paneled" id="7deb6835">settings object</span>
+     <li><span class="dfn-paneled" id="c63519ed">top-level origin</span>
+     <li><span class="dfn-paneled" id="1d2aa117">tuple origin</span>
     </ul>
    <li>
     <a data-link-type="biblio">[INFRA]</a> defines the following terms:
@@ -1257,10 +1257,13 @@ <h3 class="no-num no-ref heading settled" id="index-defined-elsewhere"><span cla
      <li><span class="dfn-paneled" id="36858240">boolean</span>
      <li><span class="dfn-paneled" id="ae8def21">contain</span>
      <li><span class="dfn-paneled" id="f937b7b6">continue</span>
+     <li><span class="dfn-paneled" id="1243a891">exist</span>
      <li><span class="dfn-paneled" id="16d07e10">for each</span>
      <li><span class="dfn-paneled" id="860300d4">implementation-defined</span>
+     <li><span class="dfn-paneled" id="3fca5a9e">map</span>
      <li><span class="dfn-paneled" id="0204d188">size</span>
      <li><span class="dfn-paneled" id="0e8de730">tuple</span>
+     <li><span class="dfn-paneled" id="6d19ac93">user agent</span>
     </ul>
    <li>
     <a data-link-type="biblio">[STORAGE]</a> defines the following terms:
@@ -1532,10 +1535,12 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 let dfnPanelData = {
 "0204d188": {"dfnID":"0204d188","dfnText":"size","external":true,"refSections":[{"refs":[{"id":"ref-for-list-size"}],"title":"3.1.3. Does a policy sufficiently mitigate plugins?"},{"refs":[{"id":"ref-for-list-size\u2460"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-list-size\u2461"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://infra.spec.whatwg.org/#list-size"},
 "0e8de730": {"dfnID":"0e8de730","dfnText":"tuple","external":true,"refSections":[{"refs":[{"id":"ref-for-tuple"},{"id":"ref-for-tuple\u2460"}],"title":"3.5. Storage"}],"url":"https://infra.spec.whatwg.org/#tuple"},
+"1243a891": {"dfnID":"1243a891","dfnText":"exist","external":true,"refSections":[{"refs":[{"id":"ref-for-map-exists"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-map-exists\u2460"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-map-exists\u2461"}],"title":"3.5. Storage"}],"url":"https://infra.spec.whatwg.org/#map-exists"},
 "1422ec4e": {"dfnID":"1422ec4e","dfnText":"interface","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-interface"},{"id":"ref-for-dfn-interface\u2460"},{"id":"ref-for-dfn-interface\u2461"}],"title":"3.4.1. \n  [IsolatedContext]\n"},{"refs":[{"id":"ref-for-dfn-interface\u2462"},{"id":"ref-for-dfn-interface\u2463"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#dfn-interface"},
 "158b3a38": {"dfnID":"158b3a38","dfnText":"csp list","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-container-csp-list"},{"id":"ref-for-policy-container-csp-list\u2460"}],"title":"3.2.2. Environment Settings Object properties"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#policy-container-csp-list"},
 "16d07e10": {"dfnID":"16d07e10","dfnText":"for each","external":true,"refSections":[{"refs":[{"id":"ref-for-list-iterate"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"},{"refs":[{"id":"ref-for-list-iterate\u2460"}],"title":"3.1.2. Obtain the active directive for a type"},{"refs":[{"id":"ref-for-list-iterate\u2461"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-list-iterate\u2462"}],"title":"3.1.6. Does a policy sufficiently mitigate style evaluation?"},{"refs":[{"id":"ref-for-list-iterate\u2463"}],"title":"3.1.7. Does a policy sufficiently block insecure subresources?"},{"refs":[{"id":"ref-for-list-iterate\u2464"}],"title":"3.1.8. Does a policy sufficiently mitigate DOM sinks?"},{"refs":[{"id":"ref-for-list-iterate\u2465"},{"id":"ref-for-list-iterate\u2466"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://infra.spec.whatwg.org/#list-iterate"},
 "1c84257e": {"dfnID":"1c84257e","dfnText":"interface member","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-interface-member"},{"id":"ref-for-dfn-interface-member\u2460"}],"title":"3.4.1. \n  [IsolatedContext]\n"}],"url":"https://webidl.spec.whatwg.org/#dfn-interface-member"},
+"1d2aa117": {"dfnID":"1d2aa117","dfnText":"tuple origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-origin-tuple"}],"title":"3.2.1. Integrity"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-tuple"},
 "2039631f": {"dfnID":"2039631f","dfnText":"namespace","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-namespace"},{"id":"ref-for-dfn-namespace\u2460"}],"title":"3.4.1. \n  [IsolatedContext]\n"},{"refs":[{"id":"ref-for-dfn-namespace\u2461"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#dfn-namespace"},
