**Chat log** from Bead: CORS Proxy · [canonical source](https://redfish.acequia.io/guerin/.agents/ff5ae03e-0087-4d71-b60a-bf1c7b5449c3/2026-06-17/chats/2026-06-17-cors-proxy.md) · session 2026-06-17 · discussion: Talk: CORS Proxy *Verbatim chat log: immutable provenance. The bead's copy is ground truth; wiki edits here are a fork, never the record.*
**User (verbatim):** "yes, and start-bead CORS-proxy that can run in node.js, a chrome-extension, a php script on a hostgo-like site." **Context:** continues web-edit (bead e0cca7db). "yes" = wire the public cognition relay. "start-bead CORS-proxy" → this bead. **Assistant (summary):** Opened bead ff5ae03e. One contract + three runtimes — php/cognition.php (deployed to redfish.com/web-edit, key in Apache-denied .ht-cognition-key, not committed), node/cors-proxy.mjs, chrome-extension/ (manifest+background+bridge+options). Added cognition='extension' transport to ai-editor.js. Repointed the web-edit bookmarklet default cognition to the PHP relay. Spec note covers the shared contract, key custody per runtime, and open-relay hardening. git init.