DanglingPointer: annotate for unittests base+linux [1/N]

The DanglingPointerDetector is configured only when the test enters the
ContentMain function. See https://crbug.com/1400059

I would like to configure it no matter the kind of test. For this to
happen, we need to annotate every pre-existing dangling pointers.

This patch annotates the ones you can find by running targets depending
on the GoogleTest library.

Statistic:

This adds 1776 new DanglingUntriaged. Among them:
- 1288 are in unittests.
- 488 are in implementation.

To produce those numbers, I used the command:
```bash
git diff annotate-linux origin/main -- "*test*" | grep "DanglingUntriaged" | wc -l
```

This patch has been generated by:

1. Apply the "auto-annotator" patch:
   https://chromium-review.googlesource.com/c/chromium/src/+/4474553

2. Compile the compiler again:
   ```bash
   ./tools/clang/scripts/build.py
   ```

3. List and run all the targets. You can use a bash script like:
   https://docs.google.com/document/d/1AMMERcqy0eafFWopUCHYsIKIKEp3J8DFxqW9UIbzIHo

4. Concatenate output, filter by "Found dangling ptr", sort, remove
   duplicate.

5. Apply the rewriter script from:
   https://github.com/ArthurSonzogni/chrome-dangling-ptr-apply-edit

6. Revert the "auto-annotate" patch.

7. Apply `git cl format`

AX-Relnotes: n/a.
Bug: chromium:1400059
Change-Id: I217d5c0b925da5176fc53baf95919a3690f1e9a3
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4570424
Reviewed-by: danakj <danakj@chromium.org>
Owners-Override: danakj <danakj@chromium.org>
Commit-Queue: Arthur Sonzogni <arthursonzogni@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1151859}
diff --git a/apps/saved_files_service_unittest.cc b/apps/saved_files_service_unittest.cc
index e575b6a3..1a1591a 100644
--- a/apps/saved_files_service_unittest.cc
+++ b/apps/saved_files_service_unittest.cc
@@ -84,7 +84,7 @@
   }
 
   extensions::TestExtensionEnvironment env_;
-  raw_ptr<const extensions::Extension> extension_;
+  raw_ptr<const extensions::Extension, DanglingUntriaged> extension_;
   raw_ptr<SavedFilesService> service_;
   base::FilePath path_;
 };
diff --git a/base/message_loop/message_pump_glib.cc b/base/message_loop/message_pump_glib.cc
index fca4b535..d78c99a3 100644
--- a/base/message_loop/message_pump_glib.cc
+++ b/base/message_loop/message_pump_glib.cc
@@ -315,7 +315,7 @@
 
 struct FdWatchSource : public GSource {
   raw_ptr<MessagePumpGlib> pump;
-  raw_ptr<MessagePumpGlib::FdWatchController> controller;
+  raw_ptr<MessagePumpGlib::FdWatchController, DanglingUntriaged> controller;
 };
 
 gboolean FdWatchSourcePrepare(GSource* source, gint* timeout_ms) {
diff --git a/base/sampling_heap_profiler/sampling_heap_profiler_unittest.cc b/base/sampling_heap_profiler/sampling_heap_profiler_unittest.cc
index 8f8de2b..4c84d0a3d 100644
--- a/base/sampling_heap_profiler/sampling_heap_profiler_unittest.cc
+++ b/base/sampling_heap_profiler/sampling_heap_profiler_unittest.cc
@@ -88,7 +88,7 @@
 
  private:
   size_t watch_size_;
-  raw_ptr<void> sample_address_ = nullptr;
+  raw_ptr<void, DanglingUntriaged> sample_address_ = nullptr;
 };
 
 TEST_F(SamplingHeapProfilerTest, SampleObserver) {
diff --git a/base/task/thread_pool/pooled_parallel_task_runner.h b/base/task/thread_pool/pooled_parallel_task_runner.h
index cd364e8..99b2ae6d8 100644
--- a/base/task/thread_pool/pooled_parallel_task_runner.h
+++ b/base/task/thread_pool/pooled_parallel_task_runner.h
@@ -37,7 +37,8 @@
   ~PooledParallelTaskRunner() override;
 
   const TaskTraits traits_;
-  const raw_ptr<PooledTaskRunnerDelegate> pooled_task_runner_delegate_;
+  const raw_ptr<PooledTaskRunnerDelegate, DanglingUntriaged>
+      pooled_task_runner_delegate_;
 };
 
 }  // namespace internal
diff --git a/base/test/power_monitor_test.h b/base/test/power_monitor_test.h
index fd5785b..9ed3c1f 100644
--- a/base/test/power_monitor_test.h
+++ b/base/test/power_monitor_test.h
@@ -54,7 +54,8 @@
 
  private:
   // Owned by PowerMonitor.
-  raw_ptr<PowerMonitorTestSource> power_monitor_test_source_ = nullptr;
+  raw_ptr<PowerMonitorTestSource, DanglingUntriaged>
+      power_monitor_test_source_ = nullptr;
 };
 
 class PowerMonitorTestObserver : public PowerSuspendObserver,
diff --git a/base/test/task_environment.h b/base/test/task_environment.h
index fa2d43b4..4791214 100644
--- a/base/test/task_environment.h
+++ b/base/test/task_environment.h
@@ -506,7 +506,7 @@
 #endif
 
   // Owned by the ThreadPoolInstance.
-  raw_ptr<TestTaskTracker> task_tracker_ = nullptr;
+  raw_ptr<TestTaskTracker, DanglingUntriaged> task_tracker_ = nullptr;
 
   // Ensures destruction of lazy TaskRunners when this is destroyed.
   std::unique_ptr<base::internal::ScopedLazyTaskRunnerListForTesting>
diff --git a/base/test/test_suite.cc b/base/test/test_suite.cc
index e4dbce5..add2d85 100644
--- a/base/test/test_suite.cc
+++ b/base/test/test_suite.cc
@@ -227,7 +227,8 @@
   }
 
  private:
-  raw_ptr<FeatureList> feature_list_set_before_test_ = nullptr;
+  raw_ptr<FeatureList, DanglingUntriaged> feature_list_set_before_test_ =
+      nullptr;
   raw_ptr<FeatureList> feature_list_set_before_case_ = nullptr;
   raw_ptr<ThreadPoolInstance> thread_pool_set_before_test_ = nullptr;
   raw_ptr<ThreadPoolInstance> thread_pool_set_before_case_ = nullptr;
diff --git a/cc/animation/scroll_offset_animation_curve.h b/cc/animation/scroll_offset_animation_curve.h
index 6fe78d64..0211d2da 100644
--- a/cc/animation/scroll_offset_animation_curve.h
+++ b/cc/animation/scroll_offset_animation_curve.h
@@ -162,7 +162,7 @@
 
   static absl::optional<double> animation_duration_for_testing_;
 
-  raw_ptr<Target> target_ = nullptr;
+  raw_ptr<Target, DanglingUntriaged> target_ = nullptr;
 };
 
 }  // namespace cc
diff --git a/cc/layers/picture_layer.h b/cc/layers/picture_layer.h
index d50c865..1d1e837 100644
--- a/cc/layers/picture_layer.h
+++ b/cc/layers/picture_layer.h
@@ -75,7 +75,7 @@
     PictureLayerInputs();
     ~PictureLayerInputs();
 
-    raw_ptr<ContentLayerClient> client = nullptr;
+    raw_ptr<ContentLayerClient, DanglingUntriaged> client = nullptr;
     bool nearest_neighbor = false;
     bool is_backdrop_filter_mask = false;
     scoped_refptr<DisplayItemList> display_list;
diff --git a/cc/layers/scrollbar_layer_unittest.cc b/cc/layers/scrollbar_layer_unittest.cc
index c78687d..b3808e3d 100644
--- a/cc/layers/scrollbar_layer_unittest.cc
+++ b/cc/layers/scrollbar_layer_unittest.cc
@@ -134,7 +134,8 @@
   }
 
  protected:
-  raw_ptr<FakeResourceTrackingUIResourceManager> fake_ui_resource_manager_;
+  raw_ptr<FakeResourceTrackingUIResourceManager, DanglingUntriaged>
+      fake_ui_resource_manager_;
   FakeLayerTreeHostClient fake_client_;
   StubLayerTreeHostSingleThreadClient single_thread_client_;
   TestTaskGraphRunner task_graph_runner_;
diff --git a/cc/layers/texture_layer_unittest.cc b/cc/layers/texture_layer_unittest.cc
index 72662a0..e118b98 100644
--- a/cc/layers/texture_layer_unittest.cc
+++ b/cc/layers/texture_layer_unittest.cc
@@ -1451,7 +1451,7 @@
   scoped_refptr<Layer> root_;
   scoped_refptr<SolidColorLayer> solid_color_layer_;
   scoped_refptr<TextureLayer> texture_layer_;
-  raw_ptr<TestLayerTreeFrameSink> frame_sink_ = nullptr;
+  raw_ptr<TestLayerTreeFrameSink, DanglingUntriaged> frame_sink_ = nullptr;
   int num_frame_sinks_created_ = 0;
 };
 
@@ -1932,7 +1932,7 @@
   scoped_refptr<CrossThreadSharedBitmap> bitmap_;
   // Keeps a pointer value of the first frame sink, which will be removed
   // from the host and destroyed.
-  raw_ptr<void> first_frame_sink_;
+  raw_ptr<void, DanglingUntriaged> first_frame_sink_;
 };
 
 SINGLE_AND_MULTI_THREAD_TEST_F(SoftwareTextureLayerLoseFrameSinkTest);
diff --git a/cc/metrics/compositor_timing_history.h b/cc/metrics/compositor_timing_history.h
index bc06c40..4a5e46b 100644
--- a/cc/metrics/compositor_timing_history.h
+++ b/cc/metrics/compositor_timing_history.h
@@ -166,7 +166,8 @@
   std::unique_ptr<UMAReporter> uma_reporter_;
 
   // Owned by LayerTreeHost and is destroyed when LayerTreeHost is destroyed.
-  raw_ptr<RenderingStatsInstrumentation> rendering_stats_instrumentation_;
+  raw_ptr<RenderingStatsInstrumentation, DanglingUntriaged>
+      rendering_stats_instrumentation_;
 };
 
 }  // namespace cc
diff --git a/cc/metrics/frame_sequence_tracker_unittest.cc b/cc/metrics/frame_sequence_tracker_unittest.cc
index 58222c0..c42b504 100644
--- a/cc/metrics/frame_sequence_tracker_unittest.cc
+++ b/cc/metrics/frame_sequence_tracker_unittest.cc
@@ -305,7 +305,7 @@
   std::unique_ptr<CompositorFrameReportingController>
       compositor_frame_reporting_controller_;
   FrameSequenceTrackerCollection collection_;
-  raw_ptr<FrameSequenceTracker> tracker_;
+  raw_ptr<FrameSequenceTracker, DanglingUntriaged> tracker_;
 };
 
 // Tests that the tracker works correctly when the source-id for the
diff --git a/cc/paint/image_transfer_cache_entry.h b/cc/paint/image_transfer_cache_entry.h
index 1ec1cc6..a68f366 100644
--- a/cc/paint/image_transfer_cache_entry.h
+++ b/cc/paint/image_transfer_cache_entry.h
@@ -175,7 +175,7 @@
   bool fits_on_gpu() const;
 
  private:
-  raw_ptr<GrDirectContext> gr_context_ = nullptr;
+  raw_ptr<GrDirectContext, DanglingUntriaged> gr_context_ = nullptr;
   raw_ptr<skgpu::graphite::Recorder> graphite_recorder_ = nullptr;
   sk_sp<SkImage> image_;
 
diff --git a/cc/paint/skottie_mru_resource_provider_unittest.cc b/cc/paint/skottie_mru_resource_provider_unittest.cc
index 4d3995e..fdd0c7d 100644
--- a/cc/paint/skottie_mru_resource_provider_unittest.cc
+++ b/cc/paint/skottie_mru_resource_provider_unittest.cc
@@ -83,7 +83,7 @@
 
   FrameDataStub frame_data_stub_;
   sk_sp<SkottieMRUResourceProvider> provider_;
-  raw_ptr<skresources::ResourceProvider> provider_base_;
+  raw_ptr<skresources::ResourceProvider, DanglingUntriaged> provider_base_;
 };
 
 TEST_F(SkottieMRUResourceProviderTest, ProvidesMostRecentFrameDataForAsset) {
diff --git a/cc/raster/gpu_raster_buffer_provider.h b/cc/raster/gpu_raster_buffer_provider.h
index 03c108b1..e9c3cf3 100644
--- a/cc/raster/gpu_raster_buffer_provider.h
+++ b/cc/raster/gpu_raster_buffer_provider.h
@@ -145,7 +145,7 @@
   const viz::SharedImageFormat tile_format_;
   const gfx::Size max_tile_size_;
 
-  const raw_ptr<RasterQueryQueue> pending_raster_queries_;
+  const raw_ptr<RasterQueryQueue, DanglingUntriaged> pending_raster_queries_;
 
   const double raster_metric_probability_;
   // Accessed with the worker context lock acquired.
diff --git a/cc/raster/raster_query_queue.h b/cc/raster/raster_query_queue.h
index 2dc0cca..0d8adf2 100644
--- a/cc/raster/raster_query_queue.h
+++ b/cc/raster/raster_query_queue.h
@@ -55,7 +55,8 @@
   virtual bool CheckRasterFinishedQueries();
 
  private:
-  const raw_ptr<viz::RasterContextProvider> worker_context_provider_;
+  const raw_ptr<viz::RasterContextProvider, DanglingUntriaged>
+      worker_context_provider_;
 
   // Note that this lock should never be acquired while holding the raster
   // context lock.
diff --git a/cc/resources/resource_pool_unittest.cc b/cc/resources/resource_pool_unittest.cc
index 173da44..26a223f 100644
--- a/cc/resources/resource_pool_unittest.cc
+++ b/cc/resources/resource_pool_unittest.cc
@@ -75,7 +75,7 @@
   }
 
   viz::TestSharedBitmapManager shared_bitmap_manager_;
-  raw_ptr<MockContextSupport> context_support_;
+  raw_ptr<MockContextSupport, DanglingUntriaged> context_support_;
   scoped_refptr<viz::TestContextProvider> context_provider_;
   std::unique_ptr<viz::ClientResourceProvider> resource_provider_;
   scoped_refptr<base::TestMockTimeTaskRunner> test_task_runner_;
diff --git a/cc/resources/scoped_ui_resource.h b/cc/resources/scoped_ui_resource.h
index b621cb1c..7a1d57d1 100644
--- a/cc/resources/scoped_ui_resource.h
+++ b/cc/resources/scoped_ui_resource.h
@@ -46,7 +46,7 @@
                    const UIResourceBitmap& bitmap);
 
   UIResourceBitmap bitmap_;
-  raw_ptr<UIResourceManager> ui_resource_manager_;
+  raw_ptr<UIResourceManager, DanglingUntriaged> ui_resource_manager_;
   UIResourceId id_;
 };
 
diff --git a/cc/scheduler/scheduler_unittest.cc b/cc/scheduler/scheduler_unittest.cc
index 97c37ab..39febd6 100644
--- a/cc/scheduler/scheduler_unittest.cc
+++ b/cc/scheduler/scheduler_unittest.cc
@@ -298,7 +298,7 @@
   viz::BeginFrameAck last_begin_frame_ack_;
   base::TimeTicks posted_begin_impl_frame_deadline_;
   std::vector<const char*> actions_;
-  raw_ptr<TestScheduler> scheduler_ = nullptr;
+  raw_ptr<TestScheduler, DanglingUntriaged> scheduler_ = nullptr;
   base::TimeDelta frame_interval_;
   absl::optional<FrameSkippedReason> last_frame_skipped_reason_;
 };
diff --git a/cc/slim/frame_sink_impl.h b/cc/slim/frame_sink_impl.h
index ae9ebd2..057b243 100644
--- a/cc/slim/frame_sink_impl.h
+++ b/cc/slim/frame_sink_impl.h
@@ -135,7 +135,8 @@
 
   mojo::AssociatedRemote<viz::mojom::CompositorFrameSink> frame_sink_remote_;
   // Separate from AssociatedRemote above for testing.
-  raw_ptr<viz::mojom::CompositorFrameSink> frame_sink_ = nullptr;
+  raw_ptr<viz::mojom::CompositorFrameSink, DanglingUntriaged> frame_sink_ =
+      nullptr;
   mojo::Receiver<viz::mojom::CompositorFrameSinkClient> client_receiver_{this};
   scoped_refptr<viz::ContextProvider> context_provider_;
   raw_ptr<FrameSinkImplClient> client_ = nullptr;
diff --git a/cc/test/fake_layer_tree_host_client.h b/cc/test/fake_layer_tree_host_client.h
index d42122c9..4d49496 100644
--- a/cc/test/fake_layer_tree_host_client.h
+++ b/cc/test/fake_layer_tree_host_client.h
@@ -27,7 +27,7 @@
 
  private:
   bool software_comp_ = true;
-  raw_ptr<LayerTreeHost> host_ = nullptr;
+  raw_ptr<LayerTreeHost, DanglingUntriaged> host_ = nullptr;
 };
 
 }  // namespace cc
diff --git a/cc/test/fake_picture_layer_tiling_client.h b/cc/test/fake_picture_layer_tiling_client.h
index bb86cc6..793d18d 100644
--- a/cc/test/fake_picture_layer_tiling_client.h
+++ b/cc/test/fake_picture_layer_tiling_client.h
@@ -72,8 +72,8 @@
   std::unique_ptr<TileManager> tile_manager_;
   scoped_refptr<RasterSource> raster_source_;
   gfx::Size tile_size_;
-  raw_ptr<PictureLayerTilingSet> twin_set_;
-  raw_ptr<PictureLayerTiling> twin_tiling_;
+  raw_ptr<PictureLayerTilingSet, DanglingUntriaged> twin_set_;
+  raw_ptr<PictureLayerTiling, DanglingUntriaged> twin_tiling_;
   gfx::Rect text_rect_;
   Region invalidation_;
   bool has_valid_tile_priorities_;
diff --git a/cc/test/layer_tree_test.cc b/cc/test/layer_tree_test.cc
index 0a02694..1928112 100644
--- a/cc/test/layer_tree_test.cc
+++ b/cc/test/layer_tree_test.cc
@@ -674,7 +674,7 @@
 
  private:
   raw_ptr<TestHooks> hooks_;
-  raw_ptr<TaskRunnerProvider> task_runner_provider_;
+  raw_ptr<TaskRunnerProvider, DanglingUntriaged> task_runner_provider_;
 };
 
 LayerTreeTest::LayerTreeTest(viz::RendererType renderer_type)
diff --git a/cc/test/test_layer_tree_host_base.h b/cc/test/test_layer_tree_host_base.h
index ae72f96..3089745 100644
--- a/cc/test/test_layer_tree_host_base.h
+++ b/cc/test/test_layer_tree_host_base.h
@@ -85,9 +85,9 @@
   std::unique_ptr<LayerTreeFrameSink> layer_tree_frame_sink_;
   std::unique_ptr<FakeLayerTreeHostImpl> host_impl_;
 
-  raw_ptr<FakePictureLayerImpl> pending_layer_;
-  raw_ptr<FakePictureLayerImpl> active_layer_;
-  raw_ptr<FakePictureLayerImpl> old_pending_layer_;
+  raw_ptr<FakePictureLayerImpl, DanglingUntriaged> pending_layer_;
+  raw_ptr<FakePictureLayerImpl, DanglingUntriaged> active_layer_;
+  raw_ptr<FakePictureLayerImpl, DanglingUntriaged> old_pending_layer_;
   const int root_id_;
   int next_layer_id_;
 };
diff --git a/cc/test/transfer_cache_test_helper.h b/cc/test/transfer_cache_test_helper.h
index d36727d0..0871dff6 100644
--- a/cc/test/transfer_cache_test_helper.h
+++ b/cc/test/transfer_cache_test_helper.h
@@ -63,7 +63,7 @@
   std::set<EntryKey> locked_entries_;
   EntryKey last_added_entry_ = {TransferCacheEntryType::kRawMemory, ~0};
 
-  raw_ptr<GrDirectContext> context_ = nullptr;
+  raw_ptr<GrDirectContext, DanglingUntriaged> context_ = nullptr;
   sk_sp<GrDirectContext> owned_context_;
   size_t cached_items_limit_ = std::numeric_limits<size_t>::max();
 };
diff --git a/cc/tiles/gpu_image_decode_cache_unittest.cc b/cc/tiles/gpu_image_decode_cache_unittest.cc
index 79bf5d9..6f5c528 100644
--- a/cc/tiles/gpu_image_decode_cache_unittest.cc
+++ b/cc/tiles/gpu_image_decode_cache_unittest.cc
@@ -130,7 +130,7 @@
   std::map<GLuint, int32_t> textures_;
   size_t live_textures_count_ = 0;
   size_t cached_textures_limit_ = std::numeric_limits<size_t>::max();
-  raw_ptr<viz::TestGLES2Interface> gl_ = nullptr;
+  raw_ptr<viz::TestGLES2Interface, DanglingUntriaged> gl_ = nullptr;
 };
 
 class FakeGPUImageDecodeTestGLES2Interface : public viz::TestGLES2Interface,
diff --git a/cc/trees/damage_tracker_unittest.cc b/cc/trees/damage_tracker_unittest.cc
index 67abf2d..4f9c65d 100644
--- a/cc/trees/damage_tracker_unittest.cc
+++ b/cc/trees/damage_tracker_unittest.cc
@@ -351,8 +351,12 @@
     host_impl()->active_tree()->DetachLayersKeepingRootLayerForTesting();
     host_impl()->active_tree()->property_trees()->clear();
     child_layers_.clear();
-    child1_ = child2_ = grand_child1_ = grand_child2_ = grand_child3_ =
-        grand_child4_ = nullptr;
+    child1_ = nullptr;
+    child2_ = nullptr;
+    grand_child1_ = nullptr;
+    grand_child2_ = nullptr;
+    grand_child3_ = nullptr;
+    grand_child4_ = nullptr;
   }
 
   // Stores result of CreateTestTreeWithOneSurface().
@@ -361,8 +365,8 @@
   // Store result of CreateTestTreeWithTwoSurfaces().
   raw_ptr<TestLayerImpl> child1_ = nullptr;
   raw_ptr<TestLayerImpl> child2_ = nullptr;
-  raw_ptr<TestLayerImpl> grand_child1_ = nullptr;
-  raw_ptr<TestLayerImpl> grand_child2_ = nullptr;
+  raw_ptr<TestLayerImpl, DanglingUntriaged> grand_child1_ = nullptr;
+  raw_ptr<TestLayerImpl, DanglingUntriaged> grand_child2_ = nullptr;
   raw_ptr<TestLayerImpl> grand_child3_ = nullptr;
   raw_ptr<TestLayerImpl> grand_child4_ = nullptr;
 };
diff --git a/cc/trees/layer_tree_host_unittest.cc b/cc/trees/layer_tree_host_unittest.cc
index 9587111..667e1c1 100644
--- a/cc/trees/layer_tree_host_unittest.cc
+++ b/cc/trees/layer_tree_host_unittest.cc
@@ -626,8 +626,8 @@
                  void(bool aggressively_free_resources));
   };
 
-  raw_ptr<MockContextSupport> mock_main_context_support_;
-  raw_ptr<MockContextSupport> mock_worker_context_support_;
+  raw_ptr<MockContextSupport, DanglingUntriaged> mock_main_context_support_;
+  raw_ptr<MockContextSupport, DanglingUntriaged> mock_worker_context_support_;
 };
 
 // Test if the LTH successfully frees resources on the main/worker
@@ -1498,7 +1498,7 @@
   }
 
  private:
-  raw_ptr<Layer> root_;
+  raw_ptr<Layer, DanglingUntriaged> root_;
   scoped_refptr<Layer> child_a_;
   scoped_refptr<Layer> child_b_;
   scoped_refptr<Layer> child_c_;
@@ -5995,8 +5995,8 @@
 
  private:
   FakeContentLayerClient client_;
-  raw_ptr<Layer> root_layer_;
-  raw_ptr<ScrollElasticityHelper> scroll_elasticity_helper_;
+  raw_ptr<Layer, DanglingUntriaged> root_layer_;
+  raw_ptr<ScrollElasticityHelper, DanglingUntriaged> scroll_elasticity_helper_;
   int content_layer_id_;
   int num_draws_;
 };
@@ -6672,8 +6672,8 @@
   }
 
   FakeContentLayerClient layer_client_;
-  raw_ptr<FakePictureLayer> layer_;
-  raw_ptr<FakeRecordingSource> recording_source_;
+  raw_ptr<FakePictureLayer, DanglingUntriaged> layer_;
+  raw_ptr<FakeRecordingSource, DanglingUntriaged> recording_source_;
 };
 
 MULTI_THREAD_TEST_F(LayerTreeHostTestGpuRasterizationDisabled);
@@ -6724,8 +6724,8 @@
   }
 
   FakeContentLayerClient layer_client_;
-  raw_ptr<FakePictureLayer> layer_;
-  raw_ptr<FakeRecordingSource> recording_source_;
+  raw_ptr<FakePictureLayer, DanglingUntriaged> layer_;
+  raw_ptr<FakeRecordingSource, DanglingUntriaged> recording_source_;
 };
 
 MULTI_THREAD_TEST_F(LayerTreeHostTestGpuRasterizationSupportedButDisabled);
@@ -6773,8 +6773,8 @@
   }
 
   FakeContentLayerClient layer_client_;
-  raw_ptr<FakePictureLayer> layer_;
-  raw_ptr<FakeRecordingSource> recording_source_;
+  raw_ptr<FakePictureLayer, DanglingUntriaged> layer_;
+  raw_ptr<FakeRecordingSource, DanglingUntriaged> recording_source_;
 };
 
 SINGLE_AND_MULTI_THREAD_TEST_F(LayerTreeHostTestGpuRasterizationEnabled);
@@ -6839,8 +6839,8 @@
   }
 
   FakeContentLayerClient layer_client_;
-  raw_ptr<FakePictureLayer> layer_;
-  raw_ptr<FakeRecordingSource> recording_source_;
+  raw_ptr<FakePictureLayer, DanglingUntriaged> layer_;
+  raw_ptr<FakeRecordingSource, DanglingUntriaged> recording_source_;
 };
 
 MULTI_THREAD_TEST_F(LayerTreeHostTestGpuRasterizationEnabledWithMSAA);
@@ -10671,7 +10671,7 @@
   }
 
  private:
-  raw_ptr<TestLayerTreeFrameSink> layer_tree_frame_sink_;
+  raw_ptr<TestLayerTreeFrameSink, DanglingUntriaged> layer_tree_frame_sink_;
 };
 MULTI_THREAD_TEST_F(LayerTreeHostTestBeginFramePausedChanged);
 
diff --git a/cc/trees/layer_tree_host_unittest_context.cc b/cc/trees/layer_tree_host_unittest_context.cc
index 84be598..f23be55 100644
--- a/cc/trees/layer_tree_host_unittest_context.cc
+++ b/cc/trees/layer_tree_host_unittest_context.cc
@@ -163,8 +163,8 @@
   // Protects use of gl_ so LoseContext and
   // CreateDisplayLayerTreeFrameSink can both use it on different threads.
   base::Lock gl_lock_;
-  raw_ptr<viz::TestGLES2Interface> gl_ = nullptr;
-  raw_ptr<viz::TestSharedImageInterface> sii_ = nullptr;
+  raw_ptr<viz::TestGLES2Interface, DanglingUntriaged> gl_ = nullptr;
+  raw_ptr<viz::TestSharedImageInterface, DanglingUntriaged> sii_ = nullptr;
 
   int times_to_fail_create_;
   int times_to_lose_during_commit_;
@@ -698,7 +698,7 @@
  protected:
   bool lose_after_evict_;
   FakeContentLayerClient client_;
-  raw_ptr<LayerTreeHostImpl> impl_host_;
+  raw_ptr<LayerTreeHostImpl, DanglingUntriaged> impl_host_;
   int num_commits_;
   bool lost_context_;
 };
diff --git a/cc/trees/layer_tree_host_unittest_copyrequest.cc b/cc/trees/layer_tree_host_unittest_copyrequest.cc
index 766e1d9..e430daf 100644
--- a/cc/trees/layer_tree_host_unittest_copyrequest.cc
+++ b/cc/trees/layer_tree_host_unittest_copyrequest.cc
@@ -611,7 +611,7 @@
 
   viz::AggregatedRenderPassId parent_render_pass_id;
   viz::AggregatedRenderPassId copy_layer_render_pass_id;
-  raw_ptr<TestLayerTreeFrameSink> frame_sink_ = nullptr;
+  raw_ptr<TestLayerTreeFrameSink, DanglingUntriaged> frame_sink_ = nullptr;
   bool did_swap_ = false;
   FakeContentLayerClient client_;
   scoped_refptr<FakePictureLayer> root_;
diff --git a/cc/trees/layer_tree_host_unittest_scroll.cc b/cc/trees/layer_tree_host_unittest_scroll.cc
index d6e20e4..ec267486 100644
--- a/cc/trees/layer_tree_host_unittest_scroll.cc
+++ b/cc/trees/layer_tree_host_unittest_scroll.cc
@@ -751,8 +751,8 @@
   gfx::PointF final_scroll_offset_;
 
   scoped_refptr<Layer> child_layer_;
-  raw_ptr<Layer> expected_scroll_layer_;
-  raw_ptr<Layer> expected_no_scroll_layer_;
+  raw_ptr<Layer, DanglingUntriaged> expected_scroll_layer_;
+  raw_ptr<Layer, DanglingUntriaged> expected_no_scroll_layer_;
 };
 
 TEST_F(LayerTreeHostScrollTestCaseWithChild, DeviceScaleFactor1_ScrollChild) {
@@ -2401,7 +2401,7 @@
   // These values should be used on the impl thread only.
   int num_begin_main_frames_impl_thread_;
   MockInputHandlerClient input_handler_client_;
-  raw_ptr<ScrollElasticityHelper> scroll_elasticity_helper_;
+  raw_ptr<ScrollElasticityHelper, DanglingUntriaged> scroll_elasticity_helper_;
 
   // These values should be used on the main thread only.
   int num_begin_main_frames_main_thread_;
diff --git a/cc/trees/layer_tree_impl.h b/cc/trees/layer_tree_impl.h
index 18deef8..d2a7b44 100644
--- a/cc/trees/layer_tree_impl.h
+++ b/cc/trees/layer_tree_impl.h
@@ -837,7 +837,7 @@
   int source_frame_number_;
   uint64_t trace_id_ = 0;
   int is_first_frame_after_commit_tracker_;
-  raw_ptr<HeadsUpDisplayLayerImpl> hud_layer_;
+  raw_ptr<HeadsUpDisplayLayerImpl, DanglingUntriaged> hud_layer_;
   PropertyTrees property_trees_;
   SkColor4f background_color_;
 
diff --git a/cc/trees/occlusion_tracker.h b/cc/trees/occlusion_tracker.h
index c208550..49fc054 100644
--- a/cc/trees/occlusion_tracker.h
+++ b/cc/trees/occlusion_tracker.h
@@ -62,7 +62,7 @@
   struct StackObject {
     StackObject() : target(nullptr) {}
     explicit StackObject(const RenderSurfaceImpl* target) : target(target) {}
-    raw_ptr<const RenderSurfaceImpl> target;
+    raw_ptr<const RenderSurfaceImpl, DanglingUntriaged> target;
     SimpleEnclosedRegion occlusion_from_outside_target;
     SimpleEnclosedRegion occlusion_from_inside_target;
     bool ignores_parent_occlusion = false;
diff --git a/cc/trees/ukm_manager_unittest.cc b/cc/trees/ukm_manager_unittest.cc
index c46d6e9..a90d6ef 100644
--- a/cc/trees/ukm_manager_unittest.cc
+++ b/cc/trees/ukm_manager_unittest.cc
@@ -234,7 +234,7 @@
     return breakdown;
   }
 
-  raw_ptr<ukm::TestUkmRecorder> test_ukm_recorder_;
+  raw_ptr<ukm::TestUkmRecorder, DanglingUntriaged> test_ukm_recorder_;
   std::unique_ptr<UkmManager> manager_;
   base::SimpleTestTickClock test_tick_clock_;
 };
diff --git a/chrome/browser/apps/app_service/publishers/publisher_unittest.cc b/chrome/browser/apps/app_service/publishers/publisher_unittest.cc
index c4cfe6bd..3e15a56 100644
--- a/chrome/browser/apps/app_service/publishers/publisher_unittest.cc
+++ b/chrome/browser/apps/app_service/publishers/publisher_unittest.cc
@@ -473,7 +473,8 @@
   base::test::ScopedFeatureList scoped_feature_list_;
 
  private:
-  raw_ptr<web_app::TestWebAppUrlLoader> url_loader_ = nullptr;
+  raw_ptr<web_app::TestWebAppUrlLoader, DanglingUntriaged> url_loader_ =
+      nullptr;
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   std::unique_ptr<crosapi::FakeBrowserManager> browser_manager_;
 #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
diff --git a/chrome/browser/background/background_mode_manager_unittest.cc b/chrome/browser/background/background_mode_manager_unittest.cc
index 02bca12..0e499bc 100644
--- a/chrome/browser/background/background_mode_manager_unittest.cc
+++ b/chrome/browser/background/background_mode_manager_unittest.cc
@@ -292,7 +292,7 @@
 
   std::unique_ptr<TestingProfileManager> profile_manager_;
   // Test profile used by all tests - this is owned by profile_manager_.
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
 
  private:
   // Required for extension service.
diff --git a/chrome/browser/badging/badge_manager.h b/chrome/browser/badging/badge_manager.h
index d732c789..47439f7 100644
--- a/chrome/browser/badging/badge_manager.h
+++ b/chrome/browser/badging/badge_manager.h
@@ -177,11 +177,11 @@
   void SetBadge(blink::mojom::BadgeValuePtr value) override;
   void ClearBadge() override;
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 
   raw_ptr<const base::Clock> clock_;
 
-  raw_ptr<web_app::WebAppSyncBridge> sync_bridge_;
+  raw_ptr<web_app::WebAppSyncBridge, DanglingUntriaged> sync_bridge_;
 