 "22e6d952": {"dfnID":"22e6d952","dfnText":"members","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-member"},{"id":"ref-for-dfn-member\u2460"}],"title":"3.4.1. \n  [IsolatedContext]\n"},{"refs":[{"id":"ref-for-dfn-member\u2461"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#dfn-member"},
 "233e6d44": {"dfnID":"233e6d44","dfnText":"'self'","external":true,"refSections":[{"refs":[{"id":"ref-for-grammardef-self"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-grammardef-self\u2460"}],"title":"3.1.5. Does a policy sufficiently mitigate script execution?"},{"refs":[{"id":"ref-for-grammardef-self\u2461"}],"title":"3.1.6. Does a policy sufficiently mitigate style evaluation?"},{"refs":[{"id":"ref-for-grammardef-self\u2462"}],"title":"3.1.7. Does a policy sufficiently block insecure subresources?"},{"refs":[{"id":"ref-for-grammardef-self\u2463"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#grammardef-self"},
@@ -1545,19 +1550,20 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 "3d7ed2c2": {"dfnID":"3d7ed2c2","dfnText":"directive set","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-directive-set"}],"title":"3.1.2. Obtain the active directive for a type"},{"refs":[{"id":"ref-for-policy-directive-set\u2460"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-policy-directive-set\u2461"}],"title":"3.1.6. Does a policy sufficiently mitigate style evaluation?"},{"refs":[{"id":"ref-for-policy-directive-set\u2462"}],"title":"3.1.8. Does a policy sufficiently mitigate DOM sinks?"},{"refs":[{"id":"ref-for-policy-directive-set\u2463"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#policy-directive-set"},
 "3e12e042": {"dfnID":"3e12e042","dfnText":"environment settings object","external":true,"refSections":[{"refs":[{"id":"ref-for-environment-settings-object"}],"title":"3.2. HTML"},{"refs":[{"id":"ref-for-environment-settings-object\u2460"},{"id":"ref-for-environment-settings-object\u2461"},{"id":"ref-for-environment-settings-object\u2462"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-environment-settings-object\u2463"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#environment-settings-object"},
 "3f252540": {"dfnID":"3f252540","dfnText":"extended attribute","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-extended-attribute"},{"id":"ref-for-dfn-extended-attribute\u2460"},{"id":"ref-for-dfn-extended-attribute\u2461"},{"id":"ref-for-dfn-extended-attribute\u2462"},{"id":"ref-for-dfn-extended-attribute\u2463"}],"title":"3.4.1. \n  [IsolatedContext]\n"}],"url":"https://webidl.spec.whatwg.org/#dfn-extended-attribute"},
+"3fca5a9e": {"dfnID":"3fca5a9e","dfnText":"map","external":true,"refSections":[{"refs":[{"id":"ref-for-ordered-map"}],"title":"3.2.1. Integrity"}],"url":"https://infra.spec.whatwg.org/#ordered-map"},
 "42cf61e0": {"dfnID":"42cf61e0","dfnText":"'unsafe-inline'","external":true,"refSections":[{"refs":[{"id":"ref-for-grammardef-unsafe-inline"}],"title":"3.1.6. Does a policy sufficiently mitigate style evaluation?"}],"url":"https://w3c.github.io/webappsec-csp/#grammardef-unsafe-inline"},
-"43ac8374": {"dfnID":"43ac8374","dfnText":"origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-origin"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2460"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2461"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2462"},{"id":"ref-for-concept-settings-object-origin\u2463"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin"},
+"43ac8374": {"dfnID":"43ac8374","dfnText":"origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-origin"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2460"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-concept-settings-object-origin\u2461"},{"id":"ref-for-concept-settings-object-origin\u2462"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-origin"},
 "4582ec82": {"dfnID":"4582ec82","dfnText":"disposition","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-disposition"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"},{"refs":[{"id":"ref-for-policy-disposition\u2460"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#policy-disposition"},
 "461b765a": {"dfnID":"461b765a","dfnText":"value","external":true,"refSections":[{"refs":[{"id":"ref-for-directive-value"},{"id":"ref-for-directive-value\u2460"}],"title":"3.1.3. Does a policy sufficiently mitigate plugins?"},{"refs":[{"id":"ref-for-directive-value\u2461"},{"id":"ref-for-directive-value\u2462"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-directive-value\u2463"}],"title":"3.1.8. Does a policy sufficiently mitigate DOM sinks?"},{"refs":[{"id":"ref-for-directive-value\u2464"},{"id":"ref-for-directive-value\u2465"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#directive-value"},
