Sandbox
Build a case, then watch what this app can see of it as you change privacy realms. Writes real nodes, removed when you delete the test case. why this is trustworthy ↓
Findings
Things the platform does that look wrong, with the evidence that established them. A register, not behaviour: realm-lens does not quietly rely on any of these. Where it uses a surface on this list it uses it exactly as Paradigm’s own pages do, and says so.
Probe — fire the third-party API with what the app is holding
Fire ids the app already saved at Paradigm’s third-party endpoints, and see what comes back that shouldn’t.
Simulate sharing
Pick any app, or write a request yourself, and see what your realm would hand it — before anyone approves anything.