   // All the mojo receivers for the BadgeManager. Keeps track of the
   // render_frame the binding is associated with, so as to not have to rely
diff --git a/chrome/browser/badging/badge_manager_delegate.h b/chrome/browser/badging/badge_manager_delegate.h
index 9c299760..c441ccf6 100644
--- a/chrome/browser/badging/badge_manager_delegate.h
+++ b/chrome/browser/badging/badge_manager_delegate.h
@@ -35,7 +35,7 @@
 
  private:
   // The profile the badge manager delegate is associated with.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   // The badge manager that owns this delegate.
   raw_ptr<BadgeManager> badge_manager_;
 };
diff --git a/chrome/browser/badging/badge_manager_unittest.cc b/chrome/browser/badging/badge_manager_unittest.cc
index 14d0e4dd..b403ffe0 100644
--- a/chrome/browser/badging/badge_manager_unittest.cc
+++ b/chrome/browser/badging/badge_manager_unittest.cc
@@ -95,8 +95,8 @@
   web_app::WebAppProvider& provider() { return *provider_; }
 
  private:
-  raw_ptr<TestBadgeManagerDelegate> delegate_;
-  raw_ptr<web_app::FakeWebAppProvider> provider_;
+  raw_ptr<TestBadgeManagerDelegate, DanglingUntriaged> delegate_;
+  raw_ptr<web_app::FakeWebAppProvider, DanglingUntriaged> provider_;
 
   content::BrowserTaskEnvironment task_environment_;
   std::unique_ptr<TestingProfile> profile_;
diff --git a/chrome/browser/browser_switcher/browser_switcher_navigation_throttle_unittest.cc b/chrome/browser/browser_switcher/browser_switcher_navigation_throttle_unittest.cc
index ce7a16dc..f1a25186 100644
--- a/chrome/browser/browser_switcher/browser_switcher_navigation_throttle_unittest.cc
+++ b/chrome/browser/browser_switcher/browser_switcher_navigation_throttle_unittest.cc
@@ -87,7 +87,7 @@
   Decision go() { return {kGo, kSitelist, bogus_rule_.get()}; }
 
  private:
-  raw_ptr<MockBrowserSwitcherSitelist> sitelist_;
+  raw_ptr<MockBrowserSwitcherSitelist, DanglingUntriaged> sitelist_;
 
   std::unique_ptr<Rule> bogus_rule_ =
       CanonicalizeRule("//example.com/", ParsingMode::kDefault);
diff --git a/chrome/browser/browsing_data/chrome_browsing_data_model_delegate.h b/chrome/browser/browsing_data/chrome_browsing_data_model_delegate.h
index 46f5b1a..18adeee 100644
--- a/chrome/browser/browsing_data/chrome_browsing_data_model_delegate.h
+++ b/chrome/browser/browsing_data/chrome_browsing_data_model_delegate.h
@@ -54,8 +54,9 @@
   ChromeBrowsingDataModelDelegate(Profile* profile,
                                   content::StoragePartition* storage_partition);
 
-  const raw_ptr<Profile> profile_;
-  const raw_ptr<content::StoragePartition> storage_partition_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
+  const raw_ptr<content::StoragePartition, DanglingUntriaged>
+      storage_partition_;
 };
 
 #endif  // CHROME_BROWSER_BROWSING_DATA_CHROME_BROWSING_DATA_MODEL_DELEGATE_H_
diff --git a/chrome/browser/cart/fetch_discount_worker.h b/chrome/browser/cart/fetch_discount_worker.h
index 15d5ecc2..b961718cf 100644
--- a/chrome/browser/cart/fetch_discount_worker.h
+++ b/chrome/browser/cart/fetch_discount_worker.h
@@ -42,7 +42,7 @@
   virtual void UpdateFreeListingCoupons(const CouponService::CouponsMap& map);
 
  private:
-  raw_ptr<CartService> cart_service_;
+  raw_ptr<CartService, DanglingUntriaged> cart_service_;
 };
 
 // This is used to fetch discounts for active Carts in cart_db. It starts
@@ -96,7 +96,8 @@
   // This is used to fetch the oauth token.
   std::unique_ptr<const signin::PrimaryAccountAccessTokenFetcher>
       access_token_fetcher_;
-  const raw_ptr<variations::VariationsClient> chrome_variations_client_;
+  const raw_ptr<variations::VariationsClient, DanglingUntriaged>
+      chrome_variations_client_;
 
   // This is run in the UI thread, it loads all active carts.
   void PrepareToFetch();
diff --git a/chrome/browser/complex_tasks/task_tab_helper_unittest.cc b/chrome/browser/complex_tasks/task_tab_helper_unittest.cc
index f2ce03be..c043f30 100644
--- a/chrome/browser/complex_tasks/task_tab_helper_unittest.cc
+++ b/chrome/browser/complex_tasks/task_tab_helper_unittest.cc
@@ -71,7 +71,7 @@
     return web_contents()->GetController().GetLastCommittedEntry();
   }
 
-  raw_ptr<MockTaskTabHelper> task_tab_helper_;
+  raw_ptr<MockTaskTabHelper, DanglingUntriaged> task_tab_helper_;
 };
 
 TEST_F(TaskTabHelperUnitTest, TestGetCurrentTaskId) {
diff --git a/chrome/browser/component_updater/subresource_filter_component_installer_unittest.cc b/chrome/browser/component_updater/subresource_filter_component_installer_unittest.cc
index d16ecc9..a36c8f1 100644
--- a/chrome/browser/component_updater/subresource_filter_component_installer_unittest.cc
+++ b/chrome/browser/component_updater/subresource_filter_component_installer_unittest.cc
@@ -186,7 +186,8 @@
   std::unique_ptr<SubresourceFilterComponentInstallerPolicy> policy_;
   TestingPrefServiceSimple pref_service_;
 
-  raw_ptr<TestRulesetService> test_ruleset_service_ = nullptr;
+  raw_ptr<TestRulesetService, DanglingUntriaged> test_ruleset_service_ =
+      nullptr;
 };
 
 TEST_F(SubresourceFilterComponentInstallerTest,
diff --git a/chrome/browser/content_settings/sound_content_setting_observer_unittest.cc b/chrome/browser/content_settings/sound_content_setting_observer_unittest.cc
index b0b0e7d..b4ee8886 100644
--- a/chrome/browser/content_settings/sound_content_setting_observer_unittest.cc
+++ b/chrome/browser/content_settings/sound_content_setting_observer_unittest.cc
@@ -109,7 +109,7 @@
 #endif
 
  private:
-  raw_ptr<HostContentSettingsMap> host_content_settings_map_;
+  raw_ptr<HostContentSettingsMap, DanglingUntriaged> host_content_settings_map_;
   std::unique_ptr<ukm::TestUkmRecorder> test_ukm_recorder_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
diff --git a/chrome/browser/device_identity/device_oauth2_token_service_unittest.cc b/chrome/browser/device_identity/device_oauth2_token_service_unittest.cc
index 1fafd393..ab25c47 100644
--- a/chrome/browser/device_identity/device_oauth2_token_service_unittest.cc
+++ b/chrome/browser/device_identity/device_oauth2_token_service_unittest.cc
@@ -211,7 +211,7 @@
   std::unique_ptr<DeviceOAuth2TokenService, TokenServiceDeleter>
       oauth2_service_;
   TestingOAuth2AccessTokenManagerConsumer consumer_;
-  raw_ptr<MockDeviceOAuth2TokenStore> token_store_;
+  raw_ptr<MockDeviceOAuth2TokenStore, DanglingUntriaged> token_store_;
 };
 
 void DeviceOAuth2TokenServiceTest::ReturnOAuthUrlFetchResults(
diff --git a/chrome/browser/dips/dips_service_unittest.cc b/chrome/browser/dips/dips_service_unittest.cc
index 3e310c4..43cbd48 100644
--- a/chrome/browser/dips/dips_service_unittest.cc
+++ b/chrome/browser/dips/dips_service_unittest.cc
@@ -270,8 +270,9 @@
   base::SimpleTestClock clock_;
 
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<content_settings::CookieSettings> cookie_settings_ = nullptr;
-  raw_ptr<DIPSService> service_ = nullptr;
+  raw_ptr<content_settings::CookieSettings, DanglingUntriaged>
+      cookie_settings_ = nullptr;
+  raw_ptr<DIPSService, DanglingUntriaged> service_ = nullptr;
 };
 
 TEST_F(DIPSServiceStateRemovalTest,
diff --git a/chrome/browser/download/bubble/download_bubble_prefs_unittest.cc b/chrome/browser/download/bubble/download_bubble_prefs_unittest.cc
index 39cdd23..e1271ca 100644
--- a/chrome/browser/download/bubble/download_bubble_prefs_unittest.cc
+++ b/chrome/browser/download/bubble/download_bubble_prefs_unittest.cc
@@ -52,7 +52,7 @@
   }
 
  protected:
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   base::test::ScopedFeatureList feature_list_;
 
   void ExpectFeatureFlagEnabledStatus(bool expect_enabled) {
diff --git a/chrome/browser/download/bubble/download_bubble_ui_controller.h b/chrome/browser/download/bubble/download_bubble_ui_controller.h
index 347f0554..1e2ccd3 100644
--- a/chrome/browser/download/bubble/download_bubble_ui_controller.h
+++ b/chrome/browser/download/bubble/download_bubble_ui_controller.h
@@ -118,7 +118,7 @@
 
   raw_ptr<Browser, DanglingUntriaged> browser_;
   raw_ptr<Profile, DanglingUntriaged> profile_;
-  raw_ptr<DownloadBubbleUpdateService> update_service_;
+  raw_ptr<DownloadBubbleUpdateService, DanglingUntriaged> update_service_;
   raw_ptr<OfflineItemModelManager, DanglingUntriaged> offline_manager_;
 
   // DownloadDisplayController and DownloadBubbleUIController have the same
diff --git a/chrome/browser/download/bubble/download_bubble_ui_controller_unittest.cc b/chrome/browser/download/bubble/download_bubble_ui_controller_unittest.cc
index 8667ecd..970ec55 100644
--- a/chrome/browser/download/bubble/download_bubble_ui_controller_unittest.cc
+++ b/chrome/browser/download/bubble/download_bubble_ui_controller_unittest.cc
@@ -343,7 +343,7 @@
       second_display_controller_;
   std::vector<std::unique_ptr<StrictMockDownloadItem>> items_;
   OfflineItemList offline_items_;
-  raw_ptr<NiceMock<content::MockDownloadManager>> manager_;
+  raw_ptr<NiceMock<content::MockDownloadManager>, DanglingUntriaged> manager_;
   TestingProfileManager testing_profile_manager_;
   std::unique_ptr<
       NiceMock<offline_items_collection::MockOfflineContentProvider>>
diff --git a/chrome/browser/download/bubble/download_bubble_update_service_unittest.cc b/chrome/browser/download/bubble/download_bubble_update_service_unittest.cc
index 1bbc7c9..0cc4cf6 100644
--- a/chrome/browser/download/bubble/download_bubble_update_service_unittest.cc
+++ b/chrome/browser/download/bubble/download_bubble_update_service_unittest.cc
@@ -285,15 +285,17 @@
   base::test::ScopedFeatureList feature_list_;
   content::BrowserTaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
-  raw_ptr<NiceMock<content::MockDownloadManager>> download_manager_ = nullptr;
+  raw_ptr<NiceMock<content::MockDownloadManager>, DanglingUntriaged>
+      download_manager_ = nullptr;
   std::vector<std::unique_ptr<NiceMockDownloadItem>> download_items_;
   std::vector<offline_items_collection::OfflineItem> offline_items_;
   TestingProfileManager testing_profile_manager_;
-  raw_ptr<TestingProfile> profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_ = nullptr;
   std::unique_ptr<
       NiceMock<offline_items_collection::MockOfflineContentProvider>>
       offline_content_provider_;
-  raw_ptr<DownloadBubbleUpdateService> update_service_ = nullptr;
+  raw_ptr<DownloadBubbleUpdateService, DanglingUntriaged> update_service_ =
+      nullptr;
 };
 
 TEST_F(DownloadBubbleUpdateServiceTest, PopulatesCaches) {
@@ -904,11 +906,12 @@
   }
 
  protected:
-  raw_ptr<Profile> incognito_profile_ = nullptr;
-  raw_ptr<NiceMock<content::MockDownloadManager>> incognito_download_manager_ =
-      nullptr;
+  raw_ptr<Profile, DanglingUntriaged> incognito_profile_ = nullptr;
+  raw_ptr<NiceMock<content::MockDownloadManager>, DanglingUntriaged>
+      incognito_download_manager_ = nullptr;
   std::vector<std::unique_ptr<NiceMockDownloadItem>> incognito_download_items_;
-  raw_ptr<DownloadBubbleUpdateService> incognito_update_service_ = nullptr;
+  raw_ptr<DownloadBubbleUpdateService, DanglingUntriaged>
+      incognito_update_service_ = nullptr;
 };
 
 // Tests that initializing an update service for an incognito profile sets both
diff --git a/chrome/browser/download/bubble/download_display_controller.h b/chrome/browser/download/bubble/download_display_controller.h
index bb4b9ec..0f05fae 100644
--- a/chrome/browser/download/bubble/download_display_controller.h
+++ b/chrome/browser/download/bubble/download_display_controller.h
@@ -176,7 +176,7 @@
   // DownloadDisplayController and DownloadBubbleUIController have the same
   // lifetime. Both are owned, constructed together, and destructed together by
   // DownloadToolbarButtonView. If one is valid, so is the other.
-  raw_ptr<DownloadBubbleUIController> bubble_controller_;
+  raw_ptr<DownloadBubbleUIController, DanglingUntriaged> bubble_controller_;
 
   base::WeakPtrFactory<DownloadDisplayController> weak_factory_{this};
 };
diff --git a/chrome/browser/download/bubble/download_display_controller_unittest.cc b/chrome/browser/download/bubble/download_display_controller_unittest.cc
index cc2cc4bc..9c6f2b0 100644
--- a/chrome/browser/download/bubble/download_display_controller_unittest.cc
+++ b/chrome/browser/download/bubble/download_display_controller_unittest.cc
@@ -110,7 +110,7 @@
   bool detail_shown_ = false;
   bool is_fullscreen_ = false;
   bool should_show_exclusive_access_bubble_ = true;
-  raw_ptr<DownloadDisplayController> controller_ = nullptr;
+  raw_ptr<DownloadDisplayController, DanglingUntriaged> controller_ = nullptr;
 };
 
 // TODO(chlily): Pull this and the very similar class in
diff --git a/chrome/browser/download/chrome_download_manager_delegate.h b/chrome/browser/download/chrome_download_manager_delegate.h
index 0b45382..367cabb 100644
--- a/chrome/browser/download/chrome_download_manager_delegate.h
+++ b/chrome/browser/download/chrome_download_manager_delegate.h
@@ -338,7 +338,7 @@
       const base::FilePath& target_path);
 #endif
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
 #if BUILDFLAG(IS_ANDROID)
   std::unique_ptr<DownloadDialogBridge> download_dialog_bridge_;
diff --git a/chrome/browser/download/chrome_download_manager_delegate_unittest.cc b/chrome/browser/download/chrome_download_manager_delegate_unittest.cc
index 658a4c1..de5b907e 100644
--- a/chrome/browser/download/chrome_download_manager_delegate_unittest.cc
+++ b/chrome/browser/download/chrome_download_manager_delegate_unittest.cc
@@ -339,7 +339,8 @@
 
  private:
   base::FilePath test_download_dir_;
-  raw_ptr<sync_preferences::TestingPrefServiceSyncable> pref_service_;
+  raw_ptr<sync_preferences::TestingPrefServiceSyncable, DanglingUntriaged>
+      pref_service_;
   std::unique_ptr<content::MockDownloadManager> download_manager_;
   std::unique_ptr<TestChromeDownloadManagerDelegate> delegate_;
   MockWebContentsDelegate web_contents_delegate_;
diff --git a/chrome/browser/download/download_history_unittest.cc b/chrome/browser/download/download_history_unittest.cc
index 7ac29ca6..7b4b6286 100644
--- a/chrome/browser/download/download_history_unittest.cc
+++ b/chrome/browser/download/download_history_unittest.cc
@@ -501,9 +501,10 @@
   content::BrowserTaskEnvironment task_environment_;
   std::vector<std::unique_ptr<StrictMockDownloadItem>> items_;
   std::unique_ptr<NiceMock<content::MockDownloadManager>> manager_;
-  raw_ptr<FakeHistoryAdapter> history_ = nullptr;
+  raw_ptr<FakeHistoryAdapter, DanglingUntriaged> history_ = nullptr;
   std::unique_ptr<DownloadHistory> download_history_;
-  raw_ptr<content::DownloadManager::Observer> manager_observer_ = nullptr;
+  raw_ptr<content::DownloadManager::Observer, DanglingUntriaged>
+      manager_observer_ = nullptr;
   size_t download_created_index_ = 0;
   base::test::ScopedFeatureList feature_list_;
   TestingProfile profile_;
diff --git a/chrome/browser/download/download_item_model_unittest.cc b/chrome/browser/download/download_item_model_unittest.cc
index 05363bb..fbb238c 100644
--- a/chrome/browser/download/download_item_model_unittest.cc
+++ b/chrome/browser/download/download_item_model_unittest.cc
@@ -96,7 +96,7 @@
 
   ChromeDownloadManagerDelegate* GetDownloadManagerDelegate() override;
 
-  raw_ptr<ChromeDownloadManagerDelegate> delegate_;
+  raw_ptr<ChromeDownloadManagerDelegate, DanglingUntriaged> delegate_;
 };
 
 TestDownloadCoreService::TestDownloadCoreService(Profile* profile)
diff --git a/chrome/browser/download/download_status_updater_unittest.cc b/chrome/browser/download/download_status_updater_unittest.cc
index abe9a26..db86f1a 100644
--- a/chrome/browser/download/download_status_updater_unittest.cc
+++ b/chrome/browser/download/download_status_updater_unittest.cc
@@ -205,7 +205,7 @@
 
   // Pointer so we can verify that destruction triggers appropriate
   // changes.
-  raw_ptr<TestDownloadStatusUpdater> updater_;
+  raw_ptr<TestDownloadStatusUpdater, DanglingUntriaged> updater_;
 
   // Thread so that the DownloadManager (which is a DeleteOnUIThread
   // object) can be deleted.
diff --git a/chrome/browser/download/download_ui_controller_unittest.cc b/chrome/browser/download/download_ui_controller_unittest.cc
index 71a1337..e483f10c 100644
--- a/chrome/browser/download/download_ui_controller_unittest.cc
+++ b/chrome/browser/download/download_ui_controller_unittest.cc
@@ -161,7 +161,7 @@
   RAW_PTR_EXCLUSION download::DownloadItem* notified_item_;
   base::WeakPtrFactory<download::DownloadItem*> notified_item_receiver_factory_;
 
-  raw_ptr<HistoryAdapter> history_adapter_;
+  raw_ptr<HistoryAdapter, DanglingUntriaged> history_adapter_;
 };
 
 // static
diff --git a/chrome/browser/engagement/important_sites_util_unittest.cc b/chrome/browser/engagement/important_sites_util_unittest.cc
index 249d9b3..0b313f3 100644
--- a/chrome/browser/engagement/important_sites_util_unittest.cc
+++ b/chrome/browser/engagement/important_sites_util_unittest.cc
@@ -126,7 +126,7 @@
   }
 
  private:
-  raw_ptr<BookmarkModel> model_ = nullptr;
+  raw_ptr<BookmarkModel, DanglingUntriaged> model_ = nullptr;
 };
 
 TEST_F(ImportantSitesUtilTest, TestNoImportantSites) {
diff --git a/chrome/browser/engagement/site_engagement_service_unittest.cc b/chrome/browser/engagement/site_engagement_service_unittest.cc
index 62847fe..7ef5259 100644
--- a/chrome/browser/engagement/site_engagement_service_unittest.cc
+++ b/chrome/browser/engagement/site_engagement_service_unittest.cc
@@ -280,7 +280,7 @@
   }
 
   base::ScopedTempDir temp_dir_;
-  raw_ptr<SiteEngagementService> service_;
+  raw_ptr<SiteEngagementService, DanglingUntriaged> service_;
   base::SimpleTestClock clock_;
 };
 
diff --git a/chrome/browser/enterprise/connectors/device_trust/attestation/desktop/desktop_attestation_service.h b/chrome/browser/enterprise/connectors/device_trust/attestation/desktop/desktop_attestation_service.h
index 6abf2a6..01880931 100644
--- a/chrome/browser/enterprise/connectors/device_trust/attestation/desktop/desktop_attestation_service.h
+++ b/chrome/browser/enterprise/connectors/device_trust/attestation/desktop/desktop_attestation_service.h
@@ -78,7 +78,7 @@
   // Owned by the CBCMController, which is eventually owned by the browser
   // process. Since the current service is owned at the profile level, this
   // respects the browser shutdown sequence.
-  raw_ptr<DeviceTrustKeyManager> key_manager_;
+  raw_ptr<DeviceTrustKeyManager, DanglingUntriaged> key_manager_;
 
   // Used for retrieving a managed devices customer ID.
   const raw_ptr<policy::CloudPolicyStore> browser_cloud_policy_store_;
diff --git a/chrome/browser/enterprise/connectors/device_trust/key_management/browser/device_trust_key_manager_impl_unittest.cc b/chrome/browser/enterprise/connectors/device_trust/key_management/browser/device_trust_key_manager_impl_unittest.cc
index 022fbb5..1f011cc 100644
--- a/chrome/browser/enterprise/connectors/device_trust/key_management/browser/device_trust_key_manager_impl_unittest.cc
+++ b/chrome/browser/enterprise/connectors/device_trust/key_management/browser/device_trust_key_manager_impl_unittest.cc
@@ -166,7 +166,8 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
 
-  raw_ptr<StrictMock<MockKeyRotationLauncher>> mock_launcher_;
+  raw_ptr<StrictMock<MockKeyRotationLauncher>, DanglingUntriaged>
+      mock_launcher_;
 
   std::unique_ptr<DeviceTrustKeyManagerImpl> key_manager_;
 };
diff --git a/chrome/browser/enterprise/connectors/device_trust/key_management/browser/key_rotation_launcher_unittest.cc b/chrome/browser/enterprise/connectors/device_trust/key_management/browser/key_rotation_launcher_unittest.cc
index eb849df..a12bd12 100644
--- a/chrome/browser/enterprise/connectors/device_trust/key_management/browser/key_rotation_launcher_unittest.cc
+++ b/chrome/browser/enterprise/connectors/device_trust/key_management/browser/key_rotation_launcher_unittest.cc
@@ -115,7 +115,8 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   base::HistogramTester histogram_tester_;
   network::TestURLLoaderFactory test_url_loader_factory_;
-  raw_ptr<testing::StrictMock<test::MockKeyRotationCommand>> mock_command_;
+  raw_ptr<testing::StrictMock<test::MockKeyRotationCommand>, DanglingUntriaged>
+      mock_command_;
   ScopedKeyRotationCommandFactory scoped_command_factory_;
   policy::FakeBrowserDMTokenStorage fake_dm_token_storage_;
   testing::StrictMock<policy::MockJobCreationHandler> job_creation_handler_;
diff --git a/chrome/browser/enterprise/connectors/device_trust/key_management/installer/key_rotation_manager_unittest.cc b/chrome/browser/enterprise/connectors/device_trust/key_management/installer/key_rotation_manager_unittest.cc
index 77ebb08..7e68b19 100644
--- a/chrome/browser/enterprise/connectors/device_trust/key_management/installer/key_rotation_manager_unittest.cc
+++ b/chrome/browser/enterprise/connectors/device_trust/key_management/installer/key_rotation_manager_unittest.cc
@@ -207,11 +207,13 @@
   std::unique_ptr<base::HistogramTester> histogram_tester_;
   std::unique_ptr<crypto::UnexportableKeyProvider> key_provider_;
 
-  raw_ptr<StrictMock<MockKeyNetworkDelegate>> mock_network_delegate_;
-  raw_ptr<StrictMock<MockKeyPersistenceDelegate>> mock_persistence_delegate_;
+  raw_ptr<StrictMock<MockKeyNetworkDelegate>, DanglingUntriaged>
+      mock_network_delegate_;
+  raw_ptr<StrictMock<MockKeyPersistenceDelegate>, DanglingUntriaged>
+      mock_persistence_delegate_;
 
-  raw_ptr<SigningKeyPair> old_key_pair_;
-  raw_ptr<SigningKeyPair> new_key_pair_;
+  raw_ptr<SigningKeyPair, DanglingUntriaged> old_key_pair_;
+  raw_ptr<SigningKeyPair, DanglingUntriaged> new_key_pair_;
   absl::optional<std::string> captured_upload_body_;
 
   std::unique_ptr<KeyRotationManager> key_rotation_manager_;
diff --git a/chrome/browser/enterprise/connectors/device_trust/key_management/installer/management_service/rotate_util_unittest.cc b/chrome/browser/enterprise/connectors/device_trust/key_management/installer/management_service/rotate_util_unittest.cc
index 1c2f199..14d754e3 100644
--- a/chrome/browser/enterprise/connectors/device_trust/key_management/installer/management_service/rotate_util_unittest.cc
+++ b/chrome/browser/enterprise/connectors/device_trust/key_management/installer/management_service/rotate_util_unittest.cc
@@ -88,8 +88,9 @@
     return command_line;
   }
 
-  raw_ptr<MockKeyNetworkDelegate> mock_network_delegate_;
-  raw_ptr<MockKeyPersistenceDelegate> mock_persistence_delegate_;
+  raw_ptr<MockKeyNetworkDelegate, DanglingUntriaged> mock_network_delegate_;
+  raw_ptr<MockKeyPersistenceDelegate, DanglingUntriaged>
+      mock_persistence_delegate_;
   std::unique_ptr<KeyRotationManager> key_rotation_manager_;
   test::ScopedKeyPersistenceDelegateFactory scoped_factory_;
   base::test::TaskEnvironment task_environment_;
diff --git a/chrome/browser/enterprise/connectors/device_trust/navigation_throttle_unittest.cc b/chrome/browser/enterprise/connectors/device_trust/navigation_throttle_unittest.cc
index abe11eb..b8eddcb2 100644
--- a/chrome/browser/enterprise/connectors/device_trust/navigation_throttle_unittest.cc
+++ b/chrome/browser/enterprise/connectors/device_trust/navigation_throttle_unittest.cc
@@ -235,7 +235,7 @@
       mock_user_permission_service_;
   std::unique_ptr<FakeDeviceTrustConnectorService> fake_connector_;
   base::HistogramTester histogram_tester_;
-  raw_ptr<MockConsentRequester> mock_consent_requester_;
+  raw_ptr<MockConsentRequester, DanglingUntriaged> mock_consent_requester_;
 };
 
 TEST_F(DeviceTrustNavigationThrottleTest, ExpectHeaderDeviceTrustOnRequest) {
diff --git a/chrome/browser/enterprise/idle/action.cc b/chrome/browser/enterprise/idle/action.cc
index 6f6bdd0..bb921a3 100644
--- a/chrome/browser/enterprise/idle/action.cc
+++ b/chrome/browser/enterprise/idle/action.cc
@@ -238,7 +238,8 @@
   }
 
   base::flat_set<ActionType> action_types_;
-  raw_ptr<content::BrowsingDataRemover> browsing_data_remover_for_testing_;
+  raw_ptr<content::BrowsingDataRemover, DanglingUntriaged>
+      browsing_data_remover_for_testing_;
   base::ScopedObservation<content::BrowsingDataRemover,
                           content::BrowsingDataRemover::Observer>
       observation_{this};
diff --git a/chrome/browser/enterprise/idle/action.h b/chrome/browser/enterprise/idle/action.h
index 92abed4c..7dbde4a2 100644
--- a/chrome/browser/enterprise/idle/action.h
+++ b/chrome/browser/enterprise/idle/action.h
@@ -112,7 +112,8 @@
 
   ActionFactory();
 
-  raw_ptr<content::BrowsingDataRemover> browsing_data_remover_for_testing_;
+  raw_ptr<content::BrowsingDataRemover, DanglingUntriaged>
+      browsing_data_remover_for_testing_;
 };
 
 IdleDialog::ActionSet ActionsToActionSet(
diff --git a/chrome/browser/enterprise/reporting/profile_report_generator_delegate_base.h b/chrome/browser/enterprise/reporting/profile_report_generator_delegate_base.h
index 1aa4502..1e80034 100644
--- a/chrome/browser/enterprise/reporting/profile_report_generator_delegate_base.h
+++ b/chrome/browser/enterprise/reporting/profile_report_generator_delegate_base.h
@@ -45,7 +45,7 @@
   policy::MachineLevelUserCloudPolicyManager* GetCloudPolicyManager() final;
 
  protected:
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 };
 
 }  // namespace enterprise_reporting
diff --git a/chrome/browser/enterprise/reporting/report_scheduler_unittest.cc b/chrome/browser/enterprise/reporting/report_scheduler_unittest.cc
index acf7492b..baa141a2 100644
--- a/chrome/browser/enterprise/reporting/report_scheduler_unittest.cc
+++ b/chrome/browser/enterprise/reporting/report_scheduler_unittest.cc
@@ -331,12 +331,13 @@
   ReportingDelegateFactoryDesktop report_delegate_factory_;
 #endif  // BUILDFLAG(IS_ANDROID)
   std::unique_ptr<ReportScheduler> scheduler_;
-  raw_ptr<policy::MockCloudPolicyClient> client_;
-  raw_ptr<MockReportGenerator> generator_;
-  raw_ptr<MockReportUploader> uploader_;
-  raw_ptr<MockRealTimeReportGenerator> real_time_generator_;
-  raw_ptr<MockRealTimeUploader> extension_request_uploader_;
-  raw_ptr<MockChromeProfileRequestGenerator> profile_request_generator_;
+  raw_ptr<policy::MockCloudPolicyClient, DanglingUntriaged> client_;
+  raw_ptr<MockReportGenerator, DanglingUntriaged> generator_;
+  raw_ptr<MockReportUploader, DanglingUntriaged> uploader_;
+  raw_ptr<MockRealTimeReportGenerator, DanglingUntriaged> real_time_generator_;
+  raw_ptr<MockRealTimeUploader, DanglingUntriaged> extension_request_uploader_;
+  raw_ptr<MockChromeProfileRequestGenerator, DanglingUntriaged>
+      profile_request_generator_;
 #if !BUILDFLAG(IS_CHROMEOS_ASH)
   policy::FakeBrowserDMTokenStorage storage_;
 #endif
diff --git a/chrome/browser/enterprise/signals/client_certificate_fetcher_unittest.cc b/chrome/browser/enterprise/signals/client_certificate_fetcher_unittest.cc
index 85b1a25..af24377 100644
--- a/chrome/browser/enterprise/signals/client_certificate_fetcher_unittest.cc
+++ b/chrome/browser/enterprise/signals/client_certificate_fetcher_unittest.cc
@@ -118,7 +118,7 @@
 
  private:
   content::BrowserTaskEnvironment task_environment_;
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   std::unique_ptr<TestingProfileManager> profile_manager_;
 
   std::vector<scoped_refptr<net::X509Certificate>> client_certs_;
diff --git a/chrome/browser/enterprise/util/managed_browser_utils_unittest.cc b/chrome/browser/enterprise/util/managed_browser_utils_unittest.cc
index 8b220c6..c3f54e0 100644
--- a/chrome/browser/enterprise/util/managed_browser_utils_unittest.cc
+++ b/chrome/browser/enterprise/util/managed_browser_utils_unittest.cc
@@ -160,7 +160,7 @@
   scoped_refptr<net::X509Certificate> client_1_;
   scoped_refptr<net::X509Certificate> client_2_;
 
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   std::unique_ptr<TestingProfileManager> profile_manager_;
 };
 
diff --git a/chrome/browser/extensions/activity_log/activity_database_unittest.cc b/chrome/browser/extensions/activity_log/activity_database_unittest.cc
index d096baf..9e69024 100644
--- a/chrome/browser/extensions/activity_log/activity_database_unittest.cc
+++ b/chrome/browser/extensions/activity_log/activity_database_unittest.cc
@@ -150,7 +150,7 @@
   }
 
  private:
-  raw_ptr<ActivityDatabaseTestPolicy> db_delegate_;
+  raw_ptr<ActivityDatabaseTestPolicy, DanglingUntriaged> db_delegate_;
 };
 
 // Check that the database is initialized properly.
diff --git a/chrome/browser/extensions/activity_log/activity_log_unittest.cc b/chrome/browser/extensions/activity_log/activity_log_unittest.cc
index ab57b9b8..49a2c19 100644
--- a/chrome/browser/extensions/activity_log/activity_log_unittest.cc
+++ b/chrome/browser/extensions/activity_log/activity_log_unittest.cc
@@ -282,7 +282,7 @@
     }
   }
 
-  raw_ptr<ExtensionService> extension_service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_;
 };
 