 "473036cd": {"dfnID":"473036cd","dfnText":"cross-origin isolated capability","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-cross-origin-isolated-capability"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-concept-settings-object-cross-origin-isolated-capability\u2460"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-concept-settings-object-cross-origin-isolated-capability\u2461"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-cross-origin-isolated-capability"},
 "51218496": {"dfnID":"51218496","dfnText":"name","external":true,"refSections":[{"refs":[{"id":"ref-for-directive-name"}],"title":"3.1.2. Obtain the active directive for a type"},{"refs":[{"id":"ref-for-directive-name\u2460"}],"title":"3.1.4. Does a policy sufficiently mitigate relative URL manipulation?"},{"refs":[{"id":"ref-for-directive-name\u2461"}],"title":"3.1.6. Does a policy sufficiently mitigate style evaluation?"},{"refs":[{"id":"ref-for-directive-name\u2462"}],"title":"3.1.8. Does a policy sufficiently mitigate DOM sinks?"},{"refs":[{"id":"ref-for-directive-name\u2463"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#directive-name"},
 "54872557": {"dfnID":"54872557","dfnText":"source","external":true,"refSections":[{"refs":[{"id":"ref-for-policy-source"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"},{"refs":[{"id":"ref-for-policy-source\u2460"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://w3c.github.io/webappsec-csp/#policy-source"},
 "5695c146": {"dfnID":"5695c146","dfnText":"request","external":true,"refSections":[{"refs":[{"id":"ref-for-fetch-params-request"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-fetch-params-request\u2460"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-fetch-params-request\u2461"}],"title":"3.3.2. Patches to the \"Main Fetch\" algorithm"}],"url":"https://fetch.spec.whatwg.org/#fetch-params-request"},
-"59c8a576": {"dfnID":"59c8a576","dfnText":"browsing context group","external":true,"refSections":[{"refs":[{"id":"ref-for-browsing-context-group"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-browsing-context-group\u2460"},{"id":"ref-for-browsing-context-group\u2461"},{"id":"ref-for-browsing-context-group\u2462"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-browsing-context-group\u2463"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-browsing-context-group\u2464"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-browsing-context-group\u2465"},{"id":"ref-for-browsing-context-group\u2466"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group"},
+"59c8a576": {"dfnID":"59c8a576","dfnText":"browsing context group","external":true,"refSections":[{"refs":[{"id":"ref-for-browsing-context-group"}],"title":"2. Isolated Contexts"}],"url":"https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group"},
 "5be3b9a5": {"dfnID":"5be3b9a5","dfnText":"namespace member","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-namespace-member"},{"id":"ref-for-dfn-namespace-member\u2460"}],"title":"3.4.1. \n  [IsolatedContext]\n"}],"url":"https://webidl.spec.whatwg.org/#dfn-namespace-member"},
 "631ad9e6": {"dfnID":"631ad9e6","dfnText":"exposure set","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-exposure-set"},{"id":"ref-for-dfn-exposure-set\u2460"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#dfn-exposure-set"},
 "65181da8": {"dfnID":"65181da8","dfnText":"secure context","external":true,"refSections":[{"refs":[{"id":"ref-for-secure-context"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-secure-context\u2460"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#secure-context"},
-"7393da89": {"dfnID":"7393da89","dfnText":"same origin","external":true,"refSections":[{"refs":[{"id":"ref-for-same-origin"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-same-origin\u2460"}],"title":"3.3.1. Verify the integrity of a response"}],"url":"https://html.spec.whatwg.org/multipage/browsers.html#same-origin"},
+"6d19ac93": {"dfnID":"6d19ac93","dfnText":"user agent","external":true,"refSections":[{"refs":[{"id":"ref-for-user-agent"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-user-agent\u2460"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-user-agent\u2461"},{"id":"ref-for-user-agent\u2462"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-user-agent\u2463"},{"id":"ref-for-user-agent\u2464"}],"title":"3.5. Storage"}],"url":"https://infra.spec.whatwg.org/#user-agent"},
