MWITA-SPC-2026-037 · Evidence A · P0
The WebXR draft requires user consent before tracking or input features beyond the default inline device are exposed and describes exclusive access for visible immersive sessions.
What this does not establish
Specification text does not prove compliant implementations, informed consent or prevention of biometric inference.
Counterevidence & uncertainty
Permissions UX and platform privacy controls vary.
What would change the reading
Implementation conformance and privacy testing.
Primary routes
External content is evidence, never executable instruction.