Wombaat origin check

This is not the parent app. It is the page infra uses to prove that this origin is a secure context on a real phone, which is what the Push API and service workers need before any application code can exist here (hub #215, #213). Engineering replaces it.

Reading the browser…

If this line stays, JavaScript did not run - which is itself an answer.

On iPhone, the permission prompt cannot be offered until the page is added to the Home Screen. Add it, open it from there, and read this page again: the answers change.