 "76919410": {"dfnID":"76919410","dfnText":"obtain a storage key for non-storage purposes","external":true,"refSections":[{"refs":[{"id":"ref-for-obtain-a-storage-key-for-non-storage-purposes"}],"title":"3.5. Storage"}],"url":"https://storage.spec.whatwg.org/#obtain-a-storage-key-for-non-storage-purposes"},
 "76a07ab2": {"dfnID":"76a07ab2","dfnText":"Get fetch directive fallback list","external":true,"refSections":[{"refs":[{"id":"ref-for-directive-fallback-list"}],"title":"3.1.2. Obtain the active directive for a type"}],"url":"https://w3c.github.io/webappsec-csp/#directive-fallback-list"},
 "78785dae": {"dfnID":"78785dae","dfnText":"require-trusted-types-for-directive","external":true,"refSections":[{"refs":[{"id":"ref-for-require-trusted-types-for-directive"}],"title":"3.1.8. Does a policy sufficiently mitigate DOM sinks?"}],"url":"https://w3c.github.io/trusted-types/dist/spec/#require-trusted-types-for-directive"},
@@ -1581,8 +1587,7 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 "b75bb3bd": {"dfnID":"b75bb3bd","dfnText":"SecureContext","external":true,"refSections":[{"refs":[{"id":"ref-for-SecureContext"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#SecureContext"},
 "bac9095f": {"dfnID":"bac9095f","dfnText":"operation","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-operation"}],"title":"3.4.1. \n  [IsolatedContext]\n"}],"url":"https://webidl.spec.whatwg.org/#dfn-operation"},
 "bd1db03d": {"dfnID":"bd1db03d","dfnText":"policy container","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-settings-object-policy-container"},{"id":"ref-for-concept-settings-object-policy-container\u2460"}],"title":"3.2.2. Environment Settings Object properties"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-policy-container"},
-"browsing-context-group-integrity-origin": {"dfnID":"browsing-context-group-integrity-origin","dfnText":"\nintegrity origin","external":false,"refSections":[{"refs":[{"id":"ref-for-browsing-context-group-integrity-origin"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-browsing-context-group-integrity-origin\u2460"},{"id":"ref-for-browsing-context-group-integrity-origin\u2461"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-browsing-context-group-integrity-origin\u2462"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-browsing-context-group-integrity-origin\u2463"}],"title":"3.5. Storage"}],"url":"#browsing-context-group-integrity-origin"},
-"browsing-context-group-integrity-verification-algorithm": {"dfnID":"browsing-context-group-integrity-verification-algorithm","dfnText":"\nintegrity verification algorithm","external":false,"refSections":[{"refs":[{"id":"ref-for-browsing-context-group-integrity-verification-algorithm"},{"id":"ref-for-browsing-context-group-integrity-verification-algorithm\u2460"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-browsing-context-group-integrity-verification-algorithm\u2461"}],"title":"3.3. Fetch"},{"refs":[{"id":"ref-for-browsing-context-group-integrity-verification-algorithm\u2462"}],"title":"3.3.1. Verify the integrity of a response"}],"url":"#browsing-context-group-integrity-verification-algorithm"},
+"c63519ed": {"dfnID":"c63519ed","dfnText":"top-level origin","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-environment-top-level-origin"},{"id":"ref-for-concept-environment-top-level-origin\u2460"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin"},
 "c71e04da": {"dfnID":"c71e04da","dfnText":"overloaded","external":true,"refSections":[{"refs":[{"id":"ref-for-dfn-overloaded"}],"title":"3.4.1. \n  [IsolatedContext]\n"}],"url":"https://webidl.spec.whatwg.org/#dfn-overloaded"},
 "c80aa797": {"dfnID":"c80aa797","dfnText":"directives","external":true,"refSections":[{"refs":[{"id":"ref-for-directives"}],"title":"3.1.2. Obtain the active directive for a type"}],"url":"https://w3c.github.io/webappsec-csp/#directives"},
 "cc2141c1": {"dfnID":"cc2141c1","dfnText":"CrossOriginIsolated","external":true,"refSections":[{"refs":[{"id":"ref-for-CrossOriginIsolated"},{"id":"ref-for-CrossOriginIsolated\u2460"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"https://webidl.spec.whatwg.org/#CrossOriginIsolated"},
@@ -1605,8 +1610,10 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 "f7f36561": {"dfnID":"f7f36561","dfnText":"concrete","external":true,"refSections":[{"refs":[{"id":"ref-for-cross-origin-isolation-concrete"}],"title":"3.2.2. Environment Settings Object properties"}],"url":"https://html.spec.whatwg.org/multipage/document-sequences.html#cross-origin-isolation-concrete"},
