The toggle must change what is POSSIBLE, not ask the frame to behave. Records the verified mechanics: CSP is nginx-emitted (static add_header), the setting lives only in browser localStorage today, and the node's nginx self-heal reverts hand edits — so the setting moves node-side and the CSP derives from it, allowlisted rather than wildcard. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>