Chrome Release → Validated Backport PR Input: = (e.g. ). Ask if either is missing. The flow is local-first : nothing is pushed until every patch applies via and passes . 1. Map CVE → bug → fix CL Run (or its inline procedure) to produce ( ) and a per-bug canonical fix CL. For each CL also note (path under : , , , ) and . Prefer the target-milestone merge CL if one exists (e.g. on ≈ M146, prefer the cherry-pick over the main CL) — it's already rebased and far less likely to conflict. Find it via on the Change-Id, or Gerrit . If Chrome did not merge a fix to the target milestone, that's a stron…