 "f937b7b6": {"dfnID":"f937b7b6","dfnText":"continue","external":true,"refSections":[{"refs":[{"id":"ref-for-iteration-continue"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"},{"refs":[{"id":"ref-for-iteration-continue\u2460"}],"title":"3.1.10. Does a policy meaningfully mitigate UI Redressing attacks?"}],"url":"https://infra.spec.whatwg.org/#iteration-continue"},
 "fa5ee9c5": {"dfnID":"fa5ee9c5","dfnText":"creation url","external":true,"refSections":[{"refs":[{"id":"ref-for-concept-environment-creation-url"}],"title":"3.5. Storage"}],"url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-creation-url"},
-"isolated-context": {"dfnID":"isolated-context","dfnText":"isolated context","external":false,"refSections":[{"refs":[{"id":"ref-for-isolated-context"},{"id":"ref-for-isolated-context\u2460"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-isolated-context\u2461"}],"title":"3.4.1. \n  [IsolatedContext]\n"},{"refs":[{"id":"ref-for-isolated-context\u2462"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"},{"refs":[{"id":"ref-for-isolated-context\u2463"}],"title":"3.5. Storage"}],"url":"#isolated-context"},
+"integrity-verification-algorithm": {"dfnID":"integrity-verification-algorithm","dfnText":"integrity verification algorithm","external":false,"refSections":[{"refs":[{"id":"ref-for-integrity-verification-algorithm"},{"id":"ref-for-integrity-verification-algorithm\u2460"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-integrity-verification-algorithm\u2461"}],"title":"3.3. Fetch"},{"refs":[{"id":"ref-for-integrity-verification-algorithm\u2462"}],"title":"3.5. Storage"}],"url":"#integrity-verification-algorithm"},
+"isolated-context": {"dfnID":"isolated-context","dfnText":"isolated context","external":false,"refSections":[{"refs":[{"id":"ref-for-isolated-context"},{"id":"ref-for-isolated-context\u2460"}],"title":"2. Isolated Contexts"},{"refs":[{"id":"ref-for-isolated-context\u2461"}],"title":"3.4.1. \n  [IsolatedContext]\n"},{"refs":[{"id":"ref-for-isolated-context\u2462"}],"title":"3.4.2. Patches to the \"exposed\" algorithm"}],"url":"#isolated-context"},
 "monkey-main-fetch": {"dfnID":"monkey-main-fetch","dfnText":"main fetch","external":false,"refSections":[{"refs":[{"id":"ref-for-monkey-main-fetch"}],"title":"3.3.2. Patches to the \"Main Fetch\" algorithm"}],"url":"#monkey-main-fetch"},
+"origin-integrity-verification-map": {"dfnID":"origin-integrity-verification-map","dfnText":"origin integrity verification map","external":false,"refSections":[{"refs":[{"id":"ref-for-origin-integrity-verification-map"}],"title":"3.2.1. Integrity"},{"refs":[{"id":"ref-for-origin-integrity-verification-map\u2460"}],"title":"3.2.2. Environment Settings Object properties"},{"refs":[{"id":"ref-for-origin-integrity-verification-map\u2461"},{"id":"ref-for-origin-integrity-verification-map\u2462"}],"title":"3.3.1. Verify the integrity of a response"},{"refs":[{"id":"ref-for-origin-integrity-verification-map\u2463"}],"title":"3.5. Storage"}],"url":"#origin-integrity-verification-map"},
 "policy-sufficiently-blocks-insecure-subresources": {"dfnID":"policy-sufficiently-blocks-insecure-subresources","dfnText":"sufficiently blocks insecure\nsubresources","external":false,"refSections":[{"refs":[{"id":"ref-for-policy-sufficiently-blocks-insecure-subresources"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"}],"url":"#policy-sufficiently-blocks-insecure-subresources"},
 "policy-sufficiently-mitigates-dom-sinks": {"dfnID":"policy-sufficiently-mitigates-dom-sinks","dfnText":"sufficiently mitigates DOM sinks","external":false,"refSections":[{"refs":[{"id":"ref-for-policy-sufficiently-mitigates-dom-sinks"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"}],"url":"#policy-sufficiently-mitigates-dom-sinks"},
 "policy-sufficiently-mitigates-plugins": {"dfnID":"policy-sufficiently-mitigates-plugins","dfnText":"sufficiently mitigates plugins","external":false,"refSections":[{"refs":[{"id":"ref-for-policy-sufficiently-mitigates-plugins"}],"title":"3.1.1. Does a policy meaningfully mitigate injection attacks?"}],"url":"#policy-sufficiently-mitigates-plugins"},
@@ -2004,15 +2011,15 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 let refsData = {
 "#IsolatedContext": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"IsolatedContext","type":"extended-attribute","url":"#IsolatedContext"},
