Changes since initial submission (v1.0.0):

Fixed broken report links for Investment Adviser-only registrants. Some CFP professionals are registered with the SEC but not FINRA as broker-dealers. The extension now detects this (via the bcScope field in the API response) and routes the "View full report" link to SEC's IAPD (adviserinfo.sec.gov) instead of BrokerCheck when appropriate.

Replaced all innerHTML assignments with safe DOM construction using createElement/appendChild. No dynamic HTML strings are built or injected.

Added data_collection_permissions to manifest per Mozilla requirements. Value is {"required": ["none"]} since the extension collects no data.

Bumped strict_min_version to 140.0 (required for data_collection_permissions support).

Added userscript alternative in /userscript directory (not part of the extension, included in the repo for users who prefer Greasemonkey/Tampermonkey).


What the extension does (unchanged):

Runs only on letsmakeaplan.org profile pages
Extracts the CRD number from an existing BrokerCheck link already on the page
Makes one GET request to FINRA's public BrokerCheck API
Displays disclosure information in a badge below the planner's name
No data is collected, stored, or transmitted anywhere other than the single FINRA API call


Permissions justification (unchanged):

Host permission for api.brokercheck.finra.org: required to query FINRA's public API
Content script on letsmakeaplan.org: required to read CRD number and inject the badge


No remote code is loaded or executed.