 TEST_F(ActivityLogTest, Construct) {
diff --git a/chrome/browser/extensions/activity_log/counting_policy_unittest.cc b/chrome/browser/extensions/activity_log/counting_policy_unittest.cc
index d61c188..df9b4f9c 100644
--- a/chrome/browser/extensions/activity_log/counting_policy_unittest.cc
+++ b/chrome/browser/extensions/activity_log/counting_policy_unittest.cc
@@ -381,7 +381,7 @@
 
  protected:
   base::SimpleTestClock mock_clock_;
-  raw_ptr<ExtensionService> extension_service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_;
   std::unique_ptr<TestingProfile> profile_;
   content::BrowserTaskEnvironment task_environment_;
 
diff --git a/chrome/browser/extensions/activity_log/fullstream_ui_policy_unittest.cc b/chrome/browser/extensions/activity_log/fullstream_ui_policy_unittest.cc
index 66d7265..247626c 100644
--- a/chrome/browser/extensions/activity_log/fullstream_ui_policy_unittest.cc
+++ b/chrome/browser/extensions/activity_log/fullstream_ui_policy_unittest.cc
@@ -326,7 +326,7 @@
   }
 
  protected:
-  raw_ptr<ExtensionService> extension_service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_;
   std::unique_ptr<TestingProfile> profile_;
   content::BrowserTaskEnvironment task_environment_;
 
diff --git a/chrome/browser/extensions/api/declarative_content/chrome_content_rules_registry_unittest.cc b/chrome/browser/extensions/api/declarative_content/chrome_content_rules_registry_unittest.cc
index 00a1a3a..bb339043 100644
--- a/chrome/browser/extensions/api/declarative_content/chrome_content_rules_registry_unittest.cc
+++ b/chrome/browser/extensions/api/declarative_content/chrome_content_rules_registry_unittest.cc
@@ -37,7 +37,7 @@
   }
 
  private:
-  raw_ptr<ContentPredicateEvaluator> evaluator_;
+  raw_ptr<ContentPredicateEvaluator, DanglingUntriaged> evaluator_;
 };
 
 class TestPredicateEvaluator : public ContentPredicateEvaluator {
diff --git a/chrome/browser/extensions/api/device_permissions_manager_unittest.cc b/chrome/browser/extensions/api/device_permissions_manager_unittest.cc
index fb27a6f..b33630ea 100644
--- a/chrome/browser/extensions/api/device_permissions_manager_unittest.cc
+++ b/chrome/browser/extensions/api/device_permissions_manager_unittest.cc
@@ -88,7 +88,7 @@
   void TearDown() override { env_.reset(nullptr); }
 
   std::unique_ptr<extensions::TestExtensionEnvironment> env_;
-  raw_ptr<const extensions::Extension> extension_;
+  raw_ptr<const extensions::Extension, DanglingUntriaged> extension_;
   device::FakeUsbDeviceManager fake_usb_manager_;
   device::mojom::UsbDeviceInfoPtr device0_;
   device::mojom::UsbDeviceInfoPtr device1_;
diff --git a/chrome/browser/extensions/api/enterprise_reporting_private/enterprise_reporting_private_unittest.cc b/chrome/browser/extensions/api/enterprise_reporting_private/enterprise_reporting_private_unittest.cc
index e35d50e..4710cb8c 100644
--- a/chrome/browser/extensions/api/enterprise_reporting_private/enterprise_reporting_private_unittest.cc
+++ b/chrome/browser/extensions/api/enterprise_reporting_private/enterprise_reporting_private_unittest.cc
@@ -1313,7 +1313,8 @@
         enterprise_signals::features::kNewEvSignalsEnabled);
   }
 
-  raw_ptr<device_signals::MockSignalsAggregator> mock_aggregator_;
+  raw_ptr<device_signals::MockSignalsAggregator, DanglingUntriaged>
+      mock_aggregator_;
   base::test::ScopedFeatureList scoped_features_;
   base::HistogramTester histogram_tester_;
 };
diff --git a/chrome/browser/extensions/api/passwords_private/passwords_private_delegate_impl_unittest.cc b/chrome/browser/extensions/api/passwords_private/passwords_private_delegate_impl_unittest.cc
index c54dd4d..bb52fc7f9 100644
--- a/chrome/browser/extensions/api/passwords_private/passwords_private_delegate_impl_unittest.cc
+++ b/chrome/browser/extensions/api/passwords_private/passwords_private_delegate_impl_unittest.cc
@@ -340,10 +340,11 @@
   }
 
  protected:
-  raw_ptr<extensions::TestEventRouter> event_router_ = nullptr;
+  raw_ptr<extensions::TestEventRouter, DanglingUntriaged> event_router_ =
+      nullptr;
   scoped_refptr<TestPasswordStore> profile_store_;
   scoped_refptr<TestPasswordStore> account_store_;
-  raw_ptr<ui::TestClipboard> test_clipboard_;
+  raw_ptr<ui::TestClipboard, DanglingUntriaged> test_clipboard_;
   scoped_refptr<device_reauth::MockDeviceAuthenticator>
       biometric_authenticator_;
 
diff --git a/chrome/browser/extensions/api/storage/settings_sync_unittest.cc b/chrome/browser/extensions/api/storage/settings_sync_unittest.cc
index 0903d66..7da5b556 100644
--- a/chrome/browser/extensions/api/storage/settings_sync_unittest.cc
+++ b/chrome/browser/extensions/api/storage/settings_sync_unittest.cc
@@ -293,7 +293,7 @@
   std::unique_ptr<MockSyncChangeProcessor> sync_processor_;
   std::unique_ptr<syncer::SyncChangeProcessorWrapperForTest>
       sync_processor_wrapper_;
-  raw_ptr<SyncValueStoreCache> sync_cache_;
+  raw_ptr<SyncValueStoreCache, DanglingUntriaged> sync_cache_;
 };
 
 // Get a semblance of coverage for both EXTENSION_SETTINGS and APP_SETTINGS
diff --git a/chrome/browser/extensions/api/tabs/tabs_api.h b/chrome/browser/extensions/api/tabs/tabs_api.h
index 05e976fd..73c3897 100644
--- a/chrome/browser/extensions/api/tabs/tabs_api.h
+++ b/chrome/browser/extensions/api/tabs/tabs_api.h
@@ -143,7 +143,7 @@
                  std::string* error);
   ResponseValue GetResult();
 
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 
  private:
   ResponseAction Run() override;
diff --git a/chrome/browser/extensions/api/webstore_private/webstore_private_unittest.cc b/chrome/browser/extensions/api/webstore_private/webstore_private_unittest.cc
index 094233d..bc0e2df 100644
--- a/chrome/browser/extensions/api/webstore_private/webstore_private_unittest.cc
+++ b/chrome/browser/extensions/api/webstore_private/webstore_private_unittest.cc
@@ -318,7 +318,7 @@
   ExtensionService* extension_service() { return service_; }
 
  private:
-  raw_ptr<ExtensionService> service_ = nullptr;
+  raw_ptr<ExtensionService, DanglingUntriaged> service_ = nullptr;
 };
 
 TEST_F(WebstorePrivateBeginInstallWithManifest3Test,
diff --git a/chrome/browser/extensions/chrome_app_sorting_unittest.cc b/chrome/browser/extensions/chrome_app_sorting_unittest.cc
index 4d6f85a4..1afcef0 100644
--- a/chrome/browser/extensions/chrome_app_sorting_unittest.cc
+++ b/chrome/browser/extensions/chrome_app_sorting_unittest.cc
@@ -607,8 +607,8 @@
 
  protected:
   // Weak references, for convenience.
-  raw_ptr<Extension> app1_;
-  raw_ptr<Extension> app2_;
+  raw_ptr<Extension, DanglingUntriaged> app1_;
+  raw_ptr<Extension, DanglingUntriaged> app2_;
 
  private:
   scoped_refptr<Extension> app1_scoped_;
diff --git a/chrome/browser/extensions/corrupted_extension_reinstaller.h b/chrome/browser/extensions/corrupted_extension_reinstaller.h
index 83a4b62..6d50e6d63 100644
--- a/chrome/browser/extensions/corrupted_extension_reinstaller.h
+++ b/chrome/browser/extensions/corrupted_extension_reinstaller.h
@@ -124,7 +124,7 @@
   base::TimeDelta GetNextFireDelay();
   void ScheduleNextReinstallAttempt();
 
-  const raw_ptr<content::BrowserContext> context_ = nullptr;
+  const raw_ptr<content::BrowserContext, DanglingUntriaged> context_ = nullptr;
 
   // A set of extension ids that are being reinstalled due to corruption, mapped
   // to the time we detected the corruption.
diff --git a/chrome/browser/extensions/extension_action_icon_factory_unittest.cc b/chrome/browser/extensions/extension_action_icon_factory_unittest.cc
index 748a8e47..a4a9ed1 100644
--- a/chrome/browser/extensions/extension_action_icon_factory_unittest.cc
+++ b/chrome/browser/extensions/extension_action_icon_factory_unittest.cc
@@ -173,7 +173,7 @@
   content::BrowserTaskEnvironment task_environment_;
   bool quit_in_icon_updated_;
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<ExtensionService> extension_service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   ash::ScopedCrosSettingsTestHelper cros_settings_test_helper_;
diff --git a/chrome/browser/extensions/extension_action_runner_unittest.cc b/chrome/browser/extensions/extension_action_runner_unittest.cc
index 8583bed0..af1d21d 100644
--- a/chrome/browser/extensions/extension_action_runner_unittest.cc
+++ b/chrome/browser/extensions/extension_action_runner_unittest.cc
@@ -87,7 +87,8 @@
   void SetUp() override;
 
   // The associated ExtensionActionRunner.
-  raw_ptr<ExtensionActionRunner> extension_action_runner_ = nullptr;
+  raw_ptr<ExtensionActionRunner, DanglingUntriaged> extension_action_runner_ =
+      nullptr;
 
   // The map of observed executions, keyed by extension id.
   std::map<std::string, int> extension_executions_;
diff --git a/chrome/browser/extensions/extension_context_menu_model.h b/chrome/browser/extensions/extension_context_menu_model.h
index 6c292b42..5a692e90 100644
--- a/chrome/browser/extensions/extension_context_menu_model.h
+++ b/chrome/browser/extensions/extension_context_menu_model.h
@@ -173,7 +173,7 @@
 
   // The extension action of the extension we are displaying the menu for (if
   // it has one, otherwise NULL).
-  raw_ptr<ExtensionAction> extension_action_;
+  raw_ptr<ExtensionAction, DanglingUntriaged> extension_action_;
 
   const raw_ptr<Browser> browser_;
 
diff --git a/chrome/browser/extensions/extension_error_ui_default.cc b/chrome/browser/extensions/extension_error_ui_default.cc
index f9ac8abd..3d5533df 100644
--- a/chrome/browser/extensions/extension_error_ui_default.cc
+++ b/chrome/browser/extensions/extension_error_ui_default.cc
@@ -197,7 +197,7 @@
   }
 
   raw_ptr<ExtensionErrorUI::Delegate> delegate_;
-  raw_ptr<ManagementPolicy> management_policy_;
+  raw_ptr<ManagementPolicy, DanglingUntriaged> management_policy_;
   int app_count_ = 0;
   int extension_count_ = 0;
   bool item_blocked_by_policy_exists_ = false;
diff --git a/chrome/browser/extensions/extension_install_prompt.h b/chrome/browser/extensions/extension_install_prompt.h
index 3b8c9b2b..fed985d 100644
--- a/chrome/browser/extensions/extension_install_prompt.h
+++ b/chrome/browser/extensions/extension_install_prompt.h
@@ -355,7 +355,7 @@
   // install and returns true. Otherwise returns false.
   bool AutoConfirmPromptIfEnabled();
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   base::ThreadChecker ui_thread_checker_;
 
diff --git a/chrome/browser/extensions/extension_install_prompt_show_params.h b/chrome/browser/extensions/extension_install_prompt_show_params.h
index 5909d5d6..2d7f38f 100644
--- a/chrome/browser/extensions/extension_install_prompt_show_params.h
+++ b/chrome/browser/extensions/extension_install_prompt_show_params.h
@@ -57,7 +57,7 @@
   bool WasParentDestroyed();
 
  private:
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   base::WeakPtr<content::WebContents> parent_web_contents_;
 
diff --git a/chrome/browser/extensions/extension_message_bubble_controller.h b/chrome/browser/extensions/extension_message_bubble_controller.h
index 3bbd2fd..06e5c31 100644
--- a/chrome/browser/extensions/extension_message_bubble_controller.h
+++ b/chrome/browser/extensions/extension_message_bubble_controller.h
@@ -205,7 +205,7 @@
   void OnClose();
 
   // A weak pointer to the Browser we are associated with. Not owned by us.
-  const raw_ptr<Browser> browser_;
+  const raw_ptr<Browser, DanglingUntriaged> browser_;
 
   // The associated ToolbarActionsModel. Not owned.
   raw_ptr<ToolbarActionsModel> model_;
diff --git a/chrome/browser/extensions/extension_message_bubble_controller_unittest.cc b/chrome/browser/extensions/extension_message_bubble_controller_unittest.cc
index 61a82a4..9fd6b847 100644
--- a/chrome/browser/extensions/extension_message_bubble_controller_unittest.cc
+++ b/chrome/browser/extensions/extension_message_bubble_controller_unittest.cc
@@ -186,7 +186,7 @@
 
   bool is_closed_;
   ExtensionBubbleAction action_;
-  raw_ptr<ExtensionMessageBubbleController> controller_;
+  raw_ptr<ExtensionMessageBubbleController, DanglingUntriaged> controller_;
 };
 
 class ExtensionMessageBubbleTest : public BrowserWithTestWindowTest {
@@ -425,7 +425,7 @@
   }
 
  protected:
-  raw_ptr<ExtensionService> service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> service_;
 
  private:
   std::unique_ptr<base::CommandLine> command_line_;
diff --git a/chrome/browser/extensions/extension_service_test_base.h b/chrome/browser/extensions/extension_service_test_base.h
index 6e04679f..c097736b 100644
--- a/chrome/browser/extensions/extension_service_test_base.h
+++ b/chrome/browser/extensions/extension_service_test_base.h
@@ -216,7 +216,7 @@
 
   // The ExtensionService, whose lifetime is managed by |profile|'s
   // ExtensionSystem.
-  raw_ptr<ExtensionService> service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> service_;
   ScopedTestingLocalState testing_local_state_;
 
  private:
@@ -233,7 +233,7 @@
   content::InProcessUtilityThreadHelper in_process_utility_thread_helper_;
 
   // The associated ExtensionRegistry, for convenience.
-  raw_ptr<extensions::ExtensionRegistry> registry_;
+  raw_ptr<extensions::ExtensionRegistry, DanglingUntriaged> registry_;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   ash::ScopedCrosSettingsTestHelper cros_settings_test_helper_;
diff --git a/chrome/browser/extensions/extension_service_test_with_install.h b/chrome/browser/extensions/extension_service_test_with_install.h
index 06b32362..b9b3403f 100644
--- a/chrome/browser/extensions/extension_service_test_with_install.h
+++ b/chrome/browser/extensions/extension_service_test_with_install.h
@@ -166,7 +166,7 @@
                           int creation_flags);
 
   extensions::ExtensionList loaded_extensions_;
-  raw_ptr<const Extension> installed_extension_;
+  raw_ptr<const Extension, DanglingUntriaged> installed_extension_;
   bool was_update_;
   std::string old_name_;
   std::string unloaded_id_;
diff --git a/chrome/browser/extensions/extension_util_unittest.cc b/chrome/browser/extensions/extension_util_unittest.cc
index 4c5e320d..c0ca42a 100644
--- a/chrome/browser/extensions/extension_util_unittest.cc
+++ b/chrome/browser/extensions/extension_util_unittest.cc
@@ -45,7 +45,7 @@
   }
 
  protected:
-  raw_ptr<TestingProfile> signin_profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> signin_profile_;
 
  private:
   std::unique_ptr<TestingProfileManager> testing_profile_manager_;
diff --git a/chrome/browser/extensions/extension_web_ui_unittest.cc b/chrome/browser/extensions/extension_web_ui_unittest.cc
index 07628df..3aa6862 100644
--- a/chrome/browser/extensions/extension_web_ui_unittest.cc
+++ b/chrome/browser/extensions/extension_web_ui_unittest.cc
@@ -71,7 +71,7 @@
   }
 
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<ExtensionService> extension_service_;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_;
   content::BrowserTaskEnvironment task_environment_;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
diff --git a/chrome/browser/extensions/external_install_manager.h b/chrome/browser/extensions/external_install_manager.h
index 41ee12762..117a941 100644
--- a/chrome/browser/extensions/external_install_manager.h
+++ b/chrome/browser/extensions/external_install_manager.h
@@ -110,7 +110,8 @@
   std::set<ExtensionId> shown_ids_;
 
   // The error that is currently showing an alert dialog/bubble.
-  raw_ptr<ExternalInstallError> currently_visible_install_alert_;
+  raw_ptr<ExternalInstallError, DanglingUntriaged>
+      currently_visible_install_alert_;
 
   base::ScopedObservation<ExtensionRegistry, ExtensionRegistryObserver>
       extension_registry_observation_{this};
diff --git a/chrome/browser/extensions/external_provider_impl.h b/chrome/browser/extensions/external_provider_impl.h
index 858e8ac2..62cc915b 100644
--- a/chrome/browser/extensions/external_provider_impl.h
+++ b/chrome/browser/extensions/external_provider_impl.h
@@ -144,7 +144,7 @@
   scoped_refptr<ExternalLoader> loader_;
 
   // The profile that will be used to install external extensions.
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Creation flags to use for the extension.  These flags will be used
   // when calling Extension::Create() by the crx installer.
diff --git a/chrome/browser/extensions/forced_extensions/force_installed_metrics_unittest.cc b/chrome/browser/extensions/forced_extensions/force_installed_metrics_unittest.cc
index 27354461..2d825a7 100644
--- a/chrome/browser/extensions/forced_extensions/force_installed_metrics_unittest.cc
+++ b/chrome/browser/extensions/forced_extensions/force_installed_metrics_unittest.cc
@@ -226,7 +226,7 @@
 
  protected:
   base::HistogramTester histogram_tester_;
-  raw_ptr<base::MockOneShotTimer> fake_timer_;
+  raw_ptr<base::MockOneShotTimer, DanglingUntriaged> fake_timer_;
   std::unique_ptr<ForceInstalledMetrics> metrics_;
 };
 
diff --git a/chrome/browser/extensions/pending_extension_manager.h b/chrome/browser/extensions/pending_extension_manager.h
index c87ebe1..04f8349 100644
--- a/chrome/browser/extensions/pending_extension_manager.h
+++ b/chrome/browser/extensions/pending_extension_manager.h
@@ -178,7 +178,7 @@
   void AddToMap(const std::string& id, PendingExtensionInfo info);
 
   // The BrowserContext with which the manager is associated.
-  raw_ptr<content::BrowserContext> context_;
+  raw_ptr<content::BrowserContext, DanglingUntriaged> context_;
 
   std::map<std::string, PendingExtensionInfo> pending_extensions_;
 
diff --git a/chrome/browser/extensions/test_extension_environment.h b/chrome/browser/extensions/test_extension_environment.h
index a0d48be..678ebaff 100644
--- a/chrome/browser/extensions/test_extension_environment.h
+++ b/chrome/browser/extensions/test_extension_environment.h
@@ -114,7 +114,7 @@
 #endif
 
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<ExtensionService> extension_service_ = nullptr;
+  raw_ptr<ExtensionService, DanglingUntriaged> extension_service_ = nullptr;
 };
 
 }  // namespace extensions
diff --git a/chrome/browser/extensions/unpacked_installer.h b/chrome/browser/extensions/unpacked_installer.h
index 8b0e8468..fed94e7 100644
--- a/chrome/browser/extensions/unpacked_installer.h
+++ b/chrome/browser/extensions/unpacked_installer.h
@@ -148,7 +148,7 @@
   base::WeakPtr<ExtensionService> service_weak_;
 
   // The Profile the extension is being installed in.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // The pathname of the directory to load from, which is an absolute path
   // after GetAbsolutePath has been called.
diff --git a/chrome/browser/extensions/update_install_gate.h b/chrome/browser/extensions/update_install_gate.h
index a5b275c..8c67378 100644
--- a/chrome/browser/extensions/update_install_gate.h
+++ b/chrome/browser/extensions/update_install_gate.h
@@ -25,7 +25,7 @@
 
  private:
   // Not owned.
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 };
 
 }  // namespace extensions
diff --git a/chrome/browser/extensions/update_install_gate_unittest.cc b/chrome/browser/extensions/update_install_gate_unittest.cc
index d1395b18..2f18c25 100644
--- a/chrome/browser/extensions/update_install_gate_unittest.cc
+++ b/chrome/browser/extensions/update_install_gate_unittest.cc
@@ -215,14 +215,14 @@
   // and RenderProcessHosts.
   content::RenderViewHostTestEnabler render_view_host_test_enabler_;
 
-  raw_ptr<TestingProfile> profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_ = nullptr;
   std::unique_ptr<TestingProfileManager> profile_manager_;
   std::unique_ptr<content::RenderProcessHost> render_process_host_;
 
-  raw_ptr<TestExtensionSystem> system_ = nullptr;
-  raw_ptr<ExtensionService> service_ = nullptr;
-  raw_ptr<ExtensionRegistry> registry_ = nullptr;
-  raw_ptr<EventRouter> event_router_ = nullptr;
+  raw_ptr<TestExtensionSystem, DanglingUntriaged> system_ = nullptr;
+  raw_ptr<ExtensionService, DanglingUntriaged> service_ = nullptr;
+  raw_ptr<ExtensionRegistry, DanglingUntriaged> registry_ = nullptr;
+  raw_ptr<EventRouter, DanglingUntriaged> event_router_ = nullptr;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   // Needed for creating ExtensionService.
diff --git a/chrome/browser/extensions/updater/extension_updater.h b/chrome/browser/extensions/updater/extension_updater.h
index 1b192828..ac6741e 100644
--- a/chrome/browser/extensions/updater/extension_updater.h
+++ b/chrome/browser/extensions/updater/extension_updater.h
@@ -327,11 +327,11 @@
   base::TimeDelta frequency_;
   bool will_check_soon_ = false;
 
-  raw_ptr<ExtensionPrefs> extension_prefs_ = nullptr;
-  raw_ptr<PrefService> prefs_ = nullptr;
-  raw_ptr<Profile> profile_ = nullptr;
+  raw_ptr<ExtensionPrefs, DanglingUntriaged> extension_prefs_ = nullptr;
+  raw_ptr<PrefService, DanglingUntriaged> prefs_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> profile_ = nullptr;
 
-  raw_ptr<ExtensionRegistry> registry_ = nullptr;
+  raw_ptr<ExtensionRegistry, DanglingUntriaged> registry_ = nullptr;
 
   std::map<int, InProgressCheck> requests_in_progress_;
   int next_request_id_ = 0;
@@ -340,7 +340,7 @@
   // when OnInstallerDone is called.
   std::map<base::UnguessableToken, FetchedCRXFile> running_crx_installs_;
 
-  raw_ptr<ExtensionCache> extension_cache_ = nullptr;
+  raw_ptr<ExtensionCache, DanglingUntriaged> extension_cache_ = nullptr;
 
   base::RepeatingClosure updating_started_callback_;
 
diff --git a/chrome/browser/extensions/updater/extension_updater_unittest.cc b/chrome/browser/extensions/updater/extension_updater_unittest.cc
index ee0c6517..d9550a71 100644
--- a/chrome/browser/extensions/updater/extension_updater_unittest.cc
+++ b/chrome/browser/extensions/updater/extension_updater_unittest.cc
@@ -273,7 +273,7 @@
   }
 
  protected:
-  const raw_ptr<TestExtensionPrefs> prefs_;
+  const raw_ptr<TestExtensionPrefs, DanglingUntriaged> prefs_;
   PendingExtensionManager pending_extension_manager_;
   CorruptedExtensionReinstaller corrupted_extension_reinstaller_;
 
diff --git a/chrome/browser/feed/web_feed_tab_helper_unittest.cc b/chrome/browser/feed/web_feed_tab_helper_unittest.cc
index 2332bd99..a3b396f 100644
--- a/chrome/browser/feed/web_feed_tab_helper_unittest.cc
+++ b/chrome/browser/feed/web_feed_tab_helper_unittest.cc
@@ -80,8 +80,9 @@
 
  private:
   base::test::ScopedFeatureList feature_list_;
-  raw_ptr<WebFeedTabHelper> tab_helper_;  // Owned by WebContents.
-  raw_ptr<TestWebFeedInfoFinder>
+  raw_ptr<WebFeedTabHelper, DanglingUntriaged>
+      tab_helper_;  // Owned by WebContents.
+  raw_ptr<TestWebFeedInfoFinder, DanglingUntriaged>
       web_feed_info_finder_;  // Owned by WebFeedTabHelper.
   std::unique_ptr<content::NavigationSimulator> navigation_simulator_;
 
diff --git a/chrome/browser/feedback/system_logs/log_sources/performance_log_source_unittest.cc b/chrome/browser/feedback/system_logs/log_sources/performance_log_source_unittest.cc
index fba8f26..6fe6170 100644
--- a/chrome/browser/feedback/system_logs/log_sources/performance_log_source_unittest.cc
+++ b/chrome/browser/feedback/system_logs/log_sources/performance_log_source_unittest.cc
@@ -113,7 +113,8 @@
   performance_manager::user_tuning::TestUserPerformanceTuningManagerEnvironment
       environment_;
   raw_ptr<TestingPrefServiceSimple> local_state_ = nullptr;
-  raw_ptr<performance_manager::user_tuning::UserPerformanceTuningManager>
+  raw_ptr<performance_manager::user_tuning::UserPerformanceTuningManager,
+          DanglingUntriaged>
       tuning_manager_ = nullptr;
 };
 
diff --git a/chrome/browser/first_party_sets/first_party_sets_navigation_throttle_unittest.cc b/chrome/browser/first_party_sets/first_party_sets_navigation_throttle_unittest.cc
index 7fe23e5..dc41fdd7 100644
--- a/chrome/browser/first_party_sets/first_party_sets_navigation_throttle_unittest.cc
+++ b/chrome/browser/first_party_sets/first_party_sets_navigation_throttle_unittest.cc
@@ -64,9 +64,9 @@
 
  private:
   base::test::ScopedFeatureList features_;
-  raw_ptr<content::RenderFrameHost> subframe_;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> subframe_;
   ScopedMockFirstPartySetsHandler first_party_sets_handler_;
-  raw_ptr<FirstPartySetsPolicyService> service_;
+  raw_ptr<FirstPartySetsPolicyService, DanglingUntriaged> service_;
 };
 
 TEST_F(FirstPartySetsNavigationThrottleTest,
diff --git a/chrome/browser/first_party_sets/first_party_sets_policy_service_unittest.cc b/chrome/browser/first_party_sets/first_party_sets_policy_service_unittest.cc
index 5a9aa67..a7baac5 100644
--- a/chrome/browser/first_party_sets/first_party_sets_policy_service_unittest.cc
+++ b/chrome/browser/first_party_sets/first_party_sets_policy_service_unittest.cc
@@ -219,9 +219,9 @@
  private:
   ScopedMockFirstPartySetsHandler first_party_sets_handler_;
   std::unique_ptr<TestingProfileManager> profile_manager_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   base::test::ScopedFeatureList features_;
-  raw_ptr<FirstPartySetsPolicyService> service_;
+  raw_ptr<FirstPartySetsPolicyService, DanglingUntriaged> service_;
 };
 
 TEST_F(FirstPartySetsPolicyServiceTest, IsSiteInManagedSet_WithoutConfig) {
diff --git a/chrome/browser/hid/chrome_hid_delegate_unittest.cc b/chrome/browser/hid/chrome_hid_delegate_unittest.cc
index d87dba81..02ba9190 100644
--- a/chrome/browser/hid/chrome_hid_delegate_unittest.cc
+++ b/chrome/browser/hid/chrome_hid_delegate_unittest.cc
@@ -824,9 +824,10 @@
   }
 
  protected:
-  raw_ptr<TestingProfile> profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_ = nullptr;
   GURL origin_url_;
-  raw_ptr<MockHidConnectionTracker> hid_connection_tracker_ = nullptr;
+  raw_ptr<MockHidConnectionTracker, DanglingUntriaged> hid_connection_tracker_ =
+      nullptr;
   // This flag is expected to be set to true only for the scenario of extension
   // origin and kEnableWebHidOnExtensionServiceWorker enabled.
   bool supports_hid_connection_tracker_ = false;
diff --git a/chrome/browser/hid/hid_connection_tracker_unittest.cc b/chrome/browser/hid/hid_connection_tracker_unittest.cc
index 9707d92..3009cf8b9 100644
--- a/chrome/browser/hid/hid_connection_tracker_unittest.cc
+++ b/chrome/browser/hid/hid_connection_tracker_unittest.cc
@@ -297,8 +297,8 @@
 #endif  // BUILDFLAG(ENABLE_EXTENSIONS)
 
  private:
-  raw_ptr<HidConnectionTracker> hid_connection_tracker_;
-  raw_ptr<MockHidSystemTrayIcon> hid_system_tray_icon_;
+  raw_ptr<HidConnectionTracker, DanglingUntriaged> hid_connection_tracker_;
+  raw_ptr<MockHidSystemTrayIcon, DanglingUntriaged> hid_system_tray_icon_;
 };
 
 #if BUILDFLAG(ENABLE_EXTENSIONS)
diff --git a/chrome/browser/history_clusters/history_clusters_tab_helper_unittest.cc b/chrome/browser/history_clusters/history_clusters_tab_helper_unittest.cc
index fc9418c..fc92c5c 100644
--- a/chrome/browser/history_clusters/history_clusters_tab_helper_unittest.cc
+++ b/chrome/browser/history_clusters/history_clusters_tab_helper_unittest.cc
@@ -118,15 +118,15 @@
 
   base::test::ScopedFeatureList feature_list_;
 
-  raw_ptr<HistoryClustersTabHelper> helper_;
+  raw_ptr<HistoryClustersTabHelper, DanglingUntriaged> helper_;
 
   std::unique_ptr<history_clusters::HistoryClustersServiceTestApi>
       history_clusters_service_test_api_;
 
   base::CancelableTaskTracker tracker_;
-  raw_ptr<history::HistoryService> history_service_;
+  raw_ptr<history::HistoryService, DanglingUntriaged> history_service_;
 
-  raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
+  raw_ptr<bookmarks::BookmarkModel, DanglingUntriaged> bookmark_model_;
 
   // Used to verify the async callback is invoked.
   base::RunLoop run_loop_;
diff --git a/chrome/browser/media/history/media_history_keyed_service.cc b/chrome/browser/media/history/media_history_keyed_service.cc
index 69e061b..e552afa6 100644
--- a/chrome/browser/media/history/media_history_keyed_service.cc
+++ b/chrome/browser/media/history/media_history_keyed_service.cc
@@ -74,10 +74,10 @@
   }
 
  private:
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   scoped_refptr<MediaHistoryStore> local_;
   scoped_refptr<base::UpdateableSequencedTaskRunner> db_task_runner_;
-  raw_ptr<MediaHistoryKeyedService> remote_ = nullptr;
+  raw_ptr<MediaHistoryKeyedService, DanglingUntriaged> remote_ = nullptr;
 };
 
 MediaHistoryKeyedService::MediaHistoryKeyedService(Profile* profile)
diff --git a/chrome/browser/media/history/media_history_keyed_service.h b/chrome/browser/media/history/media_history_keyed_service.h
index bdcc396..927732c4 100644
--- a/chrome/browser/media/history/media_history_keyed_service.h
+++ b/chrome/browser/media/history/media_history_keyed_service.h
@@ -106,7 +106,7 @@
 
   std::unique_ptr<StoreHolder> store_;
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   base::ScopedObservation<history::HistoryService,
                           history::HistoryServiceObserver>
diff --git a/chrome/browser/media/media_engagement_contents_observer_unittest.cc b/chrome/browser/media/media_engagement_contents_observer_unittest.cc
index c39b5fb..c87b8e7a 100644
--- a/chrome/browser/media/media_engagement_contents_observer_unittest.cc
+++ b/chrome/browser/media/media_engagement_contents_observer_unittest.cc
@@ -409,7 +409,8 @@
 
  private:
   // contents_observer_ auto-destroys when WebContents is destroyed.
-  raw_ptr<MediaEngagementContentsObserver> contents_observer_;
+  raw_ptr<MediaEngagementContentsObserver, DanglingUntriaged>
+      contents_observer_;
 
   std::unique_ptr<MediaEngagementService> service_;
 
diff --git a/chrome/browser/media/media_engagement_service.h b/chrome/browser/media/media_engagement_service.h
index 6908e21..20935fdd 100644
--- a/chrome/browser/media/media_engagement_service.h
+++ b/chrome/browser/media/media_engagement_service.h
@@ -114,7 +114,7 @@
   base::flat_map<content::WebContents*, MediaEngagementContentsObserver*>
       contents_observers_;
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Clear any data for a specific origin.
   void Clear(const url::Origin& origin);
diff --git a/chrome/browser/media/router/discovery/access_code/access_code_cast_discovery_interface.h b/chrome/browser/media/router/discovery/access_code/access_code_cast_discovery_interface.h
index fad4e56e..dc7b22f15 100644
--- a/chrome/browser/media/router/discovery/access_code/access_code_cast_discovery_interface.h
+++ b/chrome/browser/media/router/discovery/access_code/access_code_cast_discovery_interface.h
@@ -108,12 +108,12 @@
   AddSinkResultCode IsResponseValid(
       const absl::optional<base::Value>& response);
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
   // Access code passed down from the WebUI and used in the construction of the
   // discovery interface object.
   const std::string access_code_;
 
-  const raw_ptr<LoggerImpl> logger_;
+  const raw_ptr<LoggerImpl, DanglingUntriaged> logger_;
 
   const raw_ptr<signin::IdentityManager> identity_manager_;
 
diff --git a/chrome/browser/media/router/discovery/dial/dial_app_discovery_service_unittest.cc b/chrome/browser/media/router/discovery/dial/dial_app_discovery_service_unittest.cc
index 4baab99c..9fd7e66 100644
--- a/chrome/browser/media/router/discovery/dial/dial_app_discovery_service_unittest.cc
+++ b/chrome/browser/media/router/discovery/dial/dial_app_discovery_service_unittest.cc
@@ -112,7 +112,7 @@
   }
 
  protected:
-  raw_ptr<TestSafeDialAppInfoParser> test_parser_;
+  raw_ptr<TestSafeDialAppInfoParser, DanglingUntriaged> test_parser_;
   DialAppDiscoveryService dial_app_discovery_service_;
 
   // Must be on Chrome_UIThread, as `OnDialAppInfoFetchComplete` uses a
diff --git a/chrome/browser/media/router/discovery/dial/dial_media_sink_service_impl_unittest.cc b/chrome/browser/media/router/discovery/dial/dial_media_sink_service_impl_unittest.cc
index 9ec1723c..722f7c2 100644
--- a/chrome/browser/media/router/discovery/dial/dial_media_sink_service_impl_unittest.cc
+++ b/chrome/browser/media/router/discovery/dial/dial_media_sink_service_impl_unittest.cc
@@ -96,9 +96,11 @@
       MockDeviceDescriptionService::DeviceDescriptionParseErrorCallback>
       mock_error_cb_;
 