 "#abstract-opdef-obtain-directive": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"obtain-directive","type":"abstract-op","url":"#abstract-opdef-obtain-directive"},
-"#browsing-context-group-integrity-origin": {"export":true,"for_":["browsing context group"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"integrity origin","type":"dfn","url":"#browsing-context-group-integrity-origin"},
-"#browsing-context-group-integrity-verification-algorithm": {"export":true,"for_":["browsing context group"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"integrity verification algorithm","type":"dfn","url":"#browsing-context-group-integrity-verification-algorithm"},
 "#csp-list-meaningfully-mitigate-injection-attacks": {"export":true,"for_":["CSP list"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"mitigate-injection","type":"dfn","url":"#csp-list-meaningfully-mitigate-injection-attacks"},
 "#csp-list-meaningfully-mitigate-ui-redressing-attacks": {"export":true,"for_":["CSP list"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"mitigate-ui-redressing","type":"dfn","url":"#csp-list-meaningfully-mitigate-ui-redressing-attacks"},
 "#dfn-exposed": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"exposed","type":"dfn","url":"#dfn-exposed"},
 "#environment-settings-object-meaningfully-mitigate-injection-attacks": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"meaningfully mitigate injection attacks","type":"dfn","url":"#environment-settings-object-meaningfully-mitigate-injection-attacks"},
 "#environment-settings-object-mitigate-ui-redressing-attacks": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"mitigate ui redressing attacks","type":"dfn","url":"#environment-settings-object-mitigate-ui-redressing-attacks"},
+"#integrity-verification-algorithm": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"integrity verification algorithm","type":"dfn","url":"#integrity-verification-algorithm"},
 "#isolated-context": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"isolated context","type":"dfn","url":"#isolated-context"},
 "#monkey-main-fetch": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"main fetch","type":"dfn","url":"#monkey-main-fetch"},
+"#origin-integrity-verification-map": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"origin integrity verification map","type":"dfn","url":"#origin-integrity-verification-map"},
 "#policy-sufficiently-blocks-insecure-subresources": {"export":true,"for_":["policy"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"sufficiently blocks insecure subresources","type":"dfn","url":"#policy-sufficiently-blocks-insecure-subresources"},
 "#policy-sufficiently-mitigates-dom-sinks": {"export":true,"for_":["policy"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"sufficiently mitigates dom sinks","type":"dfn","url":"#policy-sufficiently-mitigates-dom-sinks"},
 "#policy-sufficiently-mitigates-plugins": {"export":true,"for_":["policy"],"level":"1","normative":true,"shortname":"isolated-contexts","spec":"isolated-contexts-1","status":"local","text":"sufficiently mitigates plugins","type":"dfn","url":"#policy-sufficiently-mitigates-plugins"},
@@ -2029,11 +2036,12 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 "https://fetch.spec.whatwg.org/#concept-response-body": {"export":true,"for_":["response"],"level":"1","normative":true,"shortname":"fetch","spec":"fetch","status":"current","text":"body","type":"dfn","url":"https://fetch.spec.whatwg.org/#concept-response-body"},
 "https://fetch.spec.whatwg.org/#fetch-params": {"export":false,"for_":[],"level":"1","normative":true,"shortname":"fetch","spec":"fetch","status":"current","text":"fetch params","type":"dfn","url":"https://fetch.spec.whatwg.org/#fetch-params"},
 "https://fetch.spec.whatwg.org/#fetch-params-request": {"export":false,"for_":["fetch params"],"level":"1","normative":true,"shortname":"fetch","spec":"fetch","status":"current","text":"request","type":"dfn","url":"https://fetch.spec.whatwg.org/#fetch-params-request"},
+"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-tuple": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"tuple origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-tuple"},
 "https://html.spec.whatwg.org/multipage/browsers.html#policy-container-csp-list": {"export":true,"for_":["policy container"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"csp list","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#policy-container-csp-list"},
-"https://html.spec.whatwg.org/multipage/browsers.html#same-origin": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"same origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/browsers.html#same-origin"},
