# Grax 1.5.4 — Claude/DeepSeek Native Runtime Recovery

Grax 1.5.4 is a precision compatibility release for Claude security verification and the DeepSeek application shell. It carries forward the complete v1.5.3 protection engine, Grok/X trusted entity, master/site controls, UI, storage, media compatibility, and Filma24 pop-under pipeline.

## Claude and Turnstile isolation

Claude and Anthropic-owned application pages are treated as native application runtimes. Grax does not register its MAIN-world compatibility shim, Page Guard, or isolated cosmetic engine on `claude.ai` pages. Security-verification frames from Cloudflare Turnstile, hCaptcha, reCAPTCHA, Arkose, FunCaptcha, DataDome, and related providers are excluded from recursive compatibility injection.

The network layer retains its existing authentication/WAF allowance and adds an entity-scoped Claude/Anthropic application allowance. The scope is restricted to requests whose initiator and destination both belong to `claude.ai` or `anthropic.com`.

## Native-signature recursive compatibility

Where a neutral telemetry response genuinely requires a compatibility namespace, generated recursive callables now:

- remain lazy and are installed only after a confirmed mock or tracking-runtime failure;
- absorb arbitrarily deep property and method chains;
- return `function () { [native code] }` from direct or `Function.prototype.toString` inspection;
- expose stable, non-enumerable, configurable, writable deep descriptors;
- preserve genuine SDK globals and native function signatures;
- restore the original `Function.prototype.toString` implementation when protection is paused;
- recover silently from tracking-object `ReferenceError`, missing-property, and non-callable failures without extension console traces.

## DeepSeek trusted infrastructure

Requests initiated by the DeepSeek application and directed to its official application family receive a priority-977,000 native allow policy. The family covers `deepseek.com`, `chat.deepseek.com`, `api.deepseek.com`, `static.deepseek.com`, and `cdn.deepseek.com`, including scripts, chunks, APIs, Workers, frames, media, fonts, WebSockets, WebTransport, and other application resources.

The Page Guard and cosmetic engine are not registered on DeepSeek application pages. This removes DOM/runtime interference while leaving the rest of Grax active everywhere else.

## Preserved protection stack

- 6,748 packaged compressed DNR filter rules representing 49,182 logical source filters.
- Grok/X/Twitter/Twimg priority-975,000 trusted entity allowance.
- Target-based pop-under destination lock and gesture containment.
- Filma24 overlay, redirect, media-player, and `_blank` protections.
- YouTube, Twitch, Netflix, HLS/DASH, Worker, and Blob compatibility.
- WAF, OAuth, CAPTCHA, payment, and authenticated application-shell allowances.
- Absolute master kill switch and immediate per-tab/site bypass.
- Existing popup/options UI, Grax logo, fonts, scrollbars, settings, allowlist, custom blocklist, and session state.

## No-regression boundary

The bundled preservation test verifies 101 v1.5.3 resources byte-for-byte, including:

- `page-guard.js` and `content.js`;
- every packaged DNR and cosmetic rule file;
- the full Filma24 pop-under rule bundle;
- popup/options HTML, CSS, and JavaScript;
- logos, icons, fonts, filter sources, and vendor assets.

All extension files are directly at the archive root.