-  raw_ptr<MockDeviceDescriptionService> mock_description_service_;
-  raw_ptr<MockDialAppDiscoveryService> mock_app_discovery_service_;
-  raw_ptr<base::MockOneShotTimer> mock_timer_;
+  raw_ptr<MockDeviceDescriptionService, DanglingUntriaged>
+      mock_description_service_;
+  raw_ptr<MockDialAppDiscoveryService, DanglingUntriaged>
+      mock_app_discovery_service_;
+  raw_ptr<base::MockOneShotTimer, DanglingUntriaged> mock_timer_;
 
   std::unique_ptr<DialMediaSinkServiceImpl> media_sink_service_;
 
diff --git a/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_impl_unittest.cc b/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_impl_unittest.cc
index 5dfbc09..90f1913 100644
--- a/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_impl_unittest.cc
+++ b/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_impl_unittest.cc
@@ -140,7 +140,7 @@
   TestMediaSinkService dial_media_sink_service_;
   std::unique_ptr<cast_channel::MockCastSocketService>
       mock_cast_socket_service_;
-  raw_ptr<base::MockOneShotTimer> mock_timer_;
+  raw_ptr<base::MockOneShotTimer, DanglingUntriaged> mock_timer_;
   CastMediaSinkServiceImpl media_sink_service_impl_;
   testing::NiceMock<MockObserver> observer_;
 };
diff --git a/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_unittest.cc b/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_unittest.cc
index f70d2ef..8e1ab4f 100644
--- a/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_unittest.cc
+++ b/chrome/browser/media/router/discovery/mdns/cast_media_sink_service_unittest.cc
@@ -109,7 +109,7 @@
       mock_cast_socket_service_;
 
   std::unique_ptr<TestCastMediaSinkService> media_sink_service_;
-  raw_ptr<MockCastMediaSinkServiceImpl> mock_impl_ = nullptr;
+  raw_ptr<MockCastMediaSinkServiceImpl, DanglingUntriaged> mock_impl_ = nullptr;
   MockDnsSdRegistry test_dns_sd_registry_;
 };
 
diff --git a/chrome/browser/media/router/presentation/presentation_service_delegate_impl_unittest.cc b/chrome/browser/media/router/presentation/presentation_service_delegate_impl_unittest.cc
index 5991c87..fd0487d 100644
--- a/chrome/browser/media/router/presentation/presentation_service_delegate_impl_unittest.cc
+++ b/chrome/browser/media/router/presentation/presentation_service_delegate_impl_unittest.cc
@@ -241,14 +241,14 @@
             profile()));
   }
 
-  raw_ptr<MockMediaRouter> router_;
-  raw_ptr<PresentationServiceDelegateImpl> delegate_impl_;
+  raw_ptr<MockMediaRouter, DanglingUntriaged> router_;
+  raw_ptr<PresentationServiceDelegateImpl, DanglingUntriaged> delegate_impl_;
   const GURL presentation_url1_;
   const GURL presentation_url2_;
   std::vector<GURL> presentation_urls_;
   const GURL frame_url_;
   const url::Origin frame_origin_;
-  raw_ptr<MockLocalPresentationManager> mock_local_manager_;
+  raw_ptr<MockLocalPresentationManager, DanglingUntriaged> mock_local_manager_;
 
   // |source1_| and |source2_| correspond to |presentation_url1_| and
   // |presentation_url2_|, respectively.
diff --git a/chrome/browser/media/router/providers/cast/cast_activity_manager_unittest.cc b/chrome/browser/media/router/providers/cast/cast_activity_manager_unittest.cc
index 778e73a..0224d25 100644
--- a/chrome/browser/media/router/providers/cast/cast_activity_manager_unittest.cc
+++ b/chrome/browser/media/router/providers/cast/cast_activity_manager_unittest.cc
@@ -526,8 +526,9 @@
   MockCastAppDiscoveryService app_discovery_service_;
   std::unique_ptr<CastActivityManager> manager_;
   std::unique_ptr<CastSessionTracker> session_tracker_;
-  raw_ptr<MockAppActivity> app_activity_ = nullptr;
-  raw_ptr<MockMirroringActivity> mirroring_activity_ = nullptr;
+  raw_ptr<MockAppActivity, DanglingUntriaged> app_activity_ = nullptr;
+  raw_ptr<MockMirroringActivity, DanglingUntriaged> mirroring_activity_ =
+      nullptr;
   MockAppActivityCallback app_activity_callback_ = base::DoNothing();
   MockMirroringActivityCallback mirroring_activity_callback_ =
       base::DoNothing();
diff --git a/chrome/browser/media/router/providers/cast/cast_session_tracker_unittest.cc b/chrome/browser/media/router/providers/cast/cast_session_tracker_unittest.cc
index 601101f..e4edd14 100644
--- a/chrome/browser/media/router/providers/cast/cast_session_tracker_unittest.cc
+++ b/chrome/browser/media/router/providers/cast/cast_session_tracker_unittest.cc
@@ -123,7 +123,7 @@
   NiceMock<MockCastSessionObserver> observer_;
 
   MediaSinkInternal sink_ = CreateCastSink(1);
-  raw_ptr<CastSession> session_;
+  raw_ptr<CastSession, DanglingUntriaged> session_;
 };
 
 TEST_F(CastSessionTrackerTest, QueryReceiverOnSinkAdded) {
diff --git a/chrome/browser/media/router/providers/cast/mirroring_activity_unittest.cc b/chrome/browser/media/router/providers/cast/mirroring_activity_unittest.cc
index 3a797dd..7b942b0 100644
--- a/chrome/browser/media/router/providers/cast/mirroring_activity_unittest.cc
+++ b/chrome/browser/media/router/providers/cast/mirroring_activity_unittest.cc
@@ -177,9 +177,12 @@
   }
 
   bool route_is_local_ = true;
-  raw_ptr<MockCastMessageChannel> channel_to_service_ = nullptr;
-  raw_ptr<MockMediaRouterDebugger> debugger_object_ = nullptr;
-  raw_ptr<MockMirroringServiceHost> mirroring_service_ = nullptr;
+  raw_ptr<MockCastMessageChannel, DanglingUntriaged> channel_to_service_ =
+      nullptr;
+  raw_ptr<MockMediaRouterDebugger, DanglingUntriaged> debugger_object_ =
+      nullptr;
+  raw_ptr<MockMirroringServiceHost, DanglingUntriaged> mirroring_service_ =
+      nullptr;
   NiceMock<MockMirroringServiceHostFactory> mirroring_service_host_factory_;
   NiceMock<MockMojoMediaRouter> media_router_;
   base::MockCallback<MirroringActivity::OnStopCallback> on_stop_;
diff --git a/chrome/browser/media/router/providers/dial/dial_media_route_provider_unittest.cc b/chrome/browser/media/router/providers/dial/dial_media_route_provider_unittest.cc
index 5aef5ac..46cba7ad 100644
--- a/chrome/browser/media/router/providers/dial/dial_media_route_provider_unittest.cc
+++ b/chrome/browser/media/router/providers/dial/dial_media_route_provider_unittest.cc
@@ -425,7 +425,8 @@
   std::unique_ptr<mojo::Receiver<mojom::MediaRouter>> router_receiver_;
 
   TestDialMediaSinkServiceImpl mock_sink_service_;
-  raw_ptr<TestDialActivityManager> activity_manager_ = nullptr;
+  raw_ptr<TestDialActivityManager, DanglingUntriaged> activity_manager_ =
+      nullptr;
   std::unique_ptr<DialMediaRouteProvider> provider_;
 
   MediaSinkInternal sink_{CreateDialSink(1)};
diff --git a/chrome/browser/media/router/providers/wired_display/wired_display_media_route_provider_unittest.cc b/chrome/browser/media/router/providers/wired_display/wired_display_media_route_provider_unittest.cc
index b39df139..92b02f7 100644
--- a/chrome/browser/media/router/providers/wired_display/wired_display_media_route_provider_unittest.cc
+++ b/chrome/browser/media/router/providers/wired_display/wired_display_media_route_provider_unittest.cc
@@ -110,7 +110,7 @@
 
   // Retains a reference to |unique_receiver_| even after |this| loses its
   // ownership.
-  const raw_ptr<MockPresentationReceiver> receiver_;
+  const raw_ptr<MockPresentationReceiver, DanglingUntriaged> receiver_;
 };
 
 const char kPresentationSource[] = "https://www.example.com/presentation";
diff --git a/chrome/browser/media/webrtc/current_tab_desktop_media_list_unittest.cc b/chrome/browser/media/webrtc/current_tab_desktop_media_list_unittest.cc
index 94fadd02..8112348f 100644
--- a/chrome/browser/media/webrtc/current_tab_desktop_media_list_unittest.cc
+++ b/chrome/browser/media/webrtc/current_tab_desktop_media_list_unittest.cc
@@ -165,7 +165,7 @@
   ScopedTestingLocalState local_state_;
 
   std::unique_ptr<content::RenderViewHostTestEnabler> rvh_test_enabler_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<Browser> browser_;
 
   StrictMock<MockObserver> observer_;
diff --git a/chrome/browser/media/webrtc/desktop_capture_access_handler_unittest.cc b/chrome/browser/media/webrtc/desktop_capture_access_handler_unittest.cc
index 5438e67..4543baa 100644
--- a/chrome/browser/media/webrtc/desktop_capture_access_handler_unittest.cc
+++ b/chrome/browser/media/webrtc/desktop_capture_access_handler_unittest.cc
@@ -174,7 +174,7 @@
 #endif  // BUILDFLAG(IS_CHROMEOS)
 
  protected:
-  raw_ptr<FakeDesktopMediaPickerFactory> picker_factory_;
+  raw_ptr<FakeDesktopMediaPickerFactory, DanglingUntriaged> picker_factory_;
   std::unique_ptr<DesktopCaptureAccessHandler> access_handler_;
 };
 
diff --git a/chrome/browser/media/webrtc/display_media_access_handler_unittest.cc b/chrome/browser/media/webrtc/display_media_access_handler_unittest.cc
index 9ce43ce..c286df58 100644
--- a/chrome/browser/media/webrtc/display_media_access_handler_unittest.cc
+++ b/chrome/browser/media/webrtc/display_media_access_handler_unittest.cc
@@ -227,7 +227,7 @@
   std::vector<FakeDesktopMediaPickerFactory::TestFlags> test_flags_;
 
  protected:
-  raw_ptr<FakeDesktopMediaPickerFactory> picker_factory_;
+  raw_ptr<FakeDesktopMediaPickerFactory, DanglingUntriaged> picker_factory_;
   std::unique_ptr<DisplayMediaAccessHandler> access_handler_;
 };
 
diff --git a/chrome/browser/media/webrtc/media_stream_focus_delegate_unittest.cc b/chrome/browser/media/webrtc/media_stream_focus_delegate_unittest.cc
index 6dd10618..049edba 100644
--- a/chrome/browser/media/webrtc/media_stream_focus_delegate_unittest.cc
+++ b/chrome/browser/media/webrtc/media_stream_focus_delegate_unittest.cc
@@ -121,7 +121,8 @@
 
 TEST_F(MediaStreamFocusDelegateTest, SelectedSourceFocusesWindow) {
   // Setup.
-  raw_ptr<MockWindowCapturer> window_capturer = new MockWindowCapturer();
+  raw_ptr<MockWindowCapturer, DanglingUntriaged> window_capturer =
+      new MockWindowCapturer();
   SetWindowCapturer(window_capturer);
 
   ON_CALL(*window_capturer, SelectSource(_)).WillByDefault(Return(true));
@@ -132,7 +133,8 @@
 
 TEST_F(MediaStreamFocusDelegateTest, NotSelectedSourceDoesNotFocusWindow) {
   // Setup.
-  raw_ptr<MockWindowCapturer> window_capturer = new MockWindowCapturer();
+  raw_ptr<MockWindowCapturer, DanglingUntriaged> window_capturer =
+      new MockWindowCapturer();
   SetWindowCapturer(window_capturer);
 
   ON_CALL(*window_capturer, SelectSource(_)).WillByDefault(Return(false));
diff --git a/chrome/browser/media/webrtc/native_desktop_media_list_unittest.cc b/chrome/browser/media/webrtc/native_desktop_media_list_unittest.cc
index ba80757f..3d3f39fd 100644
--- a/chrome/browser/media/webrtc/native_desktop_media_list_unittest.cc
+++ b/chrome/browser/media/webrtc/native_desktop_media_list_unittest.cc
@@ -471,7 +471,7 @@
   MockObserver observer_;
 
   // Owned by |model_|;
-  raw_ptr<FakeWindowCapturer> window_capturer_;
+  raw_ptr<FakeWindowCapturer, DanglingUntriaged> window_capturer_;
 
   webrtc::DesktopCapturer::SourceList window_list_;
   std::vector<views::UniqueWidgetPtr> desktop_widgets_;
diff --git a/chrome/browser/media/webrtc/tab_desktop_media_list_unittest.cc b/chrome/browser/media/webrtc/tab_desktop_media_list_unittest.cc
index 329ab8c..5064ae7 100644
--- a/chrome/browser/media/webrtc/tab_desktop_media_list_unittest.cc
+++ b/chrome/browser/media/webrtc/tab_desktop_media_list_unittest.cc
@@ -334,7 +334,7 @@
   ScopedTestingLocalState local_state_;
 
   std::unique_ptr<content::RenderViewHostTestEnabler> rvh_test_enabler_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<Browser> browser_;
 
   // Must be listed before |list_|, so it's destroyed last.
diff --git a/chrome/browser/media/webrtc/webrtc_event_log_manager_unittest.cc b/chrome/browser/media/webrtc/webrtc_event_log_manager_unittest.cc
index 668ff0c..0ea284f 100644
--- a/chrome/browser/media/webrtc/webrtc_event_log_manager_unittest.cc
+++ b/chrome/browser/media/webrtc/webrtc_event_log_manager_unittest.cc
@@ -1234,7 +1234,7 @@
         std::make_unique<MockRenderProcessHost>(incognito_profile_);
   }
 
-  raw_ptr<Profile> incognito_profile_;
+  raw_ptr<Profile, DanglingUntriaged> incognito_profile_;
   std::unique_ptr<MockRenderProcessHost> incognito_rph_;
 };
 
diff --git a/chrome/browser/media_galleries/media_file_system_registry_unittest.cc b/chrome/browser/media_galleries/media_file_system_registry_unittest.cc
index 8d0f650..7b83a23d0 100644
--- a/chrome/browser/media_galleries/media_file_system_registry_unittest.cc
+++ b/chrome/browser/media_galleries/media_file_system_registry_unittest.cc
@@ -400,7 +400,8 @@
   base::FilePath dcim_dir_;
 
   // MediaFileSystemRegistry owns this.
-  raw_ptr<TestMediaFileSystemContext> test_file_system_context_;
+  raw_ptr<TestMediaFileSystemContext, DanglingUntriaged>
+      test_file_system_context_;
 
   // Needed for extension service & friends to work.
 
diff --git a/chrome/browser/media_galleries/media_galleries_preferences.h b/chrome/browser/media_galleries/media_galleries_preferences.h
index 4b6660c6..daf14ec 100644
--- a/chrome/browser/media_galleries/media_galleries_preferences.h
+++ b/chrome/browser/media_galleries/media_galleries_preferences.h
@@ -360,7 +360,8 @@
   // The ExtensionPrefs used in a testing environment, where KeyedServices
   // aren't used. This will be nullptr unless it is set with
   // SetExtensionPrefsForTesting().
-  raw_ptr<extensions::ExtensionPrefs> extension_prefs_for_testing_;
+  raw_ptr<extensions::ExtensionPrefs, DanglingUntriaged>
+      extension_prefs_for_testing_;
 
   // An in-memory cache of known galleries.
   MediaGalleriesPrefInfoMap known_galleries_;
diff --git a/chrome/browser/metrics/desktop_session_duration/touch_mode_stats_tracker_unittest.cc b/chrome/browser/metrics/desktop_session_duration/touch_mode_stats_tracker_unittest.cc
index 560263c..21f14557 100644
--- a/chrome/browser/metrics/desktop_session_duration/touch_mode_stats_tracker_unittest.cc
+++ b/chrome/browser/metrics/desktop_session_duration/touch_mode_stats_tracker_unittest.cc
@@ -107,7 +107,7 @@
 
   content::BrowserTaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<TouchModeStatsTracker> touch_mode_stats_tracker_;
 
  private:
diff --git a/chrome/browser/metrics/oom/out_of_memory_reporter_unittest.cc b/chrome/browser/metrics/oom/out_of_memory_reporter_unittest.cc
index 56e1ebcf..4f3af5bd 100644
--- a/chrome/browser/metrics/oom/out_of_memory_reporter_unittest.cc
+++ b/chrome/browser/metrics/oom/out_of_memory_reporter_unittest.cc
@@ -203,7 +203,7 @@
   std::unique_ptr<ukm::TestAutoSetUkmRecorder> test_ukm_recorder_;
 
  private:
-  raw_ptr<base::SimpleTestTickClock> test_tick_clock_;
+  raw_ptr<base::SimpleTestTickClock, DanglingUntriaged> test_tick_clock_;
 };
 
 TEST_F(OutOfMemoryReporterTest, SimpleOOM) {
diff --git a/chrome/browser/metrics/power/power_metrics_reporter_unittest.cc b/chrome/browser/metrics/power/power_metrics_reporter_unittest.cc
index 90b96ad0..ba2df878 100644
--- a/chrome/browser/metrics/power/power_metrics_reporter_unittest.cc
+++ b/chrome/browser/metrics/power/power_metrics_reporter_unittest.cc
@@ -200,7 +200,7 @@
 
   ukm::TestAutoSetUkmRecorder test_ukm_recorder_;
 
-  raw_ptr<base::BatteryLevelProvider> battery_provider_;
+  raw_ptr<base::BatteryLevelProvider, DanglingUntriaged> battery_provider_;
 
 #if BUILDFLAG(IS_MAC)
   raw_ptr<TestCoalitionResourceUsageProvider>
diff --git a/chrome/browser/metrics/tab_stats/tab_stats_tracker.h b/chrome/browser/metrics/tab_stats/tab_stats_tracker.h
index f224c8f..c5607df 100644
--- a/chrome/browser/metrics/tab_stats/tab_stats_tracker.h
+++ b/chrome/browser/metrics/tab_stats/tab_stats_tracker.h
@@ -101,7 +101,7 @@
 
    private:
     // The delegate used to report the metrics.
-    raw_ptr<UmaStatsReportingDelegate> reporting_delegate_;
+    raw_ptr<UmaStatsReportingDelegate, DanglingUntriaged> reporting_delegate_;
 
     // The data store that houses the metrics.
     raw_ptr<TabStatsDataStore> data_store_;
diff --git a/chrome/browser/metrics/usage_scenario/tab_usage_scenario_tracker.h b/chrome/browser/metrics/usage_scenario/tab_usage_scenario_tracker.h
index 5d62bfe7..5c852383 100644
--- a/chrome/browser/metrics/usage_scenario/tab_usage_scenario_tracker.h
+++ b/chrome/browser/metrics/usage_scenario/tab_usage_scenario_tracker.h
@@ -94,7 +94,7 @@
   VisibleTabsMap visible_tabs_ GUARDED_BY_CONTEXT(sequence_checker_);
 
   // WebContents currently playing video fullscreen.
-  base::flat_set<raw_ptr<content::WebContents>>
+  base::flat_set<raw_ptr<content::WebContents, DanglingUntriaged>>
       contents_playing_video_fullscreen_;
 
   display::ScopedDisplayObserver display_observer_{this};
diff --git a/chrome/browser/net/net_error_tab_helper_unittest.cc b/chrome/browser/net/net_error_tab_helper_unittest.cc
index 9c3d2a4..2fd1ccbf 100644
--- a/chrome/browser/net/net_error_tab_helper_unittest.cc
+++ b/chrome/browser/net/net_error_tab_helper_unittest.cc
@@ -184,7 +184,7 @@
   TestNetErrorTabHelper* tab_helper() { return tab_helper_.get(); }
 
  private:
-  raw_ptr<content::RenderFrameHost> subframe_;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> subframe_;
   std::unique_ptr<TestNetErrorTabHelper> tab_helper_;
   GURL bogus_url_;
 };
diff --git a/chrome/browser/new_tab_page/chrome_colors/chrome_colors_service_unittest.cc b/chrome/browser/new_tab_page/chrome_colors/chrome_colors_service_unittest.cc
index 214d823..a519a30 100644
--- a/chrome/browser/new_tab_page/chrome_colors/chrome_colors_service_unittest.cc
+++ b/chrome/browser/new_tab_page/chrome_colors/chrome_colors_service_unittest.cc
@@ -32,8 +32,9 @@
     return !!chrome_colors_service_->prev_theme_reinstaller_;
   }
 
-  raw_ptr<chrome_colors::ChromeColorsService> chrome_colors_service_;
-  raw_ptr<content::WebContents> tab_;
+  raw_ptr<chrome_colors::ChromeColorsService, DanglingUntriaged>
+      chrome_colors_service_;
+  raw_ptr<content::WebContents, DanglingUntriaged> tab_;
 };
 
 TEST_F(TestChromeColorsService, ApplyAndConfirmAutogeneratedTheme) {
diff --git a/chrome/browser/new_tab_page/customize_chrome/customize_chrome_feature_promo_helper_unittest.cc b/chrome/browser/new_tab_page/customize_chrome/customize_chrome_feature_promo_helper_unittest.cc
index a82ac4e6..eb6f2dc 100644
--- a/chrome/browser/new_tab_page/customize_chrome/customize_chrome_feature_promo_helper_unittest.cc
+++ b/chrome/browser/new_tab_page/customize_chrome/customize_chrome_feature_promo_helper_unittest.cc
@@ -65,10 +65,11 @@
 
  private:
   feature_engagement::test::ScopedIphFeatureList iph_feature_list_;
-  raw_ptr<content::WebContents> tab_;
-  raw_ptr<testing::NiceMock<feature_engagement::test::MockTracker>>
+  raw_ptr<content::WebContents, DanglingUntriaged> tab_;
+  raw_ptr<testing::NiceMock<feature_engagement::test::MockTracker>,
+          DanglingUntriaged>
       mock_tracker_;
-  raw_ptr<user_education::test::MockFeaturePromoController>
+  raw_ptr<user_education::test::MockFeaturePromoController, DanglingUntriaged>
       mock_promo_controller_ = nullptr;
 
   static std::unique_ptr<KeyedService> MakeTestTracker(
diff --git a/chrome/browser/new_tab_page/modules/feed/feed_handler_unittest.cc b/chrome/browser/new_tab_page/modules/feed/feed_handler_unittest.cc
index 7aa7f2b..49db0b1 100644
--- a/chrome/browser/new_tab_page/modules/feed/feed_handler_unittest.cc
+++ b/chrome/browser/new_tab_page/modules/feed/feed_handler_unittest.cc
@@ -94,7 +94,7 @@
 
  protected:
   std::unique_ptr<FeedHandler> handler_;
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   content::BrowserTaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   variations::ScopedVariationsIdsProvider scoped_variations_ids_provider_{
diff --git a/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor.h b/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor.h
index 259e06c0..8183cc6 100644
--- a/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor.h
+++ b/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor.h
@@ -57,7 +57,7 @@
       bool success,
       std::vector<CartDB::KeyAndValue> carts);
 
-  raw_ptr<CartService> cart_service_;
+  raw_ptr<CartService, DanglingUntriaged> cart_service_;
   base::WeakPtrFactory<CartProcessor> weak_ptr_factory_{this};
 };
 
diff --git a/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor_unittest.cc b/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor_unittest.cc
index c963683..4bbdf378 100644
--- a/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor_unittest.cc
+++ b/chrome/browser/new_tab_page/modules/history_clusters/cart/cart_processor_unittest.cc
@@ -91,7 +91,7 @@
              })}};
   }
 
-  raw_ptr<MockCartService> mock_cart_service_;
+  raw_ptr<MockCartService, DanglingUntriaged> mock_cart_service_;
   std::unique_ptr<CartProcessor> cart_processor_;
 };
 
diff --git a/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler.h b/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler.h
index 95d5a32d..6983f8f 100644
--- a/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler.h
+++ b/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler.h
@@ -66,8 +66,8 @@
           ranking_signals);
 
   mojo::Receiver<ntp::history_clusters::mojom::PageHandler> receiver_;
-  raw_ptr<Profile> profile_;
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 
   base::CancelableTaskTracker hide_visits_task_tracker_;
   std::unique_ptr<CartProcessor> cart_processor_;
diff --git a/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler_unittest.cc b/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler_unittest.cc
index adb0c8b1..d34bf08 100644
--- a/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler_unittest.cc
+++ b/chrome/browser/new_tab_page/modules/history_clusters/history_clusters_page_handler_unittest.cc
@@ -177,12 +177,13 @@
              })}};
   }
 
-  raw_ptr<MockHistoryClustersModuleService>
+  raw_ptr<MockHistoryClustersModuleService, DanglingUntriaged>
       mock_history_clusters_module_service_;
   std::unique_ptr<content::WebContents> web_contents_;
-  raw_ptr<MockHistoryClustersTabHelper> mock_history_clusters_tab_helper_;
-  raw_ptr<MockHistoryService> mock_history_service_;
-  raw_ptr<MockCartService> mock_cart_service_;
+  raw_ptr<MockHistoryClustersTabHelper, DanglingUntriaged>
+      mock_history_clusters_tab_helper_;
+  raw_ptr<MockHistoryService, DanglingUntriaged> mock_history_service_;
+  raw_ptr<MockCartService, DanglingUntriaged> mock_cart_service_;
   std::unique_ptr<HistoryClustersPageHandler> handler_;
   ukm::SourceId ukm_source_id_;
 };
diff --git a/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler.h b/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler.h
index 7f33fe0..12db704 100644
--- a/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler.h
+++ b/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler.h
@@ -50,9 +50,9 @@
   mojo::Receiver<ntp::safe_browsing::mojom::SafeBrowsingHandler> handler_;
   // Unowned copy of SafeBrowsingMetricsCollector, to log metrics and read/write
   // security sensitive events.
-  raw_ptr<SafeBrowsingMetricsCollector> metrics_collector_;
+  raw_ptr<SafeBrowsingMetricsCollector, DanglingUntriaged> metrics_collector_;
   // Unowned copy of PrefService, to read/write prefs.
-  raw_ptr<PrefService> pref_service_;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_;
   // Save value of last cooldown start time, in case dismissed module is
   // restored.
   int64_t saved_last_cooldown_start_time_;
diff --git a/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler_unittest.cc b/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler_unittest.cc
index 164fafc..caab56a 100644
--- a/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler_unittest.cc
+++ b/chrome/browser/new_tab_page/modules/safe_browsing/safe_browsing_handler_unittest.cc
@@ -79,10 +79,12 @@
  protected:
   std::unique_ptr<SafeBrowsingHandler> module_handler_;
   // Unowned MockSafeBrowsingMetricsCollector
-  raw_ptr<MockSafeBrowsingMetricsCollector> metrics_collector_;
+  raw_ptr<MockSafeBrowsingMetricsCollector, DanglingUntriaged>
+      metrics_collector_;
   // Unowned PrefService. Use TestingPrefServiceSyncable
   // as that is what TestingProfileManager returns.
-  raw_ptr<sync_preferences::TestingPrefServiceSyncable> pref_service_;
+  raw_ptr<sync_preferences::TestingPrefServiceSyncable, DanglingUntriaged>
+      pref_service_;
   content::BrowserTaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
 
diff --git a/chrome/browser/new_tab_page/one_google_bar/one_google_bar_service_unittest.cc b/chrome/browser/new_tab_page/one_google_bar/one_google_bar_service_unittest.cc
index c7ce0a15..94ca2af 100644
--- a/chrome/browser/new_tab_page/one_google_bar/one_google_bar_service_unittest.cc
+++ b/chrome/browser/new_tab_page/one_google_bar/one_google_bar_service_unittest.cc
@@ -80,7 +80,7 @@
   signin::IdentityTestEnvironment identity_env_;
 
   // Owned by the service.
-  raw_ptr<FakeOneGoogleBarLoader> loader_;
+  raw_ptr<FakeOneGoogleBarLoader, DanglingUntriaged> loader_;
 
   std::unique_ptr<OneGoogleBarService> service_;
 };
diff --git a/chrome/browser/notifications/muted_notification_handler.h b/chrome/browser/notifications/muted_notification_handler.h
index 6f074d3..b08cb85f 100644
--- a/chrome/browser/notifications/muted_notification_handler.h
+++ b/chrome/browser/notifications/muted_notification_handler.h
@@ -61,7 +61,7 @@
   Delegate* get_delegate_for_testing() const { return delegate_; }
 
  private:
-  raw_ptr<Delegate> delegate_;
+  raw_ptr<Delegate, DanglingUntriaged> delegate_;
 };
 
 #endif  // CHROME_BROWSER_NOTIFICATIONS_MUTED_NOTIFICATION_HANDLER_H_
diff --git a/chrome/browser/notifications/notification_display_queue_unittest.cc b/chrome/browser/notifications/notification_display_queue_unittest.cc
index e2fc894f..35197c1 100644
--- a/chrome/browser/notifications/notification_display_queue_unittest.cc
+++ b/chrome/browser/notifications/notification_display_queue_unittest.cc
@@ -133,7 +133,8 @@
  private:
   NotificationDisplayServiceMock service_;
   NotificationDisplayQueue queue_{&service_};
-  raw_ptr<FakeNotificationBlocker> notification_blocker_ = nullptr;
+  raw_ptr<FakeNotificationBlocker, DanglingUntriaged> notification_blocker_ =
+      nullptr;
 };
 
 TEST_F(NotificationDisplayQueueTest, ShouldEnqueueWithoutBlockers) {
diff --git a/chrome/browser/notifications/notification_display_service_impl_unittest.cc b/chrome/browser/notifications/notification_display_service_impl_unittest.cc
index d344661..3f34c8a 100644
--- a/chrome/browser/notifications/notification_display_service_impl_unittest.cc
+++ b/chrome/browser/notifications/notification_display_service_impl_unittest.cc
@@ -192,7 +192,8 @@
   }
 
  private:
-  raw_ptr<FakeNotificationBlocker> notification_blocker_ = nullptr;
+  raw_ptr<FakeNotificationBlocker, DanglingUntriaged> notification_blocker_ =
+      nullptr;
 };
 
 TEST_F(NotificationDisplayServiceImplTest, DisplayWithoutBlockers) {
diff --git a/chrome/browser/notifications/notification_ui_manager_unittest.cc b/chrome/browser/notifications/notification_ui_manager_unittest.cc
index 21a0bbf..e08505a 100644
--- a/chrome/browser/notifications/notification_ui_manager_unittest.cc
+++ b/chrome/browser/notifications/notification_ui_manager_unittest.cc
@@ -63,7 +63,7 @@
   }
 
  private:
-  raw_ptr<MessageCenter> message_center_;
+  raw_ptr<MessageCenter, DanglingUntriaged> message_center_;
 };
 
 TEST_F(NotificationUIManagerTest, SetupNotificationManager) {
diff --git a/chrome/browser/notifications/scheduler/internal/impression_history_tracker.h b/chrome/browser/notifications/scheduler/internal/impression_history_tracker.h
index 516ddb1..9acaf6d6 100644
--- a/chrome/browser/notifications/scheduler/internal/impression_history_tracker.h
+++ b/chrome/browser/notifications/scheduler/internal/impression_history_tracker.h
@@ -214,7 +214,7 @@
   raw_ptr<base::Clock> clock_;
 
   // Delegate object.
-  raw_ptr<Delegate> delegate_;
+  raw_ptr<Delegate, DanglingUntriaged> delegate_;
 
   base::WeakPtrFactory<ImpressionHistoryTrackerImpl> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/notifications/scheduler/internal/impression_store_unittest.cc b/chrome/browser/notifications/scheduler/internal/impression_store_unittest.cc
index efb303da..803097e 100644
--- a/chrome/browser/notifications/scheduler/internal/impression_store_unittest.cc
+++ b/chrome/browser/notifications/scheduler/internal/impression_store_unittest.cc
@@ -98,7 +98,7 @@
   bool load_result_;
   Entries loaded_entries_;
 
-  raw_ptr<FakeDB<proto::ClientState, ClientState>> db_;
+  raw_ptr<FakeDB<proto::ClientState, ClientState>, DanglingUntriaged> db_;
   std::unique_ptr<CollectionStore<ClientState>> store_;
 };
 
diff --git a/chrome/browser/notifications/scheduler/internal/init_aware_scheduler_unittest.cc b/chrome/browser/notifications/scheduler/internal/init_aware_scheduler_unittest.cc
index 88c6c89..2865223 100644
--- a/chrome/browser/notifications/scheduler/internal/init_aware_scheduler_unittest.cc
+++ b/chrome/browser/notifications/scheduler/internal/init_aware_scheduler_unittest.cc
@@ -70,7 +70,7 @@
 
  private:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockNotificationScheduler> scheduler_impl_;
+  raw_ptr<MockNotificationScheduler, DanglingUntriaged> scheduler_impl_;
   std::unique_ptr<NotificationScheduler> init_aware_scheduler_;
 };
 
diff --git a/chrome/browser/notifications/scheduler/internal/notification_scheduler_unittest.cc b/chrome/browser/notifications/scheduler/internal/notification_scheduler_unittest.cc
index e93c805bf..bda1a9a 100644
--- a/chrome/browser/notifications/scheduler/internal/notification_scheduler_unittest.cc
+++ b/chrome/browser/notifications/scheduler/internal/notification_scheduler_unittest.cc
@@ -145,13 +145,16 @@
 
  private:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<NotificationSchedulerClientRegistrar> registrar_;
-  raw_ptr<test::MockImpressionHistoryTracker> impression_tracker_;
-  raw_ptr<test::MockScheduledNotificationManager> notification_manager_;
-  raw_ptr<test::MockNotificationSchedulerClient> client_;
-  raw_ptr<test::MockBackgroundTaskCoordinator> task_coordinator_;
-  raw_ptr<test::MockDisplayAgent> display_agent_;
-  raw_ptr<test::MockDisplayDecider> display_decider_;
+  raw_ptr<NotificationSchedulerClientRegistrar, DanglingUntriaged> registrar_;
+  raw_ptr<test::MockImpressionHistoryTracker, DanglingUntriaged>
+      impression_tracker_;
+  raw_ptr<test::MockScheduledNotificationManager, DanglingUntriaged>
+      notification_manager_;
+  raw_ptr<test::MockNotificationSchedulerClient, DanglingUntriaged> client_;
+  raw_ptr<test::MockBackgroundTaskCoordinator, DanglingUntriaged>
+      task_coordinator_;
+  raw_ptr<test::MockDisplayAgent, DanglingUntriaged> display_agent_;
+  raw_ptr<test::MockDisplayDecider, DanglingUntriaged> display_decider_;
 
   std::unique_ptr<NotificationScheduler> notification_scheduler_;
 };
diff --git a/chrome/browser/notifications/scheduler/internal/notification_store_unittest.cc b/chrome/browser/notifications/scheduler/internal/notification_store_unittest.cc
index 3dd7bca..60e45376 100644
--- a/chrome/browser/notifications/scheduler/internal/notification_store_unittest.cc
+++ b/chrome/browser/notifications/scheduler/internal/notification_store_unittest.cc
@@ -94,7 +94,9 @@
   base::test::TaskEnvironment task_environment_;
 
   // Database test objects.
-  raw_ptr<FakeDB<proto::NotificationEntry, NotificationEntry>> db_;
+  raw_ptr<FakeDB<proto::NotificationEntry, NotificationEntry>,
+          DanglingUntriaged>
+      db_;
   std::map<std::string, proto::NotificationEntry> db_protos_;
 
   std::unique_ptr<CollectionStore<NotificationEntry>> store_;
diff --git a/chrome/browser/notifications/scheduler/internal/scheduled_notification_manager_unittest.cc b/chrome/browser/notifications/scheduler/internal/scheduled_notification_manager_unittest.cc
index f1e7bd7..6c0f8be 100644
--- a/chrome/browser/notifications/scheduler/internal/scheduled_notification_manager_unittest.cc
+++ b/chrome/browser/notifications/scheduler/internal/scheduled_notification_manager_unittest.cc
@@ -211,8 +211,8 @@
 
  private:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockNotificationStore> notification_store_;
-  raw_ptr<MockIconStore> icon_store_;
+  raw_ptr<MockNotificationStore, DanglingUntriaged> notification_store_;
+  raw_ptr<MockIconStore, DanglingUntriaged> icon_store_;
   std::vector<SchedulerClientType> clients_;
   std::unique_ptr<ScheduledNotificationManager> manager_;
   SchedulerConfig config_;
diff --git a/chrome/browser/optimization_guide/optimization_guide_tab_url_provider.h b/chrome/browser/optimization_guide/optimization_guide_tab_url_provider.h
index 0a8ff8b..8f90f79 100644
--- a/chrome/browser/optimization_guide/optimization_guide_tab_url_provider.h
+++ b/chrome/browser/optimization_guide/optimization_guide_tab_url_provider.h
@@ -31,7 +31,7 @@
   virtual const std::vector<content::WebContents*> GetAllWebContentsForProfile(
       Profile* profile);
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 };
 
 #endif  // CHROME_BROWSER_OPTIMIZATION_GUIDE_OPTIMIZATION_GUIDE_TAB_URL_PROVIDER_H_
diff --git a/chrome/browser/page_load_metrics/metrics_web_contents_observer_unittest.cc b/chrome/browser/page_load_metrics/metrics_web_contents_observer_unittest.cc
index 49cdf00..ae9de7c 100644
--- a/chrome/browser/page_load_metrics/metrics_web_contents_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/metrics_web_contents_observer_unittest.cc
@@ -70,7 +70,8 @@
     observer->OnVisibilityChanged(content::Visibility::VISIBLE);
   }
 
-  raw_ptr<TestMetricsWebContentsObserverEmbedder> embedder_interface_ = nullptr;
+  raw_ptr<TestMetricsWebContentsObserverEmbedder, DanglingUntriaged>
+      embedder_interface_ = nullptr;
 };
 
 #if BUILDFLAG(ENABLE_EXTENSIONS)
diff --git a/chrome/browser/page_load_metrics/observers/core/ukm_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/core/ukm_page_load_metrics_observer_unittest.cc
index 3943d9c..6a82e6d 100644
--- a/chrome/browser/page_load_metrics/observers/core/ukm_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/core/ukm_page_load_metrics_observer_unittest.cc
@@ -292,7 +292,8 @@
   UkmPageLoadMetricsObserver* observer() const { return observer_; }
 
  private:
-  raw_ptr<UkmPageLoadMetricsObserver> observer_;  // Non-owning raw pointer.
+  raw_ptr<UkmPageLoadMetricsObserver, DanglingUntriaged>
+      observer_;  // Non-owning raw pointer.
 
