.planning/PROJECT.md

@@ -105,9 +105,15 @@ nothing is validated until SPEC §10 acceptance passes.)
 - **Tab capture binding**: REMOVED (CON-tab-capture-binding RETIRED). The new
   `getDisplayMedia` binding (CON-display-capture-binding) is screen/window-
   scoped, not tab-scoped, and survives tab switches without re-attach.
-- **Manifest permissions**: `tabCapture`, `activeTab`, `downloads`, `scripting`,
-  `storage`; `host_permissions: ["<all_urls>"]` — exactly this set, no more, no
-  less (CON-manifest-permissions).
+- **Manifest permissions**: ~~`tabCapture`, `activeTab`, `downloads`,
+  `scripting`, `storage`~~ **SUPERSEDED by DEC-011 Amendment 1 (2026-05-20).**
+  Current locked set: `desktopCapture`, `activeTab`, `tabs`, `downloads`,
+  `scripting`, `storage`, `offscreen`, `notifications`;
+  `host_permissions: ["<all_urls>"]` — exactly this set, no more, no less
+  (CON-manifest-permissions, post-Phase-01 retirement of `tabCapture` per
+  DEC-003 Amendment + addition of `desktopCapture` + `offscreen` +
+  `notifications`; Phase 2 Amendment 1 adds `tabs` per D-P2-02). See Key
+  Decisions table DEC-011 row for full provenance.
 - **Storage strategy**: All Phase 1 rolling buffers live in memory only
   (CON-buffer-storage). `chrome.storage` is permitted but MUST NOT be used to
   persist rolling buffers.