drop webauthn ceremony export + client extension outputs · detect prf extension usage + derived key handles · runs locally
drop webauthn ceremony export + client extension outputs · local only
heuristic screener · vendor schema varies · not definitive proof