   MockNetworkQualityProvider mock_network_quality_provider_;
 };
diff --git a/chrome/browser/page_load_metrics/observers/from_gws_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/from_gws_page_load_metrics_observer_unittest.cc
index 0ed86b8..f1308fa 100644
--- a/chrome/browser/page_load_metrics/observers/from_gws_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/from_gws_page_load_metrics_observer_unittest.cc
@@ -67,7 +67,8 @@
   }
 
  protected:
-  raw_ptr<FromGWSPageLoadMetricsObserver> observer_ = nullptr;
+  raw_ptr<FromGWSPageLoadMetricsObserver, DanglingUntriaged> observer_ =
+      nullptr;
 };
 
 class FromGWSPageLoadMetricsLoggerTest : public testing::Test {};
diff --git a/chrome/browser/page_load_metrics/observers/gws_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/gws_page_load_metrics_observer_unittest.cc
index 6907e99..28edf65 100644
--- a/chrome/browser/page_load_metrics/observers/gws_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/gws_page_load_metrics_observer_unittest.cc
@@ -53,7 +53,7 @@
   }
 
  protected:
-  raw_ptr<GWSPageLoadMetricsObserver> observer_ = nullptr;
+  raw_ptr<GWSPageLoadMetricsObserver, DanglingUntriaged> observer_ = nullptr;
 };
 
 class GWSPageLoadMetricsLoggerTest : public testing::Test {};
diff --git a/chrome/browser/page_load_metrics/observers/page_anchors_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/page_anchors_metrics_observer_unittest.cc
index bf20e71..478c5641 100644
--- a/chrome/browser/page_load_metrics/observers/page_anchors_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/page_anchors_metrics_observer_unittest.cc
@@ -99,7 +99,8 @@
     PopulateRequiredTimingFields(&timing_);
   }
 
-  raw_ptr<TestPageAnchorsMetricsObserver> pam_observer_ = nullptr;
+  raw_ptr<TestPageAnchorsMetricsObserver, DanglingUntriaged> pam_observer_ =
+      nullptr;
   page_load_metrics::mojom::PageLoadTiming timing_;
 
   GURL navigation_url_{"https://chromium.org"};
diff --git a/chrome/browser/page_load_metrics/observers/prefetch_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/prefetch_page_load_metrics_observer_unittest.cc
index fff0b08..0a171e3 100644
--- a/chrome/browser/page_load_metrics/observers/prefetch_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/prefetch_page_load_metrics_observer_unittest.cc
@@ -92,7 +92,8 @@
     PopulateRequiredTimingFields(&timing_);
   }
 
-  raw_ptr<TestPrefetchPageLoadMetricsObserver> plm_observer_ = nullptr;
+  raw_ptr<TestPrefetchPageLoadMetricsObserver, DanglingUntriaged>
+      plm_observer_ = nullptr;
   page_load_metrics::mojom::PageLoadTiming timing_;
 
   GURL navigation_url_{"https://chromium.org"};
diff --git a/chrome/browser/page_load_metrics/observers/protocol_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/protocol_page_load_metrics_observer_unittest.cc
index 73f531b..bbdff27 100644
--- a/chrome/browser/page_load_metrics/observers/protocol_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/protocol_page_load_metrics_observer_unittest.cc
@@ -88,7 +88,7 @@
         prefix + ".DocumentTiming.NavigationToLoadEventFired", 1);
   }
 
-  raw_ptr<ProtocolPageLoadMetricsObserver> observer_;
+  raw_ptr<ProtocolPageLoadMetricsObserver, DanglingUntriaged> observer_;
 };
 
 TEST_F(ProtocolPageLoadMetricsObserverTest, H11Navigation) {
diff --git a/chrome/browser/page_load_metrics/observers/scheme_page_load_metrics_observer_unittest.cc b/chrome/browser/page_load_metrics/observers/scheme_page_load_metrics_observer_unittest.cc
index b9c0ef2..6e2bb6d 100644
--- a/chrome/browser/page_load_metrics/observers/scheme_page_load_metrics_observer_unittest.cc
+++ b/chrome/browser/page_load_metrics/observers/scheme_page_load_metrics_observer_unittest.cc
@@ -155,7 +155,7 @@
         std::size(kUnderStatRecordingIntervalsSeconds) + 1, 0);
   }
 
-  raw_ptr<SchemePageLoadMetricsObserver> observer_;
+  raw_ptr<SchemePageLoadMetricsObserver, DanglingUntriaged> observer_;
 };
 
 TEST_F(SchemePageLoadMetricsObserverTest, HTTPNavigation) {
diff --git a/chrome/browser/password_manager/chrome_password_manager_client_unittest.cc b/chrome/browser/password_manager/chrome_password_manager_client_unittest.cc
index e97b683..12b3d23 100644
--- a/chrome/browser/password_manager/chrome_password_manager_client_unittest.cc
+++ b/chrome/browser/password_manager/chrome_password_manager_client_unittest.cc
@@ -335,7 +335,7 @@
 
   bool metrics_enabled_ = false;
 
-  raw_ptr<syncer::TestSyncService> sync_service_ = nullptr;
+  raw_ptr<syncer::TestSyncService, DanglingUntriaged> sync_service_ = nullptr;
 
   base::test::ScopedFeatureList scoped_feature_list_;
 };
diff --git a/chrome/browser/password_manager/chrome_webauthn_credentials_delegate_unittest.cc b/chrome/browser/password_manager/chrome_webauthn_credentials_delegate_unittest.cc
index a8dc8a6c..76448c7 100644
--- a/chrome/browser/password_manager/chrome_webauthn_credentials_delegate_unittest.cc
+++ b/chrome/browser/password_manager/chrome_webauthn_credentials_delegate_unittest.cc
@@ -132,7 +132,8 @@
 #endif
 
  protected:
-  raw_ptr<ChromeWebAuthnCredentialsDelegate> credentials_delegate_;
+  raw_ptr<ChromeWebAuthnCredentialsDelegate, DanglingUntriaged>
+      credentials_delegate_;
 #if !BUILDFLAG(IS_ANDROID)
   std::unique_ptr<ChromeAuthenticatorRequestDelegate>
       authenticator_request_delegate_;
diff --git a/chrome/browser/password_manager/multi_profile_credentials_filter_unittest.cc b/chrome/browser/password_manager/multi_profile_credentials_filter_unittest.cc
index 0278ad74..a7fa6853 100644
--- a/chrome/browser/password_manager/multi_profile_credentials_filter_unittest.cc
+++ b/chrome/browser/password_manager/multi_profile_credentials_filter_unittest.cc
@@ -68,7 +68,8 @@
   }
 
  private:
-  raw_ptr<signin::IdentityManager> identity_manager_ = nullptr;
+  raw_ptr<signin::IdentityManager, DanglingUntriaged> identity_manager_ =
+      nullptr;
 };
 
 }  // namespace
diff --git a/chrome/browser/performance_manager/policies/background_tab_loading_policy_unittest.cc b/chrome/browser/performance_manager/policies/background_tab_loading_policy_unittest.cc
index 95dde24..1bf92c32 100644
--- a/chrome/browser/performance_manager/policies/background_tab_loading_policy_unittest.cc
+++ b/chrome/browser/performance_manager/policies/background_tab_loading_policy_unittest.cc
@@ -119,8 +119,8 @@
   std::unique_ptr<
       performance_manager::TestNodeWrapper<performance_manager::SystemNodeImpl>>
       system_node_;
-  raw_ptr<MockBackgroundTabLoadingPolicy> policy_;
-  raw_ptr<MockPageLoader> mock_loader_;
+  raw_ptr<MockBackgroundTabLoadingPolicy, DanglingUntriaged> policy_;
+  raw_ptr<MockPageLoader, DanglingUntriaged> mock_loader_;
   int num_all_tabs_loaded_calls_ = 0;
 };
 
diff --git a/chrome/browser/performance_manager/policies/heuristic_memory_saver_policy_unittest.cc b/chrome/browser/performance_manager/policies/heuristic_memory_saver_policy_unittest.cc
index 233f882..2325ce9 100644
--- a/chrome/browser/performance_manager/policies/heuristic_memory_saver_policy_unittest.cc
+++ b/chrome/browser/performance_manager/policies/heuristic_memory_saver_policy_unittest.cc
@@ -135,7 +135,7 @@
 
  private:
   // Owned by the graph.
-  raw_ptr<HeuristicMemorySaverPolicy> policy_;
+  raw_ptr<HeuristicMemorySaverPolicy, DanglingUntriaged> policy_;
 
   TestNodeWrapper<PageNodeImpl> other_page_node_;
   TestNodeWrapper<ProcessNodeImpl> other_process_node_;
diff --git a/chrome/browser/performance_manager/policies/high_efficiency_mode_policy_unittest.cc b/chrome/browser/performance_manager/policies/high_efficiency_mode_policy_unittest.cc
index 05fbcd6..f9d497f 100644
--- a/chrome/browser/performance_manager/policies/high_efficiency_mode_policy_unittest.cc
+++ b/chrome/browser/performance_manager/policies/high_efficiency_mode_policy_unittest.cc
@@ -51,7 +51,7 @@
   }
 
  private:
-  raw_ptr<HighEfficiencyModePolicy> policy_;
+  raw_ptr<HighEfficiencyModePolicy, DanglingUntriaged> policy_;
 
   performance_manager::TestNodeWrapper<performance_manager::PageNodeImpl>
       other_page_node_;
diff --git a/chrome/browser/performance_manager/policies/urgent_page_discarding_policy_unittest.cc b/chrome/browser/performance_manager/policies/urgent_page_discarding_policy_unittest.cc
index f7dfc009..88886d4 100644
--- a/chrome/browser/performance_manager/policies/urgent_page_discarding_policy_unittest.cc
+++ b/chrome/browser/performance_manager/policies/urgent_page_discarding_policy_unittest.cc
@@ -44,7 +44,7 @@
   }
 
  private:
-  raw_ptr<UrgentPageDiscardingPolicy> policy_;
+  raw_ptr<UrgentPageDiscardingPolicy, DanglingUntriaged> policy_;
 };
 
 TEST_F(UrgentPageDiscardingPolicyTest, DiscardOnCriticalPressure) {
diff --git a/chrome/browser/performance_manager/test_support/test_user_performance_tuning_manager_environment.h b/chrome/browser/performance_manager/test_support/test_user_performance_tuning_manager_environment.h
index 0745e934a..b9d401d 100644
--- a/chrome/browser/performance_manager/test_support/test_user_performance_tuning_manager_environment.h
+++ b/chrome/browser/performance_manager/test_support/test_user_performance_tuning_manager_environment.h
@@ -34,7 +34,7 @@
   FakePowerMonitorSource* power_monitor_source();
 
  private:
-  raw_ptr<FakePowerMonitorSource> power_monitor_source_;
+  raw_ptr<FakePowerMonitorSource, DanglingUntriaged> power_monitor_source_;
   raw_ptr<base::test::TestSamplingEventSource> sampling_source_;
   raw_ptr<base::test::TestBatteryLevelProvider> battery_level_provider_;
   std::unique_ptr<base::BatteryStateSampler> battery_sampler_;
diff --git a/chrome/browser/performance_manager/user_tuning/profile_discard_opt_out_list_helper_unittest.cc b/chrome/browser/performance_manager/user_tuning/profile_discard_opt_out_list_helper_unittest.cc
index ba9caa1..dfc9aed3 100644
--- a/chrome/browser/performance_manager/user_tuning/profile_discard_opt_out_list_helper_unittest.cc
+++ b/chrome/browser/performance_manager/user_tuning/profile_discard_opt_out_list_helper_unittest.cc
@@ -66,7 +66,8 @@
   }
 
   TestingPrefServiceSimple prefs_;
-  raw_ptr<FakeProfileDiscardOptOutListHelperDelegate> delegate_;
+  raw_ptr<FakeProfileDiscardOptOutListHelperDelegate, DanglingUntriaged>
+      delegate_;
   std::unique_ptr<ProfileDiscardOptOutListHelper> helper_;
 };
 
diff --git a/chrome/browser/performance_manager/user_tuning/user_performance_tuning_manager_unittest.cc b/chrome/browser/performance_manager/user_tuning/user_performance_tuning_manager_unittest.cc
index 5b4f753..1eeb879 100644
--- a/chrome/browser/performance_manager/user_tuning/user_performance_tuning_manager_unittest.cc
+++ b/chrome/browser/performance_manager/user_tuning/user_performance_tuning_manager_unittest.cc
@@ -158,15 +158,18 @@
 
   TestingPrefServiceSimple local_state_;
 
-  raw_ptr<base::test::TestSamplingEventSource> sampling_source_;
-  raw_ptr<base::test::TestBatteryLevelProvider> battery_level_provider_;
-  raw_ptr<FakeHighEfficiencyModeDelegate> high_efficiency_mode_delegate_;
+  raw_ptr<base::test::TestSamplingEventSource, DanglingUntriaged>
+      sampling_source_;
+  raw_ptr<base::test::TestBatteryLevelProvider, DanglingUntriaged>
+      battery_level_provider_;
+  raw_ptr<FakeHighEfficiencyModeDelegate, DanglingUntriaged>
+      high_efficiency_mode_delegate_;
   std::unique_ptr<base::BatteryStateSampler> battery_sampler_;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   ScopedFakePowerManagerClientLifetime fake_power_manager_client_lifetime_;
 #endif
-  raw_ptr<FakePowerMonitorSource> power_monitor_source_;
+  raw_ptr<FakePowerMonitorSource, DanglingUntriaged> power_monitor_source_;
   bool throttling_enabled_ = false;
   std::unique_ptr<UserPerformanceTuningManager> manager_;
 };
diff --git a/chrome/browser/permissions/chrome_permission_request_manager_unittest.cc b/chrome/browser/permissions/chrome_permission_request_manager_unittest.cc
index c0920e4..d81ee01 100644
--- a/chrome/browser/permissions/chrome_permission_request_manager_unittest.cc
+++ b/chrome/browser/permissions/chrome_permission_request_manager_unittest.cc
@@ -149,7 +149,7 @@
   permissions::MockPermissionRequest request2_;
   permissions::MockPermissionRequest request_mic_;
   permissions::MockPermissionRequest request_camera_;
-  raw_ptr<permissions::PermissionRequestManager> manager_;
+  raw_ptr<permissions::PermissionRequestManager, DanglingUntriaged> manager_;
   std::unique_ptr<permissions::MockPermissionPromptFactory> prompt_factory_;
 };
 
diff --git a/chrome/browser/plugins/pdf_iframe_navigation_throttle_unittest.cc b/chrome/browser/plugins/pdf_iframe_navigation_throttle_unittest.cc
index 8b0c0e50..242ac52 100644
--- a/chrome/browser/plugins/pdf_iframe_navigation_throttle_unittest.cc
+++ b/chrome/browser/plugins/pdf_iframe_navigation_throttle_unittest.cc
@@ -81,7 +81,7 @@
                     ->AppendChild("subframe");
   }
 
-  raw_ptr<content::RenderFrameHost> subframe_;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> subframe_;
 };
 
 TEST_F(PDFIFrameNavigationThrottleTest, OnlyCreateThrottleForSubframes) {
diff --git a/chrome/browser/policy/chrome_browser_cloud_management_register_watcher_unittest.cc b/chrome/browser/policy/chrome_browser_cloud_management_register_watcher_unittest.cc
index 8a20ed83..9033781f 100644
--- a/chrome/browser/policy/chrome_browser_cloud_management_register_watcher_unittest.cc
+++ b/chrome/browser/policy/chrome_browser_cloud_management_register_watcher_unittest.cc
@@ -133,7 +133,7 @@
   ChromeBrowserCloudManagementRegisterWatcher watcher_;
   FakeBrowserDMTokenStorage storage_;
   std::unique_ptr<MockEnterpriseStartupDialog> dialog_;
-  raw_ptr<MockEnterpriseStartupDialog> dialog_ptr_;
+  raw_ptr<MockEnterpriseStartupDialog, DanglingUntriaged> dialog_ptr_;
 };
 
 TEST_F(ChromeBrowserCloudManagementRegisterWatcherTest,
diff --git a/chrome/browser/policy/cloud/cloud_policy_invalidator_unittest.cc b/chrome/browser/policy/cloud/cloud_policy_invalidator_unittest.cc
index d464c04..e55e796c 100644
--- a/chrome/browser/policy/cloud/cloud_policy_invalidator_unittest.cc
+++ b/chrome/browser/policy/cloud/cloud_policy_invalidator_unittest.cc
@@ -201,7 +201,7 @@
   invalidation::FakeInvalidationService invalidation_service_;
   MockCloudPolicyStore store_;
   CloudPolicyCore core_;
-  raw_ptr<MockCloudPolicyClient> client_;
+  raw_ptr<MockCloudPolicyClient, DanglingUntriaged> client_;
   scoped_refptr<base::TestSimpleTaskRunner> task_runner_;
   base::SimpleTestClock clock_;
 
diff --git a/chrome/browser/policy/cloud/user_policy_signin_service_unittest.cc b/chrome/browser/policy/cloud/user_policy_signin_service_unittest.cc
index 3959556..bb9b674 100644
--- a/chrome/browser/policy/cloud/user_policy_signin_service_unittest.cc
+++ b/chrome/browser/policy/cloud/user_policy_signin_service_unittest.cc
@@ -292,9 +292,11 @@
   std::unique_ptr<TestingProfile> profile_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_adaptor_;
-  raw_ptr<MockUserCloudPolicyStore> mock_store_ = nullptr;  // Not owned.
+  raw_ptr<MockUserCloudPolicyStore, DanglingUntriaged> mock_store_ =
+      nullptr;  // Not owned.
   SchemaRegistry schema_registry_;
-  raw_ptr<UserCloudPolicyManager> manager_ = nullptr;  // Not owned.
+  raw_ptr<UserCloudPolicyManager, DanglingUntriaged> manager_ =
+      nullptr;  // Not owned.
 
   // BrowserPolicyConnector and UrlFetcherFactory want to initialize and free
   // various components asynchronously via tasks, so create fake threads here.
diff --git a/chrome/browser/policy/messaging_layer/public/report_client_unittest.cc b/chrome/browser/policy/messaging_layer/public/report_client_unittest.cc
index ef3e899..9b2776c 100644
--- a/chrome/browser/policy/messaging_layer/public/report_client_unittest.cc
+++ b/chrome/browser/policy/messaging_layer/public/report_client_unittest.cc
@@ -287,7 +287,7 @@
   SignedEncryptionInfo signed_encryption_key_;
 
   ReportingServerConnector::TestEnvironment test_env_;
-  raw_ptr<ReportQueueConfiguration> report_queue_config_;
+  raw_ptr<ReportQueueConfiguration, DanglingUntriaged> report_queue_config_;
   const Destination destination_ = Destination::UPLOAD_EVENTS;
   ReportQueueConfiguration::PolicyCheckCallback policy_checker_callback_ =
       base::BindRepeating([]() { return Status::StatusOK(); });
diff --git a/chrome/browser/predictors/loading_data_collector.h b/chrome/browser/predictors/loading_data_collector.h
index d2dd67f..424ca281 100644
--- a/chrome/browser/predictors/loading_data_collector.h
+++ b/chrome/browser/predictors/loading_data_collector.h
@@ -171,7 +171,7 @@
   // Cleanup inflight_navigations_ and call a cleanup for stats_collector_.
   void CleanupAbandonedNavigations(NavigationId navigation_id);
 
-  const raw_ptr<ResourcePrefetchPredictor> predictor_;
+  const raw_ptr<ResourcePrefetchPredictor, DanglingUntriaged> predictor_;
   const raw_ptr<LoadingStatsCollector> stats_collector_;
   const LoadingPredictorConfig config_;
 
diff --git a/chrome/browser/predictors/loading_predictor.h b/chrome/browser/predictors/loading_predictor.h
index 945d742..933207cf 100644
--- a/chrome/browser/predictors/loading_predictor.h
+++ b/chrome/browser/predictors/loading_predictor.h
@@ -174,7 +174,7 @@
   }
 
   LoadingPredictorConfig config_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<ResourcePrefetchPredictor> resource_prefetch_predictor_;
   std::unique_ptr<LoadingStatsCollector> stats_collector_;
   std::unique_ptr<LoadingDataCollector> loading_data_collector_;
diff --git a/chrome/browser/predictors/loading_predictor_tab_helper_unittest.cc b/chrome/browser/predictors/loading_predictor_tab_helper_unittest.cc
index 06653f4..74dc3b3 100644
--- a/chrome/browser/predictors/loading_predictor_tab_helper_unittest.cc
+++ b/chrome/browser/predictors/loading_predictor_tab_helper_unittest.cc
@@ -92,10 +92,10 @@
   // Owned by |loading_predictor_|.
   raw_ptr<StrictMock<MockLoadingDataCollector>> mock_collector_;
   // Owned elsewhere.
-  raw_ptr<NiceMock<MockOptimizationGuideKeyedService>>
+  raw_ptr<NiceMock<MockOptimizationGuideKeyedService>, DanglingUntriaged>
       mock_optimization_guide_keyed_service_;
   // Owned by |web_contents()|.
-  raw_ptr<LoadingPredictorTabHelper> tab_helper_;
+  raw_ptr<LoadingPredictorTabHelper, DanglingUntriaged> tab_helper_;
 };
 
 void LoadingPredictorTabHelperTest::SetUp() {
diff --git a/chrome/browser/predictors/loading_stats_collector.h b/chrome/browser/predictors/loading_stats_collector.h
index 3cf49739..a556bed 100644
--- a/chrome/browser/predictors/loading_stats_collector.h
+++ b/chrome/browser/predictors/loading_stats_collector.h
@@ -72,7 +72,7 @@
   void CleanupAbandonedStats();
 
  private:
-  raw_ptr<ResourcePrefetchPredictor> predictor_;
+  raw_ptr<ResourcePrefetchPredictor, DanglingUntriaged> predictor_;
   base::TimeDelta max_stats_age_;
   std::map<GURL, std::unique_ptr<PreconnectStats>> preconnect_stats_;
 };
diff --git a/chrome/browser/predictors/preconnect_manager.h b/chrome/browser/predictors/preconnect_manager.h
index d18470c0..2f079f4 100644
--- a/chrome/browser/predictors/preconnect_manager.h
+++ b/chrome/browser/predictors/preconnect_manager.h
@@ -235,7 +235,7 @@
   network::mojom::NetworkContext* GetNetworkContext() const;
 
   base::WeakPtr<Delegate> delegate_;
-  const raw_ptr<content::BrowserContext> browser_context_;
+  const raw_ptr<content::BrowserContext, DanglingUntriaged> browser_context_;
   std::list<PreresolveJobId> queued_jobs_;
   PreresolveJobMap preresolve_jobs_;
   std::map<GURL, std::unique_ptr<PreresolveInfo>> preresolve_info_;
diff --git a/chrome/browser/predictors/prefetch_manager.h b/chrome/browser/predictors/prefetch_manager.h
index 6ff8baa..39d47116 100644
--- a/chrome/browser/predictors/prefetch_manager.h
+++ b/chrome/browser/predictors/prefetch_manager.h
@@ -125,7 +125,7 @@
   void TryToLaunchPrefetchJobs();
 
   base::WeakPtr<Delegate> delegate_;
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // All the jobs that haven't yet started. A job is removed once it starts.
   // Inflight jobs destruct once finished.
diff --git a/chrome/browser/predictors/resource_prefetch_predictor.h b/chrome/browser/predictors/resource_prefetch_predictor.h
index bc2d4583..ec16670 100644
--- a/chrome/browser/predictors/resource_prefetch_predictor.h
+++ b/chrome/browser/predictors/resource_prefetch_predictor.h
@@ -308,7 +308,7 @@
     tables_ = tables;
   }
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
   raw_ptr<TestObserver> observer_;
   const LoadingPredictorConfig config_;
   InitializationState initialization_state_;
diff --git a/chrome/browser/predictors/resource_prefetch_predictor_unittest.cc b/chrome/browser/predictors/resource_prefetch_predictor_unittest.cc
index e16035b..dcc03d9 100644
--- a/chrome/browser/predictors/resource_prefetch_predictor_unittest.cc
+++ b/chrome/browser/predictors/resource_prefetch_predictor_unittest.cc
@@ -143,7 +143,7 @@
   scoped_refptr<base::TestSimpleTaskRunner> db_task_runner_;
 
   std::unique_ptr<LoadingPredictor> loading_predictor_;
-  raw_ptr<ResourcePrefetchPredictor> predictor_;
+  raw_ptr<ResourcePrefetchPredictor, DanglingUntriaged> predictor_;
   scoped_refptr<StrictMock<MockResourcePrefetchPredictorTables>> mock_tables_;
 
   RedirectDataMap test_host_redirect_data_;
diff --git a/chrome/browser/preloading/prerender/prerender_manager_unittest.cc b/chrome/browser/preloading/prerender/prerender_manager_unittest.cc
index 1a710965..ef4f71e 100644
--- a/chrome/browser/preloading/prerender/prerender_manager_unittest.cc
+++ b/chrome/browser/preloading/prerender/prerender_manager_unittest.cc
@@ -101,7 +101,7 @@
       web_contents_delegate_;
 
   net::EmbeddedTestServer test_server_;
-  raw_ptr<PrerenderManager> prerender_manager_;
+  raw_ptr<PrerenderManager, DanglingUntriaged> prerender_manager_;
 };
 
 TEST_F(PrerenderManagerTest, StartCleanSearchSuggestionPrerender) {
diff --git a/chrome/browser/privacy_sandbox/privacy_sandbox_service.h b/chrome/browser/privacy_sandbox/privacy_sandbox_service.h
index 6471726..c72ab5c 100644
--- a/chrome/browser/privacy_sandbox/privacy_sandbox_service.h
+++ b/chrome/browser/privacy_sandbox/privacy_sandbox_service.h
@@ -555,7 +555,8 @@
       bool did_consent) const;
 
  private:
-  raw_ptr<privacy_sandbox::PrivacySandboxSettings> privacy_sandbox_settings_;
+  raw_ptr<privacy_sandbox::PrivacySandboxSettings, DanglingUntriaged>
+      privacy_sandbox_settings_;
   raw_ptr<content_settings::CookieSettings> cookie_settings_;
   raw_ptr<PrefService> pref_service_;
   raw_ptr<content::InterestGroupManager> interest_group_manager_;
@@ -563,7 +564,7 @@
   raw_ptr<content::BrowsingDataRemover> browsing_data_remover_;
   raw_ptr<HostContentSettingsMap> host_content_settings_map_;
 #if !BUILDFLAG(IS_ANDROID)
-  raw_ptr<TrustSafetySentimentService> sentiment_service_;
+  raw_ptr<TrustSafetySentimentService, DanglingUntriaged> sentiment_service_;
 #endif
   raw_ptr<browsing_topics::BrowsingTopicsService> browsing_topics_service_;
   raw_ptr<first_party_sets::FirstPartySetsPolicyService>
diff --git a/chrome/browser/privacy_sandbox/privacy_sandbox_service_unittest.cc b/chrome/browser/privacy_sandbox/privacy_sandbox_service_unittest.cc
index d7961b6..1d27f96 100644
--- a/chrome/browser/privacy_sandbox/privacy_sandbox_service_unittest.cc
+++ b/chrome/browser/privacy_sandbox/privacy_sandbox_service_unittest.cc
@@ -1003,7 +1003,8 @@
   base::test::ScopedFeatureList feature_list_;
   TestInterestGroupManager test_interest_group_manager_;
   browsing_topics::MockBrowsingTopicsService mock_browsing_topics_service_;
-  raw_ptr<privacy_sandbox_test_util::MockPrivacySandboxSettingsDelegate>
+  raw_ptr<privacy_sandbox_test_util::MockPrivacySandboxSettingsDelegate,
+          DanglingUntriaged>
       mock_delegate_;
 
   first_party_sets::ScopedMockFirstPartySetsHandler
diff --git a/chrome/browser/process_singleton_posix_unittest.cc b/chrome/browser/process_singleton_posix_unittest.cc
index 1ead055..a9b614c 100644
--- a/chrome/browser/process_singleton_posix_unittest.cc
+++ b/chrome/browser/process_singleton_posix_unittest.cc
@@ -267,7 +267,8 @@
   base::WaitableEvent signal_event_;
 
   std::unique_ptr<base::Thread> worker_thread_;
-  raw_ptr<TestableProcessSingleton> process_singleton_on_thread_;
+  raw_ptr<TestableProcessSingleton, DanglingUntriaged>
+      process_singleton_on_thread_;
 };
 
 }  // namespace
diff --git a/chrome/browser/profiles/profile_manager_unittest.cc b/chrome/browser/profiles/profile_manager_unittest.cc
index f012d51..8fbef78 100644
--- a/chrome/browser/profiles/profile_manager_unittest.cc
+++ b/chrome/browser/profiles/profile_manager_unittest.cc
@@ -912,7 +912,8 @@
 #endif
 
  private:
-  raw_ptr<UnittestGuestProfileManager> unittest_profile_manager_ = nullptr;
+  raw_ptr<UnittestGuestProfileManager, DanglingUntriaged>
+      unittest_profile_manager_ = nullptr;
 };
 
 TEST_F(ProfileManagerGuestTest, GetLastUsedProfileAllowedByPolicy) {
diff --git a/chrome/browser/profiles/profile_testing_helper.h b/chrome/browser/profiles/profile_testing_helper.h
index c26d12d..a8c973cc 100644
--- a/chrome/browser/profiles/profile_testing_helper.h
+++ b/chrome/browser/profiles/profile_testing_helper.h
@@ -47,15 +47,15 @@
   content::BrowserTaskEnvironment task_environment_;
   TestingProfileManager manager_;
 
-  raw_ptr<TestingProfile> regular_profile_ = nullptr;
-  raw_ptr<Profile> incognito_profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> regular_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> incognito_profile_ = nullptr;
 
-  raw_ptr<TestingProfile> guest_profile_ = nullptr;
-  raw_ptr<Profile> guest_profile_otr_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> guest_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> guest_profile_otr_ = nullptr;
 
