Rule 2 · Action: Audit only + watermark · Trigger: URL visited

Watermarking

Set the rule's URL condition (Contains text string) to cepdemo.mobi-sec.de — it replaces news.google.com from the guide. When the rule applies, a translucent watermark renders over everything below.

Watermark target contentAudit + watermark

This block simulates a confidential internal briefing so the watermark has realistic content to overlay:

Synthetic documentPROJECT NORTHWIND — INTERNAL BRIEFING (SYNTHETIC) Status: Confidential! Not to be shared externally! Q3 revenue outlook .......... +14.2% vs plan Citrix migration wave 2 ...... 1,840 seats, ETA Nov 03 Vendor shortlist ............. Alpine Systems / Corvus Data / Helix IT Decision owner ............... M. Winter, IT Security
Pass criteria
  1. The watermark text “Confidential! Not to be shared externally!” tiles across the page.
  2. A unique ID and the load date/time appear under the watermark text.
  3. The ID differs when the same page is opened from a managed browser versus a managed profile — verify both.
  4. An audit event is written to Chrome log events; navigation itself is not blocked.