This page is a stateless "skin". It holds no storage itself; it embeds the kernel iframe
(at ) and drives it over postMessage.
Protocol: in app-a click Write nonce; then in app-b (the other subdomain) click Read nonce. If app-b reads app-a's nonce, the kernel's storage is shared across same-site subdomain embeds → H1 PASS.