 #if !BUILDFLAG(IS_CHROMEOS_ASH) && !BUILDFLAG(IS_ANDROID)
-  raw_ptr<TestingProfile> system_profile_ = nullptr;
-  raw_ptr<Profile> system_profile_otr_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> system_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> system_profile_otr_ = nullptr;
 #endif  // !BUILDFLAG(IS_CHROMEOS_ASH) && !BUILDFLAG(IS_ANDROID)
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
diff --git a/chrome/browser/renderer_context_menu/render_view_context_menu_unittest.cc b/chrome/browser/renderer_context_menu/render_view_context_menu_unittest.cc
index dd7e756..10a9ab5 100644
--- a/chrome/browser/renderer_context_menu/render_view_context_menu_unittest.cc
+++ b/chrome/browser/renderer_context_menu/render_view_context_menu_unittest.cc
@@ -572,7 +572,7 @@
  private:
   std::unique_ptr<custom_handlers::ProtocolHandlerRegistry> registry_;
   std::unique_ptr<ScopedTestingLocalState> testing_local_state_;
-  raw_ptr<TemplateURLService> template_url_service_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
   std::unique_ptr<Browser> browser_;
 };
 
diff --git a/chrome/browser/resource_coordinator/discard_metrics_lifecycle_unit_observer_unittest.cc b/chrome/browser/resource_coordinator/discard_metrics_lifecycle_unit_observer_unittest.cc
index 5a6527f7..719d2805 100644
--- a/chrome/browser/resource_coordinator/discard_metrics_lifecycle_unit_observer_unittest.cc
+++ b/chrome/browser/resource_coordinator/discard_metrics_lifecycle_unit_observer_unittest.cc
@@ -44,7 +44,7 @@
   }
 
   // Owned by |lifecycle_unit|.
-  raw_ptr<DiscardMetricsLifecycleUnitObserver> observer_ =
+  raw_ptr<DiscardMetricsLifecycleUnitObserver, DanglingUntriaged> observer_ =
       new DiscardMetricsLifecycleUnitObserver();
 
   std::unique_ptr<TestLifecycleUnit> lifecycle_unit_ =
diff --git a/chrome/browser/resource_coordinator/tab_lifecycle_unit.h b/chrome/browser/resource_coordinator/tab_lifecycle_unit.h
index 23d19c3..7675f2e 100644
--- a/chrome/browser/resource_coordinator/tab_lifecycle_unit.h
+++ b/chrome/browser/resource_coordinator/tab_lifecycle_unit.h
@@ -147,7 +147,7 @@
   raw_ptr<base::ObserverList<TabLifecycleObserver>::Unchecked> observers_;
 
   // TabStripModel to which this tab belongs.
-  raw_ptr<TabStripModel> tab_strip_model_;
+  raw_ptr<TabStripModel, DanglingUntriaged> tab_strip_model_;
 
   // Last time at which this tab was focused, or TimeTicks::Max() if it is
   // currently focused. For tabs that aren't currently focused this is
diff --git a/chrome/browser/resource_coordinator/tab_lifecycle_unit_unittest.cc b/chrome/browser/resource_coordinator/tab_lifecycle_unit_unittest.cc
index 1de9ceb..dce7700 100644
--- a/chrome/browser/resource_coordinator/tab_lifecycle_unit_unittest.cc
+++ b/chrome/browser/resource_coordinator/tab_lifecycle_unit_unittest.cc
@@ -167,7 +167,8 @@
 
   ::testing::StrictMock<MockTabLifecycleObserver> observer_;
   base::ObserverList<TabLifecycleObserver>::Unchecked observers_;
-  raw_ptr<content::WebContents> web_contents_;  // Owned by tab_strip_model_.
+  raw_ptr<content::WebContents, DanglingUntriaged>
+      web_contents_;  // Owned by tab_strip_model_.
   std::unique_ptr<TabStripModel> tab_strip_model_;
   base::SimpleTestTickClock test_clock_;
   std::unique_ptr<UsageClock> usage_clock_;
diff --git a/chrome/browser/resource_coordinator/tab_memory_metrics_reporter.h b/chrome/browser/resource_coordinator/tab_memory_metrics_reporter.h
index 125af6c..a097b89 100644
--- a/chrome/browser/resource_coordinator/tab_memory_metrics_reporter.h
+++ b/chrome/browser/resource_coordinator/tab_memory_metrics_reporter.h
@@ -63,7 +63,7 @@
     base::TimeTicks page_loaded_time;
     base::TimeTicks next_emit_time;
     ReportState state;
-    raw_ptr<content::WebContents> web_contents;
+    raw_ptr<content::WebContents, DanglingUntriaged> web_contents;
   };
 
   struct WebContentsDataComparator {
diff --git a/chrome/browser/resource_coordinator/tab_memory_metrics_reporter_unittest.cc b/chrome/browser/resource_coordinator/tab_memory_metrics_reporter_unittest.cc
index dba1c8cf..2470441f 100644
--- a/chrome/browser/resource_coordinator/tab_memory_metrics_reporter_unittest.cc
+++ b/chrome/browser/resource_coordinator/tab_memory_metrics_reporter_unittest.cc
@@ -119,9 +119,9 @@
   std::unique_ptr<content::TestWebContentsFactory> test_web_contents_factory_;
   content::BrowserTaskEnvironment task_environment_;
   TestingProfile testing_profile_;
-  raw_ptr<content::WebContents> contents1_;
-  raw_ptr<content::WebContents> contents2_;
-  raw_ptr<content::WebContents> contents3_;
+  raw_ptr<content::WebContents, DanglingUntriaged> contents1_;
+  raw_ptr<content::WebContents, DanglingUntriaged> contents2_;
+  raw_ptr<content::WebContents, DanglingUntriaged> contents3_;
 };
 
 TEST_F(TabMemoryMetricsReporterTest, StartTrackingWithUnloaded) {
diff --git a/chrome/browser/safe_browsing/chrome_client_side_detection_host_delegate_unittest.cc b/chrome/browser/safe_browsing/chrome_client_side_detection_host_delegate_unittest.cc
index f877ddc..e1791cd 100644
--- a/chrome/browser/safe_browsing/chrome_client_side_detection_host_delegate_unittest.cc
+++ b/chrome/browser/safe_browsing/chrome_client_side_detection_host_delegate_unittest.cc
@@ -57,7 +57,8 @@
   }
 
  protected:
-  raw_ptr<SafeBrowsingNavigationObserverManager> navigation_observer_manager_;
+  raw_ptr<SafeBrowsingNavigationObserverManager, DanglingUntriaged>
+      navigation_observer_manager_;
   std::unique_ptr<SafeBrowsingNavigationObserver> navigation_observer_;
 };
 
diff --git a/chrome/browser/safe_browsing/chrome_enterprise_url_lookup_service.h b/chrome/browser/safe_browsing/chrome_enterprise_url_lookup_service.h
index a592306..cba3c1e6 100644
--- a/chrome/browser/safe_browsing/chrome_enterprise_url_lookup_service.h
+++ b/chrome/browser/safe_browsing/chrome_enterprise_url_lookup_service.h
@@ -92,10 +92,11 @@
   double GetMinAllowedTimestampForReferrerChains() const override;
 
   // Unowned object used for checking profile based settings.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Unowned pointer to ConnectorsService, used to get a DM token.
-  raw_ptr<enterprise_connectors::ConnectorsService> connectors_service_;
+  raw_ptr<enterprise_connectors::ConnectorsService, DanglingUntriaged>
+      connectors_service_;
 
   // The token fetcher used for getting access token.
   std::unique_ptr<SafeBrowsingTokenFetcher> token_fetcher_;
diff --git a/chrome/browser/safe_browsing/chrome_password_protection_service.h b/chrome/browser/safe_browsing/chrome_password_protection_service.h
index 2dccf64b..15e3b62 100644
--- a/chrome/browser/safe_browsing/chrome_password_protection_service.h
+++ b/chrome/browser/safe_browsing/chrome_password_protection_service.h
@@ -557,7 +557,7 @@
       const password_manager::MatchingReusedCredential& reused_credential);
 
   scoped_refptr<SafeBrowsingUIManager> ui_manager_;
-  raw_ptr<TriggerManager> trigger_manager_;
+  raw_ptr<TriggerManager, DanglingUntriaged> trigger_manager_;
   // Profile associated with this instance.
   raw_ptr<Profile> profile_;
   // Current sync password hash.
diff --git a/chrome/browser/safe_browsing/chrome_password_protection_service_unittest.cc b/chrome/browser/safe_browsing/chrome_password_protection_service_unittest.cc
index bb53ffa..ab523438 100644
--- a/chrome/browser/safe_browsing/chrome_password_protection_service_unittest.cc
+++ b/chrome/browser/safe_browsing/chrome_password_protection_service_unittest.cc
@@ -426,14 +426,16 @@
   std::unique_ptr<LoginReputationClientResponse> verdict_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_profile_adaptor_;
-  raw_ptr<MockSecurityEventRecorder> security_event_recorder_;
+  raw_ptr<MockSecurityEventRecorder, DanglingUntriaged>
+      security_event_recorder_;
   scoped_refptr<password_manager::MockPasswordStoreInterface> password_store_;
   scoped_refptr<password_manager::MockPasswordStoreInterface>
       account_password_store_;
   // Owned by KeyedServiceFactory.
-  raw_ptr<syncer::FakeUserEventService> fake_user_event_service_;
+  raw_ptr<syncer::FakeUserEventService, DanglingUntriaged>
+      fake_user_event_service_;
 #if !BUILDFLAG(IS_ANDROID)
-  raw_ptr<extensions::TestEventRouter> test_event_router_;
+  raw_ptr<extensions::TestEventRouter, DanglingUntriaged> test_event_router_;
 #endif
   std::unique_ptr<VerdictCacheManager> cache_manager_;
   ScopedTestingLocalState local_state_;
diff --git a/chrome/browser/safe_browsing/client_side_detection_host_unittest.cc b/chrome/browser/safe_browsing/client_side_detection_host_unittest.cc
index a05bedc..cc9a2a98 100644
--- a/chrome/browser/safe_browsing/client_side_detection_host_unittest.cc
+++ b/chrome/browser/safe_browsing/client_side_detection_host_unittest.cc
@@ -424,8 +424,8 @@
   scoped_refptr<StrictMock<MockSafeBrowsingUIManager> > ui_manager_;
   scoped_refptr<StrictMock<MockSafeBrowsingDatabaseManager>> database_manager_;
   FakePhishingDetector fake_phishing_detector_;
-  raw_ptr<StrictMock<MockSafeBrowsingTokenFetcher>> raw_token_fetcher_ =
-      nullptr;
+  raw_ptr<StrictMock<MockSafeBrowsingTokenFetcher>, DanglingUntriaged>
+      raw_token_fetcher_ = nullptr;
   base::SimpleTestTickClock clock_;
   const bool is_incognito_;
   signin::IdentityTestEnvironment identity_test_env_;
diff --git a/chrome/browser/safe_browsing/cloud_content_scanning/cloud_binary_upload_service_unittest.cc b/chrome/browser/safe_browsing/cloud_content_scanning/cloud_binary_upload_service_unittest.cc
index 3b08f01..a67584dc 100644
--- a/chrome/browser/safe_browsing/cloud_content_scanning/cloud_binary_upload_service_unittest.cc
+++ b/chrome/browser/safe_browsing/cloud_content_scanning/cloud_binary_upload_service_unittest.cc
@@ -290,7 +290,7 @@
   content::BrowserTaskEnvironment task_environment_;
   TestingProfile profile_;
   std::unique_ptr<CloudBinaryUploadService> service_;
-  raw_ptr<MockBinaryFCMService> fcm_service_;
+  raw_ptr<MockBinaryFCMService, DanglingUntriaged> fcm_service_;
   FakeMultipartUploadRequestFactory fake_factory_;
   base::RepeatingClosure request_done_closure_;
   int fcm_connection_failures_ = 0;
diff --git a/chrome/browser/safe_browsing/download_protection/download_feedback_unittest.cc b/chrome/browser/safe_browsing/download_protection/download_feedback_unittest.cc
index e356b2b1..ef3d6d92 100644
--- a/chrome/browser/safe_browsing/download_protection/download_feedback_unittest.cc
+++ b/chrome/browser/safe_browsing/download_protection/download_feedback_unittest.cc
@@ -76,7 +76,7 @@
       TwoPhaseUploader::FinishCallback finish_callback,
       const net::NetworkTrafficAnnotationTag& traffic_annotation) override;
 
-  raw_ptr<FakeUploader> uploader_;
+  raw_ptr<FakeUploader, DanglingUntriaged> uploader_;
 };
 
 std::unique_ptr<TwoPhaseUploader> FakeUploaderFactory::CreateTwoPhaseUploader(
diff --git a/chrome/browser/safe_browsing/download_protection/download_protection_service_unittest.cc b/chrome/browser/safe_browsing/download_protection/download_protection_service_unittest.cc
index b1ffcb8..ed295d1c 100644
--- a/chrome/browser/safe_browsing/download_protection/download_protection_service_unittest.cc
+++ b/chrome/browser/safe_browsing/download_protection/download_protection_service_unittest.cc
@@ -752,7 +752,7 @@
 
   scoped_refptr<FakeSafeBrowsingService> sb_service_;
   scoped_refptr<MockBinaryFeatureExtractor> binary_feature_extractor_;
-  raw_ptr<DownloadProtectionService> download_service_;
+  raw_ptr<DownloadProtectionService, DanglingUntriaged> download_service_;
   DownloadCheckResult result_;
   bool has_result_;
   std::unique_ptr<content::InProcessUtilityThreadHelper>
@@ -771,7 +771,7 @@
   base::FilePath final_path_;
   std::string hash_;
   base::ScopedTempDir temp_dir_;
-  raw_ptr<extensions::TestEventRouter> test_event_router_;
+  raw_ptr<extensions::TestEventRouter, DanglingUntriaged> test_event_router_;
   TestingProfileManager testing_profile_manager_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_adaptor_;
diff --git a/chrome/browser/safe_browsing/incident_reporting/state_store.h b/chrome/browser/safe_browsing/incident_reporting/state_store.h
index 700c689..ec73cb3 100644
--- a/chrome/browser/safe_browsing/incident_reporting/state_store.h
+++ b/chrome/browser/safe_browsing/incident_reporting/state_store.h
@@ -102,10 +102,10 @@
   void CleanLegacyValues(Transaction* transaction);
 
   // The profile to which this state corresponds.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // A read-only view on the profile's incidents_sent preference.
-  raw_ptr<const base::Value::Dict> incidents_sent_ = nullptr;
+  raw_ptr<const base::Value::Dict, DanglingUntriaged> incidents_sent_ = nullptr;
 
 #if DCHECK_IS_ON()
   // True when a Transaction instance is outstanding.
diff --git a/chrome/browser/safe_browsing/incident_reporting/state_store_unittest.cc b/chrome/browser/safe_browsing/incident_reporting/state_store_unittest.cc
index 14a164a..6d5db72 100644
--- a/chrome/browser/safe_browsing/incident_reporting/state_store_unittest.cc
+++ b/chrome/browser/safe_browsing/incident_reporting/state_store_unittest.cc
@@ -133,7 +133,7 @@
   static const char kProfileName_[];
   static const TestData kTestData_[];
   content::BrowserTaskEnvironment task_environment_;
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   scoped_refptr<base::TestSimpleTaskRunner> task_runner_;
 
  private:
diff --git a/chrome/browser/safe_browsing/phishy_interaction_tracker.h b/chrome/browser/safe_browsing/phishy_interaction_tracker.h
index daeecd34..8acf3d80 100644
--- a/chrome/browser/safe_browsing/phishy_interaction_tracker.h
+++ b/chrome/browser/safe_browsing/phishy_interaction_tracker.h
@@ -108,8 +108,8 @@
   bool is_phishy_ = false;
 
   // UI Manager that returns specific threat types for testing.
-  raw_ptr<safe_browsing::SafeBrowsingUIManager> ui_manager_for_testing_ =
-      nullptr;
+  raw_ptr<safe_browsing::SafeBrowsingUIManager, DanglingUntriaged>
+      ui_manager_for_testing_ = nullptr;
 };
 
 }  // namespace safe_browsing
diff --git a/chrome/browser/safe_browsing/tailored_security/chrome_tailored_security_service_unittest.cc b/chrome/browser/safe_browsing/tailored_security/chrome_tailored_security_service_unittest.cc
index 1ea3ce2..9b3b46b4 100644
--- a/chrome/browser/safe_browsing/tailored_security/chrome_tailored_security_service_unittest.cc
+++ b/chrome/browser/safe_browsing/tailored_security/chrome_tailored_security_service_unittest.cc
@@ -200,7 +200,8 @@
   content::BrowserTaskEnvironment task_environment_;
   // This is required to create browser tabs in the tests.
   content::RenderViewHostTestEnabler rvh_test_enabler_;
-  raw_ptr<sync_preferences::TestingPrefServiceSyncable> prefs_;
+  raw_ptr<sync_preferences::TestingPrefServiceSyncable, DanglingUntriaged>
+      prefs_;
   network::TestURLLoaderFactory test_url_loader_factory_;
   signin::IdentityTestEnvironment identity_test_environment_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
diff --git a/chrome/browser/safe_browsing/test_safe_browsing_service.h b/chrome/browser/safe_browsing/test_safe_browsing_service.h
index c93b1503..db7f5b9 100644
--- a/chrome/browser/safe_browsing/test_safe_browsing_service.h
+++ b/chrome/browser/safe_browsing/test_safe_browsing_service.h
@@ -148,7 +148,8 @@
   void UseV4LocalDatabaseManager();
 
  private:
-  raw_ptr<TestSafeBrowsingService> test_safe_browsing_service_;
+  raw_ptr<TestSafeBrowsingService, DanglingUntriaged>
+      test_safe_browsing_service_;
   scoped_refptr<TestSafeBrowsingDatabaseManager> test_database_manager_;
   scoped_refptr<TestSafeBrowsingUIManager> test_ui_manager_;
   bool use_v4_local_db_manager_;
diff --git a/chrome/browser/search/instant_unittest_base.h b/chrome/browser/search/instant_unittest_base.h
index 559a724c..69af53b 100644
--- a/chrome/browser/search/instant_unittest_base.h
+++ b/chrome/browser/search/instant_unittest_base.h
@@ -35,9 +35,9 @@
   // search_terms_replacement_key.
   void SetUserSelectedDefaultSearchProvider(const std::string& base_url);
 
-  raw_ptr<InstantService> instant_service_;
-  raw_ptr<TemplateURLService> template_url_service_;
-  raw_ptr<base::SimpleTestClock> clock_;
+  raw_ptr<InstantService, DanglingUntriaged> instant_service_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
+  raw_ptr<base::SimpleTestClock, DanglingUntriaged> clock_;
 
  private:
   // BrowserWithTestWindowTest override:
diff --git a/chrome/browser/send_tab_to_self/desktop_notification_handler_unittest.cc b/chrome/browser/send_tab_to_self/desktop_notification_handler_unittest.cc
index bdb40668..c0a9a59 100644
--- a/chrome/browser/send_tab_to_self/desktop_notification_handler_unittest.cc
+++ b/chrome/browser/send_tab_to_self/desktop_notification_handler_unittest.cc
@@ -136,8 +136,9 @@
   }
 
  protected:
-  raw_ptr<SendTabToSelfModelMock> model_mock_;
-  raw_ptr<NotificationDisplayServiceMock> display_service_mock_;
+  raw_ptr<SendTabToSelfModelMock, DanglingUntriaged> model_mock_;
+  raw_ptr<NotificationDisplayServiceMock, DanglingUntriaged>
+      display_service_mock_;
 };
 
 TEST_F(DesktopNotificationHandlerTest, DisplayNewEntries) {
diff --git a/chrome/browser/sessions/app_session_service_test_helper.h b/chrome/browser/sessions/app_session_service_test_helper.h
index 3e8e1de..c918b4d 100644
--- a/chrome/browser/sessions/app_session_service_test_helper.h
+++ b/chrome/browser/sessions/app_session_service_test_helper.h
@@ -25,7 +25,7 @@
   AppSessionService* service() { return app_session_service_; }
 
  private:
-  raw_ptr<AppSessionService> app_session_service_;
+  raw_ptr<AppSessionService, DanglingUntriaged> app_session_service_;
 };
 
 #endif  // CHROME_BROWSER_SESSIONS_APP_SESSION_SERVICE_TEST_HELPER_H_
diff --git a/chrome/browser/sessions/session_data_service_unittest.cc b/chrome/browser/sessions/session_data_service_unittest.cc
index 64f3ffc6..b3edac2 100644
--- a/chrome/browser/sessions/session_data_service_unittest.cc
+++ b/chrome/browser/sessions/session_data_service_unittest.cc
@@ -81,7 +81,8 @@
   SessionDataService* service() { return session_data_service_.get(); }
 
  private:
-  raw_ptr<StrictMock<TestSessionDataDeleter>> session_data_deleter_;
+  raw_ptr<StrictMock<TestSessionDataDeleter>, DanglingUntriaged>
+      session_data_deleter_;
   std::unique_ptr<SessionDataService> session_data_service_;
 };
 
diff --git a/chrome/browser/sessions/session_restore_delegate.h b/chrome/browser/sessions/session_restore_delegate.h
index 5a76dc3d..29e6a218 100644
--- a/chrome/browser/sessions/session_restore_delegate.h
+++ b/chrome/browser/sessions/session_restore_delegate.h
@@ -46,7 +46,7 @@
     }
 
    private:
-    raw_ptr<content::WebContents> contents_;
+    raw_ptr<content::WebContents, DanglingUntriaged> contents_;
     bool is_active_;
     bool is_app_;            // Browser window is an app.
     bool is_internal_page_;  // Internal web UI page, like NTP or Settings.
diff --git a/chrome/browser/sessions/session_restore_stats_collector_unittest.cc b/chrome/browser/sessions/session_restore_stats_collector_unittest.cc
index ddc0eea..67a3883 100644
--- a/chrome/browser/sessions/session_restore_stats_collector_unittest.cc
+++ b/chrome/browser/sessions/session_restore_stats_collector_unittest.cc
@@ -219,8 +219,9 @@
 
   // These are recreated for each test. The reporting delegate allows the test
   // to observe the behaviour of the SessionRestoreStatsCollector under test.
-  raw_ptr<PassthroughStatsReportingDelegate> passthrough_reporting_delegate_;
-  raw_ptr<SessionRestoreStatsCollector> stats_collector_;
+  raw_ptr<PassthroughStatsReportingDelegate, DanglingUntriaged>
+      passthrough_reporting_delegate_;
+  raw_ptr<SessionRestoreStatsCollector, DanglingUntriaged> stats_collector_;
 };
 
 TEST_F(SessionRestoreStatsCollectorTest, MultipleTabsLoadSerially) {
diff --git a/chrome/browser/sessions/session_service_base_test_helper.h b/chrome/browser/sessions/session_service_base_test_helper.h
index 8068b047..c666902 100644
--- a/chrome/browser/sessions/session_service_base_test_helper.h
+++ b/chrome/browser/sessions/session_service_base_test_helper.h
@@ -91,7 +91,7 @@
   explicit SessionServiceBaseTestHelper(SessionServiceBase* base);
 
  private:
-  raw_ptr<SessionServiceBase> service_;
+  raw_ptr<SessionServiceBase, DanglingUntriaged> service_;
 };
 
 #endif  // CHROME_BROWSER_SESSIONS_SESSION_SERVICE_BASE_TEST_HELPER_H_
diff --git a/chrome/browser/sessions/session_service_test_helper.h b/chrome/browser/sessions/session_service_test_helper.h
index 0372f83e..37c40f37 100644
--- a/chrome/browser/sessions/session_service_test_helper.h
+++ b/chrome/browser/sessions/session_service_test_helper.h
@@ -119,7 +119,7 @@
   }
 
  private:
-  raw_ptr<SessionService> service_;
+  raw_ptr<SessionService, DanglingUntriaged> service_;
 };
 
 #endif  // CHROME_BROWSER_SESSIONS_SESSION_SERVICE_TEST_HELPER_H_
diff --git a/chrome/browser/sessions/tab_loader_tester.h b/chrome/browser/sessions/tab_loader_tester.h
index 64f4a26..8c4c316 100644
--- a/chrome/browser/sessions/tab_loader_tester.h
+++ b/chrome/browser/sessions/tab_loader_tester.h
@@ -61,7 +61,7 @@
   void WaitForTabLoadingEnabled();
 
  private:
-  raw_ptr<TabLoader> tab_loader_ = nullptr;
+  raw_ptr<TabLoader, DanglingUntriaged> tab_loader_ = nullptr;
 };
 
 #endif  // CHROME_BROWSER_SESSIONS_TAB_LOADER_TESTER_H_
diff --git a/chrome/browser/sessions/tab_restore_service_unittest.cc b/chrome/browser/sessions/tab_restore_service_unittest.cc
index 0c337f6..2b52cb03f 100644
--- a/chrome/browser/sessions/tab_restore_service_unittest.cc
+++ b/chrome/browser/sessions/tab_restore_service_unittest.cc
@@ -342,7 +342,7 @@
   blink::UserAgentOverride user_agent_override_;
   std::unique_ptr<sessions::LiveTab> live_tab_;
   std::unique_ptr<sessions::TabRestoreServiceImpl> service_;
-  raw_ptr<TabRestoreTimeFactory> time_factory_;
+  raw_ptr<TabRestoreTimeFactory, DanglingUntriaged> time_factory_;
   SessionID window_id_;
   SessionID tab_id_;
 };
@@ -365,7 +365,8 @@
         std::move(service_client), profile()->GetPrefs(), time_factory_);
   }
 
-  raw_ptr<MockTabRestoreServiceClient> mock_tab_restore_service_client_;
+  raw_ptr<MockTabRestoreServiceClient, DanglingUntriaged>
+      mock_tab_restore_service_client_;
 };
 
 TEST_F(TabRestoreServiceImplTest, Basic) {
diff --git a/chrome/browser/sharing/sharing_fcm_sender_unittest.cc b/chrome/browser/sharing/sharing_fcm_sender_unittest.cc
index 1c52e76..4a58f29 100644
--- a/chrome/browser/sharing/sharing_fcm_sender_unittest.cc
+++ b/chrome/browser/sharing/sharing_fcm_sender_unittest.cc
@@ -105,7 +105,7 @@
 
  private:
   std::string fcm_token_;
-  raw_ptr<crypto::ECPrivateKey> vapid_key_;
+  raw_ptr<crypto::ECPrivateKey, DanglingUntriaged> vapid_key_;
   absl::optional<WebPushMessage> message_;
   SendWebPushMessageResult result_;
 };
@@ -186,7 +186,7 @@
     SharingSyncPreference::RegisterProfilePrefs(prefs_.registry());
   }
 
-  raw_ptr<FakeWebPushSender> fake_web_push_sender_;
+  raw_ptr<FakeWebPushSender, DanglingUntriaged> fake_web_push_sender_;
   FakeSharingMessageBridge fake_sharing_message_bridge_;
   syncer::FakeDeviceInfoSyncService fake_device_info_sync_service_;
   SharingSyncPreference sync_prefs_;
diff --git a/chrome/browser/signin/bound_session_credentials/bound_session_cookie_controller_impl_unittest.cc b/chrome/browser/signin/bound_session_credentials/bound_session_cookie_controller_impl_unittest.cc
index a0a5a72..db295c42 100644
--- a/chrome/browser/signin/bound_session_credentials/bound_session_cookie_controller_impl_unittest.cc
+++ b/chrome/browser/signin/bound_session_credentials/bound_session_cookie_controller_impl_unittest.cc
@@ -136,7 +136,8 @@
   TestSigninClient signin_client_;
   std::unique_ptr<BoundSessionCookieControllerImpl>
       bound_session_cookie_controller_;
-  raw_ptr<FakeBoundSessionRefreshCookieFetcher> cookie_fetcher_ = nullptr;
+  raw_ptr<FakeBoundSessionRefreshCookieFetcher, DanglingUntriaged>
+      cookie_fetcher_ = nullptr;
   size_t on_cookie_expiration_date_changed_call_count_ = 0;
 };
 
diff --git a/chrome/browser/signin/chrome_signin_client.h b/chrome/browser/signin/chrome_signin_client.h
index a5bd931..dd21352 100644
--- a/chrome/browser/signin/chrome_signin_client.h
+++ b/chrome/browser/signin/chrome_signin_client.h
@@ -120,7 +120,7 @@
       const base::FilePath& profile_path);
   void OnCloseBrowsersAborted(const base::FilePath& profile_path);
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Stored callback from PreSignOut();
   base::OnceCallback<void(SignoutDecision)> on_signout_decision_reached_;
diff --git a/chrome/browser/signin/dice_signed_in_profile_creator.h b/chrome/browser/signin/dice_signed_in_profile_creator.h
index 25e6c856..bc88473d8 100644
--- a/chrome/browser/signin/dice_signed_in_profile_creator.h
+++ b/chrome/browser/signin/dice_signed_in_profile_creator.h
@@ -54,7 +54,7 @@
   // Callback invoked once the token service is ready for the new profile.
   void OnNewProfileTokensLoaded(Profile* new_profile);
 
-  const raw_ptr<Profile> source_profile_;
+  const raw_ptr<Profile, DanglingUntriaged> source_profile_;
   const CoreAccountId account_id_;
 
   base::OnceCallback<void(Profile*)> callback_;
diff --git a/chrome/browser/signin/dice_signed_in_profile_creator_unittest.cc b/chrome/browser/signin/dice_signed_in_profile_creator_unittest.cc
index 58b3292..c420c30c 100644
--- a/chrome/browser/signin/dice_signed_in_profile_creator_unittest.cc
+++ b/chrome/browser/signin/dice_signed_in_profile_creator_unittest.cc
@@ -145,12 +145,12 @@
  private:
   content::BrowserTaskEnvironment task_environment_;
   ScopedTestingLocalState local_state_;
-  raw_ptr<UnittestProfileManager> profile_manager_ = nullptr;
+  raw_ptr<UnittestProfileManager, DanglingUntriaged> profile_manager_ = nullptr;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_profile_adaptor_;
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<Profile> signed_in_profile_ = nullptr;
-  raw_ptr<Profile> added_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> signed_in_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> added_profile_ = nullptr;
   base::OnceClosure profile_added_closure_;
   bool creator_callback_called_ = false;
   base::test::ScopedFeatureList scoped_feature_list_;
diff --git a/chrome/browser/signin/dice_web_signin_interceptor.h b/chrome/browser/signin/dice_web_signin_interceptor.h
index aadb504..1cf5ba5c 100644
--- a/chrome/browser/signin/dice_web_signin_interceptor.h
+++ b/chrome/browser/signin/dice_web_signin_interceptor.h
@@ -257,8 +257,8 @@
       absl::optional<std::string>
           managed_account_profile_level_signin_restriction) const;
 
-  const raw_ptr<Profile> profile_;
-  const raw_ptr<signin::IdentityManager> identity_manager_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
+  const raw_ptr<signin::IdentityManager, DanglingUntriaged> identity_manager_;
   std::unique_ptr<WebSigninInterceptor::Delegate> delegate_;
 
   // Used in the profile that was created after the interception succeeded.
diff --git a/chrome/browser/signin/primary_account_policy_manager_unittest.cc b/chrome/browser/signin/primary_account_policy_manager_unittest.cc
index 6c7d4fc4..244a126 100644
--- a/chrome/browser/signin/primary_account_policy_manager_unittest.cc
+++ b/chrome/browser/signin/primary_account_policy_manager_unittest.cc
@@ -73,7 +73,7 @@
  private:
   content::BrowserTaskEnvironment task_environment_;
   TestingProfileManager profile_manager_;
-  raw_ptr<TestingProfile> profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_ = nullptr;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_adaptor_;
 };
diff --git a/chrome/browser/signin/profile_token_web_signin_interceptor.h b/chrome/browser/signin/profile_token_web_signin_interceptor.h
index c44b32c..0d2a9d6e 100644
--- a/chrome/browser/signin/profile_token_web_signin_interceptor.h
+++ b/chrome/browser/signin/profile_token_web_signin_interceptor.h
@@ -80,7 +80,7 @@
 
   void OnNewSignedInProfileCreated(Profile* new_profile);
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<Delegate> delegate_;
   std::unique_ptr<TokenManagedProfileCreator> profile_creator_;
 
diff --git a/chrome/browser/signin/reauth_tab_helper_unittest.cc b/chrome/browser/signin/reauth_tab_helper_unittest.cc
index cfdd3fb..91207fc 100644
--- a/chrome/browser/signin/reauth_tab_helper_unittest.cc
+++ b/chrome/browser/signin/reauth_tab_helper_unittest.cc
@@ -40,7 +40,7 @@
   const GURL& reauth_url() { return reauth_url_; }
 
  private:
-  raw_ptr<ReauthTabHelper> tab_helper_ = nullptr;
+  raw_ptr<ReauthTabHelper, DanglingUntriaged> tab_helper_ = nullptr;
   base::MockOnceCallback<void(signin::ReauthResult)> mock_callback_;
   const GURL reauth_url_;
 };
diff --git a/chrome/browser/ssl/sct_reporting_service.h b/chrome/browser/ssl/sct_reporting_service.h
index 2b9608d2..6a3ca05f 100644
--- a/chrome/browser/ssl/sct_reporting_service.h
+++ b/chrome/browser/ssl/sct_reporting_service.h
@@ -53,7 +53,8 @@
  private:
   void OnPreferenceChanged();
 
-  raw_ptr<safe_browsing::SafeBrowsingService> safe_browsing_service_;
+  raw_ptr<safe_browsing::SafeBrowsingService, DanglingUntriaged>
+      safe_browsing_service_;
   const raw_ref<const PrefService> pref_service_;
   raw_ptr<Profile> profile_;
   base::CallbackListSubscription safe_browsing_state_subscription_;
diff --git a/chrome/browser/ssl/security_state_tab_helper_unittest.cc b/chrome/browser/ssl/security_state_tab_helper_unittest.cc
index dacc9fb..f1a5702 100644
--- a/chrome/browser/ssl/security_state_tab_helper_unittest.cc
+++ b/chrome/browser/ssl/security_state_tab_helper_unittest.cc
@@ -77,7 +77,7 @@
   void NavigateToHTTPS() { NavigateAndCommit(GURL("https://example.test")); }
 
  private:
-  raw_ptr<SecurityStateTabHelper> helper_;
+  raw_ptr<SecurityStateTabHelper, DanglingUntriaged> helper_;
 };
 
