tion contexts should not be observable by the API through the realm check in the <a>take a sample</a> algorithm. Cross-origin <code>iframes</code> and other execution contexts that share an <a>agent</a> with a profiler will therefore not have their execution observable through this API.
        </p>
      </section>
      <section>
        <h2>Timing attacks</h2>
        <p>
        Timing attacks remain a concern for any API that could introduce a new source of high-resolution timing information. Timestamp