vfs_quota.sg — per-origin storage quota enforcement for the browser storage layer. In-memory 16-slot quota table keyed by SHA-256(origin)[0:8]. Each origin gets a byte budget (default + per-origin override). Charge/release/check API enforces limits before writes. Origin isolation verified: charges to origin A don't affect origin B. ABCDEFGH pass, 28/28 suite green.