 TEST_F(SecurityStateTabHelperHistogramTest, FormSubmissionHistogram) {
diff --git a/chrome/browser/supervised_user/extension_icon_loader_unittest.cc b/chrome/browser/supervised_user/extension_icon_loader_unittest.cc
index d65c121..83b3e138 100644
--- a/chrome/browser/supervised_user/extension_icon_loader_unittest.cc
+++ b/chrome/browser/supervised_user/extension_icon_loader_unittest.cc
@@ -51,7 +51,8 @@
   const gfx::ImageSkia& loaded_icon() { return loaded_icon_; }
 
  protected:
-  raw_ptr<extensions::ExtensionService> extension_service_ = nullptr;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_ =
+      nullptr;
   gfx::ImageSkia loaded_icon_;
 };
 
diff --git a/chrome/browser/sync/sessions/sync_sessions_router_tab_helper_unittest.cc b/chrome/browser/sync/sessions/sync_sessions_router_tab_helper_unittest.cc
index 9fe9e247..034a833 100644
--- a/chrome/browser/sync/sessions/sync_sessions_router_tab_helper_unittest.cc
+++ b/chrome/browser/sync/sessions/sync_sessions_router_tab_helper_unittest.cc
@@ -62,7 +62,7 @@
   FakeLocalSessionEventHandler* handler() { return &handler_; }
 
  private:
-  raw_ptr<SyncSessionsWebContentsRouter> router_;
+  raw_ptr<SyncSessionsWebContentsRouter, DanglingUntriaged> router_;
   FakeLocalSessionEventHandler handler_;
 };
 
diff --git a/chrome/browser/sync/sessions/sync_sessions_web_contents_router_unittest.cc b/chrome/browser/sync/sessions/sync_sessions_web_contents_router_unittest.cc
index aaeb4dc..6e6a22e4 100644
--- a/chrome/browser/sync/sessions/sync_sessions_web_contents_router_unittest.cc
+++ b/chrome/browser/sync/sessions/sync_sessions_web_contents_router_unittest.cc
@@ -49,7 +49,7 @@
   SyncSessionsWebContentsRouter* router() { return router_; }
 
  private:
-  raw_ptr<SyncSessionsWebContentsRouter> router_;
+  raw_ptr<SyncSessionsWebContentsRouter, DanglingUntriaged> router_;
 };
 
 // Disabled on android due to complexity of creating a full TabAndroid object
diff --git a/chrome/browser/sync_file_system/drive_backend/fake_drive_service_helper.h b/chrome/browser/sync_file_system/drive_backend/fake_drive_service_helper.h
index 2d141b2..5c19321 100644
--- a/chrome/browser/sync_file_system/drive_backend/fake_drive_service_helper.h
+++ b/chrome/browser/sync_file_system/drive_backend/fake_drive_service_helper.h
@@ -89,8 +89,8 @@
   base::FilePath temp_dir_;
 
   // Not own.
-  raw_ptr<drive::FakeDriveService> fake_drive_service_;
-  raw_ptr<drive::DriveUploaderInterface> drive_uploader_;
+  raw_ptr<drive::FakeDriveService, DanglingUntriaged> fake_drive_service_;
+  raw_ptr<drive::DriveUploaderInterface, DanglingUntriaged> drive_uploader_;
 
   std::string sync_root_folder_title_;
 };
diff --git a/chrome/browser/sync_file_system/drive_backend/metadata_database_index.h b/chrome/browser/sync_file_system/drive_backend/metadata_database_index.h
index d893114..f895010c 100644
--- a/chrome/browser/sync_file_system/drive_backend/metadata_database_index.h
+++ b/chrome/browser/sync_file_system/drive_backend/metadata_database_index.h
@@ -149,7 +149,7 @@
   void RemoveFromDirtyTrackerIndexes(const FileTracker& tracker);
 
   std::unique_ptr<ServiceMetadata> service_metadata_;
-  raw_ptr<LevelDBWrapper> db_;  // Not owned
+  raw_ptr<LevelDBWrapper, DanglingUntriaged> db_;  // Not owned
 
   MetadataByID metadata_by_id_;
   TrackerByID tracker_by_id_;
diff --git a/chrome/browser/sync_file_system/drive_backend/sync_engine_initializer_unittest.cc b/chrome/browser/sync_file_system/drive_backend/sync_engine_initializer_unittest.cc
index 57a1482..186bcb0 100644
--- a/chrome/browser/sync_file_system/drive_backend/sync_engine_initializer_unittest.cc
+++ b/chrome/browser/sync_file_system/drive_backend/sync_engine_initializer_unittest.cc
@@ -216,7 +216,8 @@
   std::unique_ptr<MetadataDatabase> metadata_database_;
   std::unique_ptr<SyncTaskManager> sync_task_manager_;
   std::unique_ptr<SyncEngineContext> sync_context_;
-  raw_ptr<drive::FakeDriveService> fake_drive_service_ = nullptr;
+  raw_ptr<drive::FakeDriveService, DanglingUntriaged> fake_drive_service_ =
+      nullptr;
 };
 
 TEST_F(SyncEngineInitializerTest, EmptyDatabase_NoRemoteSyncRoot) {
diff --git a/chrome/browser/sync_file_system/local/local_file_sync_context.h b/chrome/browser/sync_file_system/local/local_file_sync_context.h
index 578bc44..9077e6ad 100644
--- a/chrome/browser/sync_file_system/local/local_file_sync_context.h
+++ b/chrome/browser/sync_file_system/local/local_file_sync_context.h
@@ -329,7 +329,7 @@
       base::File::Error error);
 
   const base::FilePath local_base_path_;
-  raw_ptr<leveldb::Env> env_override_;
+  raw_ptr<leveldb::Env, DanglingUntriaged> env_override_;
 
   scoped_refptr<base::SingleThreadTaskRunner> ui_task_runner_;
   scoped_refptr<base::SingleThreadTaskRunner> io_task_runner_;
diff --git a/chrome/browser/sync_file_system/sync_file_system_service_unittest.cc b/chrome/browser/sync_file_system/sync_file_system_service_unittest.cc
index cfe181ea..d9a5f4f 100644
--- a/chrome/browser/sync_file_system/sync_file_system_service_unittest.cc
+++ b/chrome/browser/sync_file_system/sync_file_system_service_unittest.cc
@@ -267,7 +267,8 @@
   std::unique_ptr<CannedSyncableFileSystem> file_system_;
 
   // Their ownerships are transferred to SyncFileSystemService.
-  raw_ptr<StrictMock<MockRemoteFileSyncService>> remote_service_;
+  raw_ptr<StrictMock<MockRemoteFileSyncService>, DanglingUntriaged>
+      remote_service_;
   StrictMock<MockLocalChangeProcessor> local_change_processor_;
 
   std::unique_ptr<SyncFileSystemService> sync_service_;
diff --git a/chrome/browser/task_manager/sampling/task_manager_impl_unittest.cc b/chrome/browser/task_manager/sampling/task_manager_impl_unittest.cc
index 9f51adf4..305ac2f1 100644
--- a/chrome/browser/task_manager/sampling/task_manager_impl_unittest.cc
+++ b/chrome/browser/task_manager/sampling/task_manager_impl_unittest.cc
@@ -53,7 +53,7 @@
 
  private:
   Type type_;
-  raw_ptr<Task> parent_;
+  raw_ptr<Task, DanglingUntriaged> parent_;
   SessionID tab_id_;
 };
 
diff --git a/chrome/browser/themes/theme_syncable_service_unittest.cc b/chrome/browser/themes/theme_syncable_service_unittest.cc
index be4c8773..67e06c1 100644
--- a/chrome/browser/themes/theme_syncable_service_unittest.cc
+++ b/chrome/browser/themes/theme_syncable_service_unittest.cc
@@ -297,7 +297,7 @@
 #endif
 
   std::unique_ptr<TestingProfile> profile_;
-  raw_ptr<FakeThemeService> fake_theme_service_;
+  raw_ptr<FakeThemeService, DanglingUntriaged> fake_theme_service_;
   scoped_refptr<extensions::Extension> theme_extension_;
   std::unique_ptr<ThemeSyncableService> theme_sync_service_;
   std::unique_ptr<syncer::FakeSyncChangeProcessor> fake_change_processor_;
diff --git a/chrome/browser/ui/autofill/autofill_popup_controller_unittest.cc b/chrome/browser/ui/autofill/autofill_popup_controller_unittest.cc
index 033fffa..7aa01ca 100644
--- a/chrome/browser/ui/autofill/autofill_popup_controller_unittest.cc
+++ b/chrome/browser/ui/autofill/autofill_popup_controller_unittest.cc
@@ -289,8 +289,8 @@
   test::AutofillUnitTestEnvironment autofill_test_environment_;
   std::unique_ptr<NiceMock<MockAutofillExternalDelegate>> external_delegate_;
   std::unique_ptr<NiceMock<MockAutofillPopupView>> autofill_popup_view_;
-  raw_ptr<NiceMock<TestAutofillPopupController>> autofill_popup_controller_ =
-      nullptr;
+  raw_ptr<NiceMock<TestAutofillPopupController>, DanglingUntriaged>
+      autofill_popup_controller_ = nullptr;
 };
 
 TEST_F(AutofillPopupControllerUnitTest, RemoveSuggestion) {
diff --git a/chrome/browser/ui/autofill/chrome_autofill_client_unittest.cc b/chrome/browser/ui/autofill/chrome_autofill_client_unittest.cc
index 1c25869..54f5ca7 100644
--- a/chrome/browser/ui/autofill/chrome_autofill_client_unittest.cc
+++ b/chrome/browser/ui/autofill/chrome_autofill_client_unittest.cc
@@ -89,7 +89,8 @@
         unified_consent::prefs::kUrlKeyedAnonymizedDataCollectionEnabled, true);
   }
 
-  raw_ptr<TestPersonalDataManager> personal_data_manager_ = nullptr;
+  raw_ptr<TestPersonalDataManager, DanglingUntriaged> personal_data_manager_ =
+      nullptr;
   TestAutofillClientInjector<TestChromeAutofillClient>
       test_autofill_client_injector_;
   TestAutofillDriverInjector<TestContentAutofillDriver>
diff --git a/chrome/browser/ui/autofill/payments/save_card_bubble_controller_impl_unittest.cc b/chrome/browser/ui/autofill/payments/save_card_bubble_controller_impl_unittest.cc
index 50bc11d6..295b9e5 100644
--- a/chrome/browser/ui/autofill/payments/save_card_bubble_controller_impl_unittest.cc
+++ b/chrome/browser/ui/autofill/payments/save_card_bubble_controller_impl_unittest.cc
@@ -168,7 +168,8 @@
 
   TestAutofillClock test_clock_;
   base::test::ScopedFeatureList scoped_feature_list_;
-  raw_ptr<MockTrustSafetySentimentService> mock_sentiment_service_;
+  raw_ptr<MockTrustSafetySentimentService, DanglingUntriaged>
+      mock_sentiment_service_;
 
  private:
   static void UploadSaveCardCallback(
diff --git a/chrome/browser/ui/bookmarks/recently_used_folders_combo_model.h b/chrome/browser/ui/bookmarks/recently_used_folders_combo_model.h
index 510688b7..e3ab9de 100644
--- a/chrome/browser/ui/bookmarks/recently_used_folders_combo_model.h
+++ b/chrome/browser/ui/bookmarks/recently_used_folders_combo_model.h
@@ -88,7 +88,7 @@
 
   const raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
 
-  const raw_ptr<const bookmarks::BookmarkNode> parent_node_;
+  const raw_ptr<const bookmarks::BookmarkNode, DanglingUntriaged> parent_node_;
 };
 
 #endif  // CHROME_BROWSER_UI_BOOKMARKS_RECENTLY_USED_FOLDERS_COMBO_MODEL_H_
diff --git a/chrome/browser/ui/browser.h b/chrome/browser/ui/browser.h
index 23a838b..0908c122 100644
--- a/chrome/browser/ui/browser.h
+++ b/chrome/browser/ui/browser.h
@@ -1193,7 +1193,7 @@
   std::unique_ptr<ScopedProfileKeepAlive> profile_keep_alive_;
 
   // This Browser's window.
-  raw_ptr<BrowserWindow> window_;
+  raw_ptr<BrowserWindow, DanglingUntriaged> window_;
 
   std::unique_ptr<TabStripModelDelegate> const tab_strip_model_delegate_;
   std::unique_ptr<TabStripModel> const tab_strip_model_;
diff --git a/chrome/browser/ui/browser_list_unittest.cc b/chrome/browser/ui/browser_list_unittest.cc
index 07f0906..48d1c9a9 100644
--- a/chrome/browser/ui/browser_list_unittest.cc
+++ b/chrome/browser/ui/browser_list_unittest.cc
@@ -118,7 +118,7 @@
 
  private:
   std::set<Browser*> observed_browsers_;
-  raw_ptr<Browser> created_for_browser_;
+  raw_ptr<Browser, DanglingUntriaged> created_for_browser_;
 };
 
 // Class that creates BrowserObserverChild when a Browser is created;
diff --git a/chrome/browser/ui/browser_unittest.cc b/chrome/browser/ui/browser_unittest.cc
index 41fcf3c..4d5a0d8d 100644
--- a/chrome/browser/ui/browser_unittest.cc
+++ b/chrome/browser/ui/browser_unittest.cc
@@ -355,7 +355,7 @@
                                             reason);
     }
 
-    raw_ptr<Browser> browser_;  // Weak ptr.
+    raw_ptr<Browser, DanglingUntriaged> browser_;  // Weak ptr.
     BookmarkBar::State bookmark_bar_state_;
   };
 };
diff --git a/chrome/browser/ui/content_settings/content_setting_image_model_unittest.cc b/chrome/browser/ui/content_settings/content_setting_image_model_unittest.cc
index bec51f0..7dc1223 100644
--- a/chrome/browser/ui/content_settings/content_setting_image_model_unittest.cc
+++ b/chrome/browser/ui/content_settings/content_setting_image_model_unittest.cc
@@ -153,8 +153,10 @@
  protected:
   base::test::ScopedFeatureList scoped_feature_list_;
   permissions::MockPermissionRequest request_;
-  raw_ptr<permissions::PermissionRequestManager> manager_ = nullptr;
-  raw_ptr<content::NavigationController> controller_ = nullptr;
+  raw_ptr<permissions::PermissionRequestManager, DanglingUntriaged> manager_ =
+      nullptr;
+  raw_ptr<content::NavigationController, DanglingUntriaged> controller_ =
+      nullptr;
 };
 
 TEST_F(ContentSettingImageModelTest, Update) {
diff --git a/chrome/browser/ui/cookie_controls/cookie_controls_service_unittest.cc b/chrome/browser/ui/cookie_controls/cookie_controls_service_unittest.cc
index e469561..622b18cb 100644
--- a/chrome/browser/ui/cookie_controls/cookie_controls_service_unittest.cc
+++ b/chrome/browser/ui/cookie_controls/cookie_controls_service_unittest.cc
@@ -43,7 +43,7 @@
   }
 
  private:
-  raw_ptr<CookieControlsService> service_;
+  raw_ptr<CookieControlsService, DanglingUntriaged> service_;
   bool checked_;
 };
 
diff --git a/chrome/browser/ui/exclusive_access/fullscreen_controller_state_unittest.cc b/chrome/browser/ui/exclusive_access/fullscreen_controller_state_unittest.cc
index 49192cc..4c027d3a 100644
--- a/chrome/browser/ui/exclusive_access/fullscreen_controller_state_unittest.cc
+++ b/chrome/browser/ui/exclusive_access/fullscreen_controller_state_unittest.cc
@@ -81,7 +81,7 @@
   bool IsTransitionReentrant(bool new_fullscreen);
 
   WindowState state_;
-  raw_ptr<Browser> browser_;
+  raw_ptr<Browser, DanglingUntriaged> browser_;
 };
 
 FullscreenControllerTestWindow::FullscreenControllerTestWindow()
@@ -227,7 +227,7 @@
   // FullscreenControllerStateTest:
   bool ShouldSkipStateAndEventPair(State state, Event event) override;
   Browser* GetBrowser() override;
-  raw_ptr<FullscreenControllerTestWindow> window_ = nullptr;
+  raw_ptr<FullscreenControllerTestWindow, DanglingUntriaged> window_ = nullptr;
 };
 
 FullscreenControllerStateUnitTest::FullscreenControllerStateUnitTest() =
diff --git a/chrome/browser/ui/extensions/extension_action_view_controller_unittest.cc b/chrome/browser/ui/extensions/extension_action_view_controller_unittest.cc
index d983b39..a36de2d 100644
--- a/chrome/browser/ui/extensions/extension_action_view_controller_unittest.cc
+++ b/chrome/browser/ui/extensions/extension_action_view_controller_unittest.cc
@@ -165,10 +165,11 @@
 
  private:
   // The ExtensionService associated with the primary profile.
-  raw_ptr<extensions::ExtensionService> extension_service_ = nullptr;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_ =
+      nullptr;
 
   // ToolbarActionsModel associated with the main profile.
-  raw_ptr<ToolbarActionsModel> toolbar_model_ = nullptr;
+  raw_ptr<ToolbarActionsModel, DanglingUntriaged> toolbar_model_ = nullptr;
 
   std::unique_ptr<ExtensionActionTestHelper> test_util_;
 
diff --git a/chrome/browser/ui/extensions/extension_install_ui_default.h b/chrome/browser/ui/extensions/extension_install_ui_default.h
index 5295726d..140d7ee 100644
--- a/chrome/browser/ui/extensions/extension_install_ui_default.h
+++ b/chrome/browser/ui/extensions/extension_install_ui_default.h
@@ -42,7 +42,7 @@
       const SkBitmap& icon);
 
  private:
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Whether or not to show the default UI after completing the installation.
   bool skip_post_install_ui_;
diff --git a/chrome/browser/ui/extensions/extension_installed_bubble_model_unittest.cc b/chrome/browser/ui/extensions/extension_installed_bubble_model_unittest.cc
index 44e75b2..fbf21f5 100644
--- a/chrome/browser/ui/extensions/extension_installed_bubble_model_unittest.cc
+++ b/chrome/browser/ui/extensions/extension_installed_bubble_model_unittest.cc
@@ -71,7 +71,8 @@
   const SkBitmap empty_icon_;
 
  private:
-  raw_ptr<extensions::ExtensionService> extension_service_ = nullptr;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_ =
+      nullptr;
 };
 
 TEST_F(ExtensionInstalledBubbleModelTest, SyntheticPageActionExtension) {
diff --git a/chrome/browser/ui/extensions/extension_installed_waiter_unittest.cc b/chrome/browser/ui/extensions/extension_installed_waiter_unittest.cc
index 5d16faa2..0911a7391 100644
--- a/chrome/browser/ui/extensions/extension_installed_waiter_unittest.cc
+++ b/chrome/browser/ui/extensions/extension_installed_waiter_unittest.cc
@@ -71,7 +71,8 @@
   }
 
  private:
-  raw_ptr<extensions::ExtensionService> extension_service_ = nullptr;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_ =
+      nullptr;
 };
 
 TEST_F(ExtensionInstalledWaiterTest, ExtensionIsAlreadyInstalled) {
diff --git a/chrome/browser/ui/global_media_controls/cast_media_notification_item_unittest.cc b/chrome/browser/ui/global_media_controls/cast_media_notification_item_unittest.cc
index e88da43..21d07901 100644
--- a/chrome/browser/ui/global_media_controls/cast_media_notification_item_unittest.cc
+++ b/chrome/browser/ui/global_media_controls/cast_media_notification_item_unittest.cc
@@ -138,7 +138,8 @@
   TestingProfile profile_;
   testing::NiceMock<global_media_controls::test::MockMediaItemManager>
       item_manager_;
-  raw_ptr<MockSessionController> session_controller_ = nullptr;
+  raw_ptr<MockSessionController, DanglingUntriaged> session_controller_ =
+      nullptr;
   // This needs to be a NiceMock, because the uninteresting mock function calls
   // slow down the tests enough to make
   // CastMediaNotificationItemTest.MediaPositionUpdate flaky.
diff --git a/chrome/browser/ui/intent_picker_tab_helper.h b/chrome/browser/ui/intent_picker_tab_helper.h
index afbdbe37..2c74078 100644
--- a/chrome/browser/ui/intent_picker_tab_helper.h
+++ b/chrome/browser/ui/intent_picker_tab_helper.h
@@ -102,7 +102,7 @@
   void OnWebAppWillBeUninstalled(const web_app::AppId& app_id) override;
   void OnWebAppInstallManagerDestroyed() override;
 
-  const raw_ptr<web_app::WebAppRegistrar> registrar_;
+  const raw_ptr<web_app::WebAppRegistrar, DanglingUntriaged> registrar_;
   const raw_ptr<web_app::WebAppInstallManager> install_manager_;
 
   bool should_show_icon_ = false;
diff --git a/chrome/browser/ui/intent_picker_tab_helper_unittest.cc b/chrome/browser/ui/intent_picker_tab_helper_unittest.cc
index 1675de1..de6720b 100644
--- a/chrome/browser/ui/intent_picker_tab_helper_unittest.cc
+++ b/chrome/browser/ui/intent_picker_tab_helper_unittest.cc
@@ -37,7 +37,7 @@
   }
 
  private:
-  raw_ptr<IntentPickerTabHelper> helper_;
+  raw_ptr<IntentPickerTabHelper, DanglingUntriaged> helper_;
 };
 
 TEST_F(IntentPickerTabHelperTest, ShowOrHideIcon) {
diff --git a/chrome/browser/ui/media_router/media_router_ui_unittest.cc b/chrome/browser/ui/media_router/media_router_ui_unittest.cc
index 741d8ff..7b99e828 100644
--- a/chrome/browser/ui/media_router/media_router_ui_unittest.cc
+++ b/chrome/browser/ui/media_router/media_router_ui_unittest.cc
@@ -264,7 +264,7 @@
 
  protected:
   std::vector<MediaSinksObserver*> media_sinks_observers_;
-  raw_ptr<MockMediaRouter> mock_router_ = nullptr;
+  raw_ptr<MockMediaRouter, DanglingUntriaged> mock_router_ = nullptr;
   std::unique_ptr<MediaRouterUI> ui_;
   std::unique_ptr<StartPresentationContext> start_presentation_context_;
   std::unique_ptr<LoggerImpl> logger_;
diff --git a/chrome/browser/ui/passwords/password_manager_navigation_throttle_unittest.cc b/chrome/browser/ui/passwords/password_manager_navigation_throttle_unittest.cc
index dad9855..396e4793 100644
--- a/chrome/browser/ui/passwords/password_manager_navigation_throttle_unittest.cc
+++ b/chrome/browser/ui/passwords/password_manager_navigation_throttle_unittest.cc
@@ -57,7 +57,7 @@
  private:
   variations::ScopedVariationsIdsProvider scoped_variations_ids_provider_{
       variations::VariationsIdsProvider::Mode::kUseSignedInState};
-  raw_ptr<content::RenderFrameHost> subframe_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> subframe_ = nullptr;
 };
 
 TEST_F(PasswordManagerNavigationThrottleTest,
diff --git a/chrome/browser/ui/passwords/well_known_change_password_navigation_throttle_unittest.cc b/chrome/browser/ui/passwords/well_known_change_password_navigation_throttle_unittest.cc
index 67996779..953c841f 100644
--- a/chrome/browser/ui/passwords/well_known_change_password_navigation_throttle_unittest.cc
+++ b/chrome/browser/ui/passwords/well_known_change_password_navigation_throttle_unittest.cc
@@ -58,7 +58,7 @@
  private:
   variations::ScopedVariationsIdsProvider scoped_variations_ids_provider_{
       variations::VariationsIdsProvider::Mode::kUseSignedInState};
-  raw_ptr<content::RenderFrameHost> subframe_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> subframe_ = nullptr;
 };
 
 TEST_F(WellKnownChangePasswordNavigationThrottleTest,
diff --git a/chrome/browser/ui/recently_audible_helper_unittest.cc b/chrome/browser/ui/recently_audible_helper_unittest.cc
index 3675668..189dc41 100644
--- a/chrome/browser/ui/recently_audible_helper_unittest.cc
+++ b/chrome/browser/ui/recently_audible_helper_unittest.cc
@@ -118,8 +118,8 @@
   TestingProfile testing_profile_;
 
   // A test WebContents and its associated helper.
-  raw_ptr<content::WebContents> contents_;
-  raw_ptr<RecentlyAudibleHelper> helper_;
+  raw_ptr<content::WebContents, DanglingUntriaged> contents_;
+  raw_ptr<RecentlyAudibleHelper, DanglingUntriaged> helper_;
   base::CallbackListSubscription subscription_;
 
   std::list<bool> recently_audible_messages_;
diff --git a/chrome/browser/ui/tab_contents/chrome_web_contents_menu_helper_unittest.cc b/chrome/browser/ui/tab_contents/chrome_web_contents_menu_helper_unittest.cc
index 75c2de3..02a7dd39 100644
--- a/chrome/browser/ui/tab_contents/chrome_web_contents_menu_helper_unittest.cc
+++ b/chrome/browser/ui/tab_contents/chrome_web_contents_menu_helper_unittest.cc
@@ -40,7 +40,8 @@
   }
 
  private:
-  raw_ptr<sync_preferences::TestingPrefServiceSyncable> pref_service_;
+  raw_ptr<sync_preferences::TestingPrefServiceSyncable, DanglingUntriaged>
+      pref_service_;
 };
 }  // namespace
 
diff --git a/chrome/browser/ui/tabs/existing_base_sub_menu_model.h b/chrome/browser/ui/tabs/existing_base_sub_menu_model.h
index 5c91eaf..4c06554d 100644
--- a/chrome/browser/ui/tabs/existing_base_sub_menu_model.h
+++ b/chrome/browser/ui/tabs/existing_base_sub_menu_model.h
@@ -106,8 +106,9 @@
 
  private:
   const raw_ptr<ui::SimpleMenuModel::Delegate> parent_delegate_;
-  const raw_ptr<TabStripModel> model_;
-  const raw_ptr<const content::WebContents> context_contents_;
+  const raw_ptr<TabStripModel, DanglingUntriaged> model_;
+  const raw_ptr<const content::WebContents, DanglingUntriaged>
+      context_contents_;
   const int min_command_id_;
   const int parent_new_command_id_;
 
diff --git a/chrome/browser/ui/tabs/pinned_tab_service_unittest.cc b/chrome/browser/ui/tabs/pinned_tab_service_unittest.cc
index 7a0eb26..84d5194 100644
--- a/chrome/browser/ui/tabs/pinned_tab_service_unittest.cc
+++ b/chrome/browser/ui/tabs/pinned_tab_service_unittest.cc
@@ -47,7 +47,7 @@
   }
 
  private:
-  raw_ptr<PinnedTabService> pinned_tab_service_;
+  raw_ptr<PinnedTabService, DanglingUntriaged> pinned_tab_service_;
 };
 
 // Makes sure closing a popup triggers writing pinned tabs.
diff --git a/chrome/browser/ui/tabs/tab_strip_model_unittest.cc b/chrome/browser/ui/tabs/tab_strip_model_unittest.cc
index 2092600..985e60a 100644
--- a/chrome/browser/ui/tabs/tab_strip_model_unittest.cc
+++ b/chrome/browser/ui/tabs/tab_strip_model_unittest.cc
@@ -96,8 +96,8 @@
           TabStripModelObserverAction action)
         : dst_contents(dst_contents), dst_index(dst_index), action(action) {}
 
-    raw_ptr<WebContents> src_contents = nullptr;
-    raw_ptr<WebContents> dst_contents;
+    raw_ptr<WebContents, DanglingUntriaged> src_contents = nullptr;
+    raw_ptr<WebContents, DanglingUntriaged> dst_contents;
     absl::optional<size_t> src_index;
     absl::optional<size_t> dst_index;
     int change_reason = CHANGE_REASON_NONE;
diff --git a/chrome/browser/ui/toolbar/chrome_location_bar_model_delegate_unittest.cc b/chrome/browser/ui/toolbar/chrome_location_bar_model_delegate_unittest.cc
index 95a7ac6..0269035 100644
--- a/chrome/browser/ui/toolbar/chrome_location_bar_model_delegate_unittest.cc
+++ b/chrome/browser/ui/toolbar/chrome_location_bar_model_delegate_unittest.cc
@@ -53,7 +53,7 @@
   }
 
  private:
-  const raw_ptr<Browser> browser_;
+  const raw_ptr<Browser, DanglingUntriaged> browser_;
   net::CertStatus cert_status_ = 0;
 };
 
diff --git a/chrome/browser/ui/toolbar/recent_tabs_sub_menu_model_unittest.cc b/chrome/browser/ui/toolbar/recent_tabs_sub_menu_model_unittest.cc
index 0224ba4c6..bfaa95d 100644
--- a/chrome/browser/ui/toolbar/recent_tabs_sub_menu_model_unittest.cc
+++ b/chrome/browser/ui/toolbar/recent_tabs_sub_menu_model_unittest.cc
@@ -173,7 +173,8 @@
   }
 
  private:
-  raw_ptr<sync_sessions::SessionSyncService> session_sync_service_;
+  raw_ptr<sync_sessions::SessionSyncService, DanglingUntriaged>
+      session_sync_service_;
   std::unique_ptr<syncer::ModelTypeProcessor> sync_processor_;
 };
 
diff --git a/chrome/browser/ui/views/apps/app_info_dialog/app_info_dialog_views_unittest.cc b/chrome/browser/ui/views/apps/app_info_dialog/app_info_dialog_views_unittest.cc
index 61722c3..28bc4b9 100644
--- a/chrome/browser/ui/views/apps/app_info_dialog/app_info_dialog_views_unittest.cc
+++ b/chrome/browser/ui/views/apps/app_info_dialog/app_info_dialog_views_unittest.cc
@@ -195,7 +195,7 @@
   }
 
   raw_ptr<views::Widget> widget_ = nullptr;
-  raw_ptr<AppInfoDialog> dialog_ =
+  raw_ptr<AppInfoDialog, DanglingUntriaged> dialog_ =
       nullptr;  // Owned by |widget_|'s views hierarchy.
   scoped_refptr<const extensions::Extension> extension_;
   scoped_refptr<const extensions::Extension> chrome_app_;
diff --git a/chrome/browser/ui/views/autofill/address_editor_view.h b/chrome/browser/ui/views/autofill/address_editor_view.h
index a3f752c..d62cdeda 100644
--- a/chrome/browser/ui/views/autofill/address_editor_view.h
+++ b/chrome/browser/ui/views/autofill/address_editor_view.h
@@ -84,7 +84,7 @@
   // Map from TextField to the object that describes it
   std::unordered_map<views::Textfield*, const EditorField> text_fields_;
   const std::string locale_;
-  raw_ptr<views::Label> validation_error_ = nullptr;
+  raw_ptr<views::Label, DanglingUntriaged> validation_error_ = nullptr;
 
   // 1 subscription to text changes per field.
   std::vector<base::CallbackListSubscription> field_change_callbacks_;
diff --git a/chrome/browser/ui/views/autofill/address_editor_view_unittest.cc b/chrome/browser/ui/views/autofill/address_editor_view_unittest.cc
index 753b89bc..1cbe551 100644
--- a/chrome/browser/ui/views/autofill/address_editor_view_unittest.cc
+++ b/chrome/browser/ui/views/autofill/address_editor_view_unittest.cc
@@ -50,7 +50,7 @@
   autofill::AutofillProfile profile_to_edit_;
   TestingProfile profile_;
   std::unique_ptr<content::WebContents> test_web_contents_;
-  raw_ptr<AddressEditorController> controller_;
+  raw_ptr<AddressEditorController, DanglingUntriaged> controller_;
   std::unique_ptr<AddressEditorView> view_;
 };
 
diff --git a/chrome/browser/ui/views/autofill/edit_address_profile_view_unittest.cc b/chrome/browser/ui/views/autofill/edit_address_profile_view_unittest.cc
index 6e81da1..2cbd325 100644
--- a/chrome/browser/ui/views/autofill/edit_address_profile_view_unittest.cc
+++ b/chrome/browser/ui/views/autofill/edit_address_profile_view_unittest.cc
@@ -83,8 +83,8 @@
   content::RenderViewHostTestEnabler test_render_host_factories_;
   std::unique_ptr<content::WebContents> test_web_contents_;
   std::unique_ptr<views::Widget> parent_widget_;
-  raw_ptr<views::Widget> widget_ = nullptr;
-  raw_ptr<EditAddressProfileView> dialog_;
+  raw_ptr<views::Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<EditAddressProfileView, DanglingUntriaged> dialog_;
   testing::NiceMock<MockEditAddressProfileDialogController> mock_controller_;
 };
 
diff --git a/chrome/browser/ui/views/autofill/popup/popup_view_views.h b/chrome/browser/ui/views/autofill/popup/popup_view_views.h
index 1683351..78bf7906 100644
--- a/chrome/browser/ui/views/autofill/popup/popup_view_views.h
+++ b/chrome/browser/ui/views/autofill/popup/popup_view_views.h
@@ -133,8 +133,8 @@
   // The index of the row with a selected cell.
   absl::optional<size_t> row_with_selected_cell_;
   std::vector<RowPointer> rows_;
-  raw_ptr<views::ScrollView> scroll_view_ = nullptr;
-  raw_ptr<views::BoxLayoutView> body_container_ = nullptr;
+  raw_ptr<views::ScrollView, DanglingUntriaged> scroll_view_ = nullptr;
+  raw_ptr<views::BoxLayoutView, DanglingUntriaged> body_container_ = nullptr;
 
   base::WeakPtrFactory<AutofillPopupView> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/ui/views/autofill/save_address_profile_view_unittest.cc b/chrome/browser/ui/views/autofill/save_address_profile_view_unittest.cc
index bc0c7b4..e270eb46 100644
--- a/chrome/browser/ui/views/autofill/save_address_profile_view_unittest.cc
+++ b/chrome/browser/ui/views/autofill/save_address_profile_view_unittest.cc
@@ -93,7 +93,7 @@
   content::RenderViewHostTestEnabler test_render_host_factories_;
   std::unique_ptr<content::WebContents> test_web_contents_;
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<SaveAddressProfileView> view_;
+  raw_ptr<SaveAddressProfileView, DanglingUntriaged> view_;
   testing::NiceMock<MockSaveUpdateAddressProfileBubbleController>
       mock_controller_;
 };
diff --git a/chrome/browser/ui/views/autofill/update_address_profile_view_unittest.cc b/chrome/browser/ui/views/autofill/update_address_profile_view_unittest.cc
index 473edcfb..25b48b6 100644
--- a/chrome/browser/ui/views/autofill/update_address_profile_view_unittest.cc
+++ b/chrome/browser/ui/views/autofill/update_address_profile_view_unittest.cc
@@ -93,7 +93,7 @@
   content::RenderViewHostTestEnabler test_render_host_factories_;
   std::unique_ptr<content::WebContents> test_web_contents_;
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<UpdateAddressProfileView> view_;
+  raw_ptr<UpdateAddressProfileView, DanglingUntriaged> view_;
   testing::NiceMock<MockSaveUpdateAddressProfileBubbleController>
       mock_controller_;
 };
diff --git a/chrome/browser/ui/views/bookmarks/bookmark_bar_view_unittest.cc b/chrome/browser/ui/views/bookmarks/bookmark_bar_view_unittest.cc
index a4ef419..19b9a32 100644
--- a/chrome/browser/ui/views/bookmarks/bookmark_bar_view_unittest.cc
+++ b/chrome/browser/ui/views/bookmarks/bookmark_bar_view_unittest.cc
@@ -218,7 +218,7 @@
 
  private:
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<BookmarkBarView> bookmark_bar_view_ = nullptr;
+  raw_ptr<BookmarkBarView, DanglingUntriaged> bookmark_bar_view_ = nullptr;
 };
 
