Scope playback request header overrides to active stream origins and document the Electron runtime security contract.