WebPKI Observatory — Governance Risk
Root program oversight coverage has collapsed from 68-76% in 2019 to just 17.9% (Chrome) and 7.6% (Mozilla) in 2025, representing a governance crisis as incident volume remains steady at 223 bugs per year. Microsoft provides 0% oversight engagement across all 1,692 incidents in the tracked corpus, effectively abandoning its role as a root program operator. Chrome now carries the oversight burden with 286 substantive bug engagements versus Mozilla's 252, while Apple's 44 oversight bugs and 6 substantive comments reveal minimal participation despite operating the second-largest browser by market share at 16.4%.