 // Verify that in instant extended mode the visibility of the apps shortcut
diff --git a/chrome/browser/ui/views/bookmarks/bookmark_bubble_view_unittest.cc b/chrome/browser/ui/views/bookmarks/bookmark_bubble_view_unittest.cc
index 0efb6e4b..be227180 100644
--- a/chrome/browser/ui/views/bookmarks/bookmark_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/bookmarks/bookmark_bubble_view_unittest.cc
@@ -102,7 +102,7 @@
     return factories;
   }
 
-  raw_ptr<BookmarkModel> GetBookmarkModel() { return bookmark_model_; }
+  BookmarkModel* GetBookmarkModel() { return bookmark_model_; }
 
  protected:
   // Creates a bookmark bubble view.
@@ -148,8 +148,8 @@
  private:
   views::UniqueWidgetPtr anchor_widget_;
   base::test::ScopedFeatureList test_features_;
-  raw_ptr<BookmarkModel> bookmark_model_;
-  raw_ptr<MockShoppingListUiTabHelper> mock_tab_helper_;
+  raw_ptr<BookmarkModel, DanglingUntriaged> bookmark_model_;
+  raw_ptr<MockShoppingListUiTabHelper, DanglingUntriaged> mock_tab_helper_;
 };
 
 // Verifies that the sync promo is not displayed for a signed in user.
diff --git a/chrome/browser/ui/views/bookmarks/bookmark_context_menu.h b/chrome/browser/ui/views/bookmarks/bookmark_context_menu.h
index be430fbb..0f6795a 100644
--- a/chrome/browser/ui/views/bookmarks/bookmark_context_menu.h
+++ b/chrome/browser/ui/views/bookmarks/bookmark_context_menu.h
@@ -91,7 +91,7 @@
   raw_ptr<views::Widget> parent_widget_;
 
   // The menu itself. This is owned by |menu_runner_|.
-  raw_ptr<views::MenuItemView> menu_;
+  raw_ptr<views::MenuItemView, DanglingUntriaged> menu_;
 
   // Responsible for running the menu.
   std::unique_ptr<views::MenuRunner> menu_runner_;
diff --git a/chrome/browser/ui/views/bookmarks/bookmark_editor_view_unittest.cc b/chrome/browser/ui/views/bookmarks/bookmark_editor_view_unittest.cc
index 62c90ce..05cd496 100644
--- a/chrome/browser/ui/views/bookmarks/bookmark_editor_view_unittest.cc
+++ b/chrome/browser/ui/views/bookmarks/bookmark_editor_view_unittest.cc
@@ -132,7 +132,7 @@
 
   content::BrowserTaskEnvironment task_environment_;
 
-  raw_ptr<BookmarkModel> model_;
+  raw_ptr<BookmarkModel, DanglingUntriaged> model_;
   std::unique_ptr<TestingProfile> profile_;
 
  private:
diff --git a/chrome/browser/ui/views/bookmarks/bookmark_menu_delegate_unittest.cc b/chrome/browser/ui/views/bookmarks/bookmark_menu_delegate_unittest.cc
index d59329c7..42eebff 100644
--- a/chrome/browser/ui/views/bookmarks/bookmark_menu_delegate_unittest.cc
+++ b/chrome/browser/ui/views/bookmarks/bookmark_menu_delegate_unittest.cc
@@ -106,7 +106,7 @@
   // items of tyep SUBMENU.
   void LoadAllMenus() { LoadAllMenus(bookmark_menu_delegate_->menu()); }
 
-  raw_ptr<BookmarkModel> model_;
+  raw_ptr<BookmarkModel, DanglingUntriaged> model_;
 
   std::unique_ptr<BookmarkMenuDelegate> bookmark_menu_delegate_;
 
diff --git a/chrome/browser/ui/views/bubble/webui_bubble_dialog_view_unittest.cc b/chrome/browser/ui/views/bubble/webui_bubble_dialog_view_unittest.cc
index d52f0e2..3acd677 100644
--- a/chrome/browser/ui/views/bubble/webui_bubble_dialog_view_unittest.cc
+++ b/chrome/browser/ui/views/bubble/webui_bubble_dialog_view_unittest.cc
@@ -72,8 +72,8 @@
   std::unique_ptr<TestingProfile> profile_;
   views::UniqueWidgetPtr anchor_widget_;
   std::unique_ptr<TestBubbleContentsWrapper> contents_wrapper_;
-  raw_ptr<Widget> bubble_widget_ = nullptr;
-  raw_ptr<WebUIBubbleDialogView> bubble_view_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> bubble_widget_ = nullptr;
+  raw_ptr<WebUIBubbleDialogView, DanglingUntriaged> bubble_view_ = nullptr;
 };
 
 TEST_F(WebUIBubbleDialogViewTest, BubbleRespondsToWebViewPreferredSizeChanges) {
diff --git a/chrome/browser/ui/views/bubble/webui_bubble_manager.h b/chrome/browser/ui/views/bubble/webui_bubble_manager.h
index be64018..a0034e3 100644
--- a/chrome/browser/ui/views/bubble/webui_bubble_manager.h
+++ b/chrome/browser/ui/views/bubble/webui_bubble_manager.h
@@ -168,7 +168,7 @@
 
  private:
   const raw_ptr<views::View> anchor_view_;
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
   const GURL webui_url_;
   const int task_manager_string_id_;
 };
diff --git a/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view.h b/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view.h
index 56473e88..e4899b1 100644
--- a/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view.h
+++ b/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view.h
@@ -82,7 +82,7 @@
  private:
   bool IsShowing();
 
-  const raw_ptr<views::View> anchor_view_;
+  const raw_ptr<views::View, DanglingUntriaged> anchor_view_;
   views::ViewTracker tracker_;
   base::ScopedObservation<views::Widget, views::WidgetObserver>
       bubble_widget_observation_{this};
diff --git a/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view_unittest.cc b/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view_unittest.cc
index 6b0a691..a46aa9a 100644
--- a/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view_unittest.cc
+++ b/chrome/browser/ui/views/commerce/price_tracking_bubble_dialog_view_unittest.cc
@@ -100,7 +100,7 @@
     bookmarks::test::WaitForBookmarkModelToLoad(bookmark_model_);
   }
 
-  raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
+  raw_ptr<bookmarks::BookmarkModel, DanglingUntriaged> bookmark_model_;
 
  private:
   views::UniqueWidgetPtr anchor_widget_;
diff --git a/chrome/browser/ui/views/commerce/price_tracking_icon_view_integration_test.cc b/chrome/browser/ui/views/commerce/price_tracking_icon_view_integration_test.cc
index 49b7d7f3..d11d5a2 100644
--- a/chrome/browser/ui/views/commerce/price_tracking_icon_view_integration_test.cc
+++ b/chrome/browser/ui/views/commerce/price_tracking_icon_view_integration_test.cc
@@ -142,7 +142,7 @@
   MockShoppingListUiTabHelper* GetTabHelper() { return mock_tab_helper_.get(); }
 
  protected:
-  raw_ptr<MockShoppingListUiTabHelper> mock_tab_helper_;
+  raw_ptr<MockShoppingListUiTabHelper, DanglingUntriaged> mock_tab_helper_;
   base::UserActionTester user_action_tester_;
 
  private:
diff --git a/chrome/browser/ui/views/desktop_capture/desktop_media_tab_list_unittest.cc b/chrome/browser/ui/views/desktop_capture/desktop_media_tab_list_unittest.cc
index daf5114..7384e2b 100644
--- a/chrome/browser/ui/views/desktop_capture/desktop_media_tab_list_unittest.cc
+++ b/chrome/browser/ui/views/desktop_capture/desktop_media_tab_list_unittest.cc
@@ -103,13 +103,13 @@
   content::BrowserTaskEnvironment task_environment_;
   views::ScopedViewsTestHelper test_helper_{
       std::make_unique<ChromeTestViewsDelegate<>>()};
-  raw_ptr<FakeDesktopMediaList> media_list_;
+  raw_ptr<FakeDesktopMediaList, DanglingUntriaged> media_list_;
   std::unique_ptr<DesktopMediaPickerViews> picker_views_;
   DesktopMediaPickerViewsTestApi test_api_;
-  raw_ptr<DesktopMediaTabList> tab_list_;
-  raw_ptr<views::ImageView> preview_;
-  raw_ptr<views::TableView> list_;
-  raw_ptr<views::Label> preview_label_;
+  raw_ptr<DesktopMediaTabList, DanglingUntriaged> tab_list_;
+  raw_ptr<views::ImageView, DanglingUntriaged> preview_;
+  raw_ptr<views::TableView, DanglingUntriaged> list_;
+  raw_ptr<views::Label, DanglingUntriaged> preview_label_;
   std::unique_ptr<views::test::WidgetDestroyedWaiter> widget_destroyed_waiter_;
 
   gfx::ImageSkia preview_0_;
diff --git a/chrome/browser/ui/views/device_chooser_content_view_unittest.cc b/chrome/browser/ui/views/device_chooser_content_view_unittest.cc
index ae48d81..58f85ca7 100644
--- a/chrome/browser/ui/views/device_chooser_content_view_unittest.cc
+++ b/chrome/browser/ui/views/device_chooser_content_view_unittest.cc
@@ -147,8 +147,9 @@
 
  private:
   std::unique_ptr<MockTableViewObserver> table_observer_;
-  raw_ptr<FakeBluetoothChooserController> controller_ = nullptr;
-  raw_ptr<DeviceChooserContentView> content_view_ = nullptr;
+  raw_ptr<FakeBluetoothChooserController, DanglingUntriaged> controller_ =
+      nullptr;
+  raw_ptr<DeviceChooserContentView, DanglingUntriaged> content_view_ = nullptr;
   std::unique_ptr<views::Widget> widget_;
 };
 
diff --git a/chrome/browser/ui/views/extensions/chooser_dialog_view_unittest.cc b/chrome/browser/ui/views/extensions/chooser_dialog_view_unittest.cc
index bb42f07..a9b7a7e 100644
--- a/chrome/browser/ui/views/extensions/chooser_dialog_view_unittest.cc
+++ b/chrome/browser/ui/views/extensions/chooser_dialog_view_unittest.cc
@@ -81,12 +81,13 @@
   }
 
  protected:
-  raw_ptr<ChooserDialogView> dialog_ = nullptr;
-  raw_ptr<FakeBluetoothChooserController> controller_ = nullptr;
+  raw_ptr<ChooserDialogView, DanglingUntriaged> dialog_ = nullptr;
+  raw_ptr<FakeBluetoothChooserController, DanglingUntriaged> controller_ =
+      nullptr;
 
  private:
   std::unique_ptr<views::Widget> parent_widget_;
-  raw_ptr<views::Widget> widget_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> widget_ = nullptr;
 };
 
 TEST_F(ChooserDialogViewTest, ButtonState) {
diff --git a/chrome/browser/ui/views/extensions/extensions_menu_item_unittest.cc b/chrome/browser/ui/views/extensions/extensions_menu_item_unittest.cc
index 0648177..0b2afb3 100644
--- a/chrome/browser/ui/views/extensions/extensions_menu_item_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_menu_item_unittest.cc
@@ -38,10 +38,11 @@
   const std::u16string initial_extension_name_;
   const std::u16string initial_tooltip_;
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<ExtensionsMenuButton> primary_button_ = nullptr;
-  raw_ptr<HoverButton> pin_button_ = nullptr;
-  raw_ptr<HoverButton> context_menu_button_ = nullptr;
-  raw_ptr<TestToolbarActionViewController> controller_ = nullptr;
+  raw_ptr<ExtensionsMenuButton, DanglingUntriaged> primary_button_ = nullptr;
+  raw_ptr<HoverButton, DanglingUntriaged> pin_button_ = nullptr;
+  raw_ptr<HoverButton, DanglingUntriaged> context_menu_button_ = nullptr;
+  raw_ptr<TestToolbarActionViewController, DanglingUntriaged> controller_ =
+      nullptr;
 };
 
 void ExtensionMenuItemViewTest::SetUp() {
diff --git a/chrome/browser/ui/views/extensions/extensions_menu_main_page_view_unittest.cc b/chrome/browser/ui/views/extensions/extensions_menu_main_page_view_unittest.cc
index 36614a7..2a6a073f 100644
--- a/chrome/browser/ui/views/extensions/extensions_menu_main_page_view_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_menu_main_page_view_unittest.cc
@@ -102,7 +102,7 @@
 
  private:
   base::test::ScopedFeatureList scoped_feature_list_;
-  raw_ptr<content::WebContentsTester> web_contents_tester_;
+  raw_ptr<content::WebContentsTester, DanglingUntriaged> web_contents_tester_;
 };
 
 ExtensionsMenuMainPageViewUnitTest::ExtensionsMenuMainPageViewUnitTest() {
diff --git a/chrome/browser/ui/views/extensions/extensions_menu_site_permissions_page_view_unittest.cc b/chrome/browser/ui/views/extensions/extensions_menu_site_permissions_page_view_unittest.cc
index 3cef2dc6..5bf3c47 100644
--- a/chrome/browser/ui/views/extensions/extensions_menu_site_permissions_page_view_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_menu_site_permissions_page_view_unittest.cc
@@ -71,7 +71,7 @@
 
  private:
   base::test::ScopedFeatureList scoped_feature_list_;
-  raw_ptr<content::WebContentsTester> web_contents_tester_;
+  raw_ptr<content::WebContentsTester, DanglingUntriaged> web_contents_tester_;
 };
 
 ExtensionsSitePermissionsPageViewUnitTest::
diff --git a/chrome/browser/ui/views/extensions/extensions_menu_view_unittest.cc b/chrome/browser/ui/views/extensions/extensions_menu_view_unittest.cc
index e4241efe..7edc789 100644
--- a/chrome/browser/ui/views/extensions/extensions_menu_view_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_menu_view_unittest.cc
@@ -63,7 +63,7 @@
 
  private:
   std::unique_ptr<Browser> browser_;
-  raw_ptr<BrowserView> browser_view_;
+  raw_ptr<BrowserView, DanglingUntriaged> browser_view_;
 };
 
 }  // namespace
diff --git a/chrome/browser/ui/views/extensions/extensions_toolbar_button_unittest.cc b/chrome/browser/ui/views/extensions/extensions_toolbar_button_unittest.cc
index e8777581..341fff47 100644
--- a/chrome/browser/ui/views/extensions/extensions_toolbar_button_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_toolbar_button_unittest.cc
@@ -27,7 +27,7 @@
 
  private:
   base::test::ScopedFeatureList scoped_feature_list_;
-  raw_ptr<content::WebContentsTester> web_contents_tester_;
+  raw_ptr<content::WebContentsTester, DanglingUntriaged> web_contents_tester_;
   std::unique_ptr<ExtensionsMenuCoordinator> test_extensions_coordinator_;
 };
 
diff --git a/chrome/browser/ui/views/extensions/extensions_toolbar_container_unittest.cc b/chrome/browser/ui/views/extensions/extensions_toolbar_container_unittest.cc
index e4b23aa..0f45270 100644
--- a/chrome/browser/ui/views/extensions/extensions_toolbar_container_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_toolbar_container_unittest.cc
@@ -42,7 +42,7 @@
 
  private:
   std::unique_ptr<Browser> browser_;
-  raw_ptr<BrowserView> browser_view_;
+  raw_ptr<BrowserView, DanglingUntriaged> browser_view_;
 };
 
 }  // namespace
diff --git a/chrome/browser/ui/views/extensions/extensions_toolbar_controls_unittest.cc b/chrome/browser/ui/views/extensions/extensions_toolbar_controls_unittest.cc
index ce0317cf..50c89aed 100644
--- a/chrome/browser/ui/views/extensions/extensions_toolbar_controls_unittest.cc
+++ b/chrome/browser/ui/views/extensions/extensions_toolbar_controls_unittest.cc
@@ -44,7 +44,7 @@
 
  private:
   base::test::ScopedFeatureList scoped_feature_list_;
-  raw_ptr<content::WebContentsTester> web_contents_tester_;
+  raw_ptr<content::WebContentsTester, DanglingUntriaged> web_contents_tester_;
 };
 
 ExtensionsToolbarControlsUnitTest::ExtensionsToolbarControlsUnitTest() {
diff --git a/chrome/browser/ui/views/extensions/extensions_toolbar_unittest.h b/chrome/browser/ui/views/extensions/extensions_toolbar_unittest.h
index 0f88d76..b0595bc5 100644
--- a/chrome/browser/ui/views/extensions/extensions_toolbar_unittest.h
+++ b/chrome/browser/ui/views/extensions/extensions_toolbar_unittest.h
@@ -138,8 +138,10 @@
   void SetUp() override;
 
  private:
-  raw_ptr<extensions::ExtensionService> extension_service_ = nullptr;
-  raw_ptr<extensions::PermissionsManager> permissions_manager_ = nullptr;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_ =
+      nullptr;
+  raw_ptr<extensions::PermissionsManager, DanglingUntriaged>
+      permissions_manager_ = nullptr;
 };
 
 #endif  // CHROME_BROWSER_UI_VIEWS_EXTENSIONS_EXTENSIONS_TOOLBAR_UNITTEST_H_
diff --git a/chrome/browser/ui/views/extensions/media_galleries_dialog_views_unittest.cc b/chrome/browser/ui/views/extensions/media_galleries_dialog_views_unittest.cc
index b4337c5..c2436b0 100644
--- a/chrome/browser/ui/views/extensions/media_galleries_dialog_views_unittest.cc
+++ b/chrome/browser/ui/views/extensions/media_galleries_dialog_views_unittest.cc
@@ -86,7 +86,7 @@
   // TODO(gbillock): Get rid of this mock; make something specialized.
   NiceMock<MediaGalleriesDialogControllerMock> controller_;
 
-  raw_ptr<views::Checkbox> checkbox_ = nullptr;
+  raw_ptr<views::Checkbox, DanglingUntriaged> checkbox_ = nullptr;
 };
 
 // Tests that checkboxes are initialized according to the contents of
diff --git a/chrome/browser/ui/views/frame/browser_frame_view_layout_linux_native_unittest.cc b/chrome/browser/ui/views/frame/browser_frame_view_layout_linux_native_unittest.cc
index e9170a5..3bbdbe9 100644
--- a/chrome/browser/ui/views/frame/browser_frame_view_layout_linux_native_unittest.cc
+++ b/chrome/browser/ui/views/frame/browser_frame_view_layout_linux_native_unittest.cc
@@ -199,7 +199,7 @@
 
   void ResetNativeNavButtonImagesFromButtonProvider() {
     struct {
-      raw_ptr<views::ImageButton> button;
+      raw_ptr<views::ImageButton, DanglingUntriaged> button;
       ui::NavButtonProvider::FrameButtonDisplayType type;
     } const kButtons[] = {
         {minimize_button_,
@@ -236,17 +236,18 @@
   }
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<views::View> root_view_ = nullptr;
-  raw_ptr<BrowserFrameViewLayoutLinuxNative> layout_manager_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> root_view_ = nullptr;
+  raw_ptr<BrowserFrameViewLayoutLinuxNative, DanglingUntriaged>
+      layout_manager_ = nullptr;
   std::unique_ptr<TestLayoutDelegate> delegate_;
   std::unique_ptr<ui::NavButtonProvider> nav_button_provider_;
   std::unique_ptr<ui::WindowFrameProvider> frame_provider_;
 
   // Widgets:
-  raw_ptr<views::ImageButton> minimize_button_ = nullptr;
-  raw_ptr<views::ImageButton> maximize_button_ = nullptr;
-  raw_ptr<views::ImageButton> restore_button_ = nullptr;
-  raw_ptr<views::ImageButton> close_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> minimize_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> maximize_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> restore_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> close_button_ = nullptr;
 };
 
 // Tests layout of native navigation buttons.
diff --git a/chrome/browser/ui/views/frame/browser_non_client_frame_view_unittest.cc b/chrome/browser/ui/views/frame/browser_non_client_frame_view_unittest.cc
index 9c0399a..fd4b257 100644
--- a/chrome/browser/ui/views/frame/browser_non_client_frame_view_unittest.cc
+++ b/chrome/browser/ui/views/frame/browser_non_client_frame_view_unittest.cc
@@ -39,7 +39,7 @@
 
  protected:
   // Owned by the browser view.
-  raw_ptr<BrowserNonClientFrameView> frame_view_ = nullptr;
+  raw_ptr<BrowserNonClientFrameView, DanglingUntriaged> frame_view_ = nullptr;
 };
 
 class BrowserNonClientFrameViewPopupTest
diff --git a/chrome/browser/ui/views/frame/browser_view_layout_unittest.cc b/chrome/browser/ui/views/frame/browser_view_layout_unittest.cc
index 2907a3a5..95b9248a 100644
--- a/chrome/browser/ui/views/frame/browser_view_layout_unittest.cc
+++ b/chrome/browser/ui/views/frame/browser_view_layout_unittest.cc
@@ -246,8 +246,9 @@
   }
 
  private:
-  raw_ptr<BrowserViewLayout> layout_;
-  raw_ptr<MockBrowserViewLayoutDelegate> delegate_;  // Owned by |layout_|.
+  raw_ptr<BrowserViewLayout, DanglingUntriaged> layout_;
+  raw_ptr<MockBrowserViewLayoutDelegate, DanglingUntriaged>
+      delegate_;  // Owned by |layout_|.
   std::unique_ptr<views::View> browser_view_;
 
   // Views owned by |browser_view_|.
diff --git a/chrome/browser/ui/views/frame/opaque_browser_frame_view_layout_unittest.cc b/chrome/browser/ui/views/frame/opaque_browser_frame_view_layout_unittest.cc
index acbf314c..77ab3e2 100644
--- a/chrome/browser/ui/views/frame/opaque_browser_frame_view_layout_unittest.cc
+++ b/chrome/browser/ui/views/frame/opaque_browser_frame_view_layout_unittest.cc
@@ -364,20 +364,21 @@
   }
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<views::View> root_view_ = nullptr;
-  raw_ptr<OpaqueBrowserFrameViewLayout> layout_manager_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> root_view_ = nullptr;
+  raw_ptr<OpaqueBrowserFrameViewLayout, DanglingUntriaged> layout_manager_ =
+      nullptr;
   std::unique_ptr<TestLayoutDelegate> delegate_;
 
   // Widgets:
-  raw_ptr<views::ImageButton> minimize_button_ = nullptr;
-  raw_ptr<views::ImageButton> maximize_button_ = nullptr;
-  raw_ptr<views::ImageButton> restore_button_ = nullptr;
-  raw_ptr<views::ImageButton> close_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> minimize_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> maximize_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> restore_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> close_button_ = nullptr;
 
   // This field is not a raw_ptr<> because it was filtered by the rewriter for:
   // #addr-of
   RAW_PTR_EXCLUSION TabIconView* tab_icon_view_ = nullptr;
-  raw_ptr<views::Label> window_title_ = nullptr;
+  raw_ptr<views::Label, DanglingUntriaged> window_title_ = nullptr;
 };
 
 TEST_P(OpaqueBrowserFrameViewLayoutTest, BasicWindow) {
diff --git a/chrome/browser/ui/views/frame/tab_strip_region_view_unittest.cc b/chrome/browser/ui/views/frame/tab_strip_region_view_unittest.cc
index ad6613f..863f411 100644
--- a/chrome/browser/ui/views/frame/tab_strip_region_view_unittest.cc
+++ b/chrome/browser/ui/views/frame/tab_strip_region_view_unittest.cc
@@ -79,9 +79,10 @@
   }
 
   // Owned by TabStrip.
-  raw_ptr<FakeBaseTabStripController> controller_ = nullptr;
-  raw_ptr<TabStrip> tab_strip_ = nullptr;
-  raw_ptr<TabStripRegionView> tab_strip_region_view_ = nullptr;
+  raw_ptr<FakeBaseTabStripController, DanglingUntriaged> controller_ = nullptr;
+  raw_ptr<TabStrip, DanglingUntriaged> tab_strip_ = nullptr;
+  raw_ptr<TabStripRegionView, DanglingUntriaged> tab_strip_region_view_ =
+      nullptr;
   std::unique_ptr<views::Widget> widget_;
 
  private:
diff --git a/chrome/browser/ui/views/global_media_controls/media_dialog_view_unittest.cc b/chrome/browser/ui/views/global_media_controls/media_dialog_view_unittest.cc
index f4f77f97..23d34ec 100644
--- a/chrome/browser/ui/views/global_media_controls/media_dialog_view_unittest.cc
+++ b/chrome/browser/ui/views/global_media_controls/media_dialog_view_unittest.cc
@@ -138,7 +138,7 @@
   std::unique_ptr<content::WebContents> web_contents_;
   std::unique_ptr<MediaNotificationService> notification_service_;
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<MediaDialogView> view_ = nullptr;
+  raw_ptr<MediaDialogView, DanglingUntriaged> view_ = nullptr;
   media_session::test::TestMediaController controller_;
   testing::NiceMock<
       global_media_controls::test::MockMediaSessionNotificationItemDelegate>
diff --git a/chrome/browser/ui/views/global_media_controls/media_item_ui_device_selector_view.h b/chrome/browser/ui/views/global_media_controls/media_item_ui_device_selector_view.h
index 5d53a2e..4d74081 100644
--- a/chrome/browser/ui/views/global_media_controls/media_item_ui_device_selector_view.h
+++ b/chrome/browser/ui/views/global_media_controls/media_item_ui_device_selector_view.h
@@ -133,7 +133,8 @@
   global_media_controls::GlobalMediaControlsEntryPoint const entry_point_;
 
   // Child views
-  raw_ptr<AudioDeviceEntryView> current_audio_device_entry_view_ = nullptr;
+  raw_ptr<AudioDeviceEntryView, DanglingUntriaged>
+      current_audio_device_entry_view_ = nullptr;
   raw_ptr<views::View> expand_button_strip_ = nullptr;
   raw_ptr<ExpandDeviceSelectorLabel> expand_label_ = nullptr;
   raw_ptr<ExpandDeviceSelectorButton> dropdown_button_ = nullptr;
diff --git a/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view.h b/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view.h
index 850e80d..6321544 100644
--- a/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view.h
+++ b/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view.h
@@ -51,7 +51,7 @@
 
   SkColor foreground_color_ = gfx::kPlaceholderColor;
 
-  raw_ptr<DeviceEntryButton> overflow_button_ = nullptr;
+  raw_ptr<DeviceEntryButton, DanglingUntriaged> overflow_button_ = nullptr;
 
   raw_ptr<Delegate> delegate_ = nullptr;
 };
diff --git a/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view_unittest.cc b/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view_unittest.cc
index 33d0ef0..49220c3 100644
--- a/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view_unittest.cc
+++ b/chrome/browser/ui/views/global_media_controls/media_item_ui_footer_view_unittest.cc
@@ -102,7 +102,7 @@
   std::unique_ptr<views::Widget> widget_;
   std::unique_ptr<StopCastingHandler> handler_;
   std::unique_ptr<MockFooterViewDelegate> delegate_;
-  raw_ptr<MediaItemUIFooterView> view_ = nullptr;
+  raw_ptr<MediaItemUIFooterView, DanglingUntriaged> view_ = nullptr;
 };
 
 TEST_F(MediaItemUIFooterViewTest, ViewDuringCast) {
diff --git a/chrome/browser/ui/views/global_media_controls/media_toolbar_button_contextual_menu.h b/chrome/browser/ui/views/global_media_controls/media_toolbar_button_contextual_menu.h
index ebfb26e..4b17176 100644
--- a/chrome/browser/ui/views/global_media_controls/media_toolbar_button_contextual_menu.h
+++ b/chrome/browser/ui/views/global_media_controls/media_toolbar_button_contextual_menu.h
@@ -46,7 +46,8 @@
   void ReportIssue();
 #endif  // BUILDFLAG(GOOGLE_CHROME_BRANDING)
 
-  const raw_ptr<Browser> browser_;
-  const raw_ptr<global_media_controls::MediaItemManager> item_manager_;
+  const raw_ptr<Browser, DanglingUntriaged> browser_;
+  const raw_ptr<global_media_controls::MediaItemManager, DanglingUntriaged>
+      item_manager_;
 };
 #endif  // CHROME_BROWSER_UI_VIEWS_GLOBAL_MEDIA_CONTROLS_MEDIA_TOOLBAR_BUTTON_CONTEXTUAL_MENU_H_
diff --git a/chrome/browser/ui/views/intent_picker_bubble_view_unittest.cc b/chrome/browser/ui/views/intent_picker_bubble_view_unittest.cc
index c55e7d4..519bcf3 100644
--- a/chrome/browser/ui/views/intent_picker_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/intent_picker_bubble_view_unittest.cc
@@ -182,8 +182,8 @@
 
   base::test::ScopedFeatureList feature_list_;
 
-  raw_ptr<IntentPickerBubbleView> bubble_ = nullptr;
-  raw_ptr<views::View> anchor_view_;
+  raw_ptr<IntentPickerBubbleView, DanglingUntriaged> bubble_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> anchor_view_;
   std::vector<AppInfo> app_info_;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
 
diff --git a/chrome/browser/ui/views/layout/interpolating_layout_manager_unittest.cc b/chrome/browser/ui/views/layout/interpolating_layout_manager_unittest.cc
index d9ae6a1..23e5d492 100644
--- a/chrome/browser/ui/views/layout/interpolating_layout_manager_unittest.cc
+++ b/chrome/browser/ui/views/layout/interpolating_layout_manager_unittest.cc
@@ -76,7 +76,8 @@
   views::View* host_view() { return host_view_.get(); }
 
  private:
-  raw_ptr<InterpolatingLayoutManager> layout_manager_ = nullptr;
+  raw_ptr<InterpolatingLayoutManager, DanglingUntriaged> layout_manager_ =
+      nullptr;
   std::unique_ptr<views::View> host_view_;
 };
 
diff --git a/chrome/browser/ui/views/location_bar/icon_label_bubble_view_unittest.cc b/chrome/browser/ui/views/location_bar/icon_label_bubble_view_unittest.cc
index b4b3f09..b8655104 100644
--- a/chrome/browser/ui/views/location_bar/icon_label_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/location_bar/icon_label_bubble_view_unittest.cc
@@ -268,8 +268,8 @@
   }
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<TestIconLabelBubbleView> view_ = nullptr;
-  raw_ptr<TestInkDrop> ink_drop_ = nullptr;
+  raw_ptr<TestIconLabelBubbleView, DanglingUntriaged> view_ = nullptr;
+  raw_ptr<TestInkDrop, DanglingUntriaged> ink_drop_ = nullptr;
   std::unique_ptr<ui::test::EventGenerator> generator_;
 
   bool steady_reached_ = false;
diff --git a/chrome/browser/ui/views/location_bar/location_icon_view_unittest.cc b/chrome/browser/ui/views/location_bar/location_icon_view_unittest.cc
index 36f9e03..be2fd168 100644
--- a/chrome/browser/ui/views/location_bar/location_icon_view_unittest.cc
+++ b/chrome/browser/ui/views/location_bar/location_icon_view_unittest.cc
@@ -109,7 +109,7 @@
  private:
   std::unique_ptr<TestLocationBarModel> location_bar_model_;
   std::unique_ptr<TestLocationIconDelegate> delegate_;
-  raw_ptr<LocationIconView> view_;
+  raw_ptr<LocationIconView, DanglingUntriaged> view_;
   std::unique_ptr<views::Widget> widget_;
 };
 
diff --git a/chrome/browser/ui/views/media_router/cast_dialog_no_sinks_view.h b/chrome/browser/ui/views/media_router/cast_dialog_no_sinks_view.h
index b20de6f5..71c7208 100644
--- a/chrome/browser/ui/views/media_router/cast_dialog_no_sinks_view.h
+++ b/chrome/browser/ui/views/media_router/cast_dialog_no_sinks_view.h
@@ -40,7 +40,7 @@
 
   const raw_ptr<Profile> profile_;
   base::OneShotTimer timer_;
-  raw_ptr<views::View> icon_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> icon_ = nullptr;
   raw_ptr<views::Label> label_ = nullptr;
 };
 
diff --git a/chrome/browser/ui/views/media_router/cast_dialog_view_unittest.cc b/chrome/browser/ui/views/media_router/cast_dialog_view_unittest.cc
index 16c587ae..48ef077 100644
--- a/chrome/browser/ui/views/media_router/cast_dialog_view_unittest.cc
+++ b/chrome/browser/ui/views/media_router/cast_dialog_view_unittest.cc
@@ -204,7 +204,7 @@
   std::unique_ptr<views::Widget> anchor_widget_;
   NiceMock<MockCastDialogController> controller_;
   CastDialogCoordinator cast_dialog_coordinator_;
-  raw_ptr<CastDialogView> dialog_ = nullptr;
+  raw_ptr<CastDialogView, DanglingUntriaged> