Step-1 helper: serve this from a different HTTPS origin (e.g. https://victim.example) to establish the precondition — Chrome's UID takes a persisted WRITE UriPermission on whatever SAF document the user picks. This is the normal, legitimate File System Access flow.