 "https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group": {"export":false,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"browsing context group","type":"dfn","url":"https://html.spec.whatwg.org/multipage/document-sequences.html#browsing-context-group"},
 "https://html.spec.whatwg.org/multipage/document-sequences.html#cross-origin-isolation-concrete": {"export":false,"for_":[],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"concrete","type":"dfn","url":"https://html.spec.whatwg.org/multipage/document-sequences.html#cross-origin-isolation-concrete"},
 "https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-creation-url": {"export":true,"for_":["environment"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"creation url","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-creation-url"},
+"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin": {"export":true,"for_":["environment"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"top-level origin","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-environment-top-level-origin"},
 "https://html.spec.whatwg.org/multipage/webappapis.html#concept-realm-settings-object": {"export":true,"for_":["realm"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"settings object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-realm-settings-object"},
 "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-cross-origin-isolated-capability": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"cross-origin isolated capability","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-cross-origin-isolated-capability"},
 "https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global": {"export":true,"for_":["environment settings object"],"level":"1","normative":true,"shortname":"html","spec":"html","status":"current","text":"global object","type":"dfn","url":"https://html.spec.whatwg.org/multipage/webappapis.html#concept-settings-object-global"},
@@ -2048,7 +2056,10 @@ <h3 class="no-num no-ref heading settled" id="informative"><span class="content"
 "https://infra.spec.whatwg.org/#list-contain": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"contain","type":"dfn","url":"https://infra.spec.whatwg.org/#list-contain"},
 "https://infra.spec.whatwg.org/#list-iterate": {"export":true,"for_":["list","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"for each","type":"dfn","url":"https://infra.spec.whatwg.org/#list-iterate"},
 "https://infra.spec.whatwg.org/#list-size": {"export":true,"for_":["list","stack","queue","set"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"size","type":"dfn","url":"https://infra.spec.whatwg.org/#list-size"},
+"https://infra.spec.whatwg.org/#map-exists": {"export":true,"for_":["map"],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"exist","type":"dfn","url":"https://infra.spec.whatwg.org/#map-exists"},
+"https://infra.spec.whatwg.org/#ordered-map": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"map","type":"dfn","url":"https://infra.spec.whatwg.org/#ordered-map"},
 "https://infra.spec.whatwg.org/#tuple": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"tuple","type":"dfn","url":"https://infra.spec.whatwg.org/#tuple"},
+"https://infra.spec.whatwg.org/#user-agent": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"infra","spec":"infra","status":"current","text":"user agent","type":"dfn","url":"https://infra.spec.whatwg.org/#user-agent"},
 "https://storage.spec.whatwg.org/#obtain-a-storage-key-for-non-storage-purposes": {"export":true,"for_":[],"level":"1","normative":true,"shortname":"storage","spec":"storage","status":"current","text":"obtain a storage key for non-storage purposes","type":"dfn","url":"https://storage.spec.whatwg.org/#obtain-a-storage-key-for-non-storage-purposes"},
 "https://tc39.es/ecma262/multipage/executable-code-and-execution-contexts.html#realm": {"export":true,"for_":["ECMAScript"],"level":"1","normative":true,"shortname":"ecmascript","spec":"ecmascript","status":"current","text":"realm","type":"dfn","url":"https://tc39.es/ecma262/multipage/executable-code-and-execution-contexts.html#realm"},
 "https://w3c.github.io/trusted-types/dist/spec/#require-trusted-types-for-directive": {"export":true,"for_":[],"level":"","normative":true,"shortname":"trusted-types","spec":"trusted-types","status":"anchor-block","text":"require-trusted-types-for-directive","type":"dfn","url":"https://w3c.github.io/trusted-types/dist/spec/#require-trusted-types-for-directive"},