demo · v132

PST default allowlist: self → *

Pick a frame setup. Compare whether private-state-token-issuance / -redemption are usable under the old default (self) and the new 132 default (*). The new default makes embedded fraud-detection scripts work without opting frames in.