Desktop Linux ASAN run (sanity check / platform-gate proof)
===========================================================

Command:
  /chromium/chromium/src/out/asan/chrome --headless=new --no-sandbox \
    --disable-gpu --no-first-run --no-default-browser-check \
    --enable-blink-features=MojoJS,MojoJSTest --site-per-process \
    --user-data-dir=/tmp/poc-prof --enable-logging=stderr \
    http://127.0.0.1:47123/attacker.html

Relevant console output:
  [INFO:CONSOLE:61] "[*] Bound blink.mojom.TextSuggestionHost from attacker main frame.", source: http://127.0.0.1:47123/attacker.html (61)
  [INFO:CONSOLE:61] "[!] TextSuggestionHost pipe closed (desktop = expected; this POC is Android-only).", source: http://127.0.0.1:47123/attacker.html (61)

Interpretation:
  On non-Android, content/browser/browser_interface_binders.cc:1215 registers
  EmptyBinderForFrame<blink::mojom::TextSuggestionHost>, which drops the
  PendingReceiver. The renderer-side Remote observes pipe closure immediately.
  On Android, the same bind request reaches BindTextSuggestionHostForFrame
  (line 372) and is accepted for the main frame -> the pipe stays open and
  the rest of the POC proceeds.

No ASAN error is expected: this is a logic bug (CWE-441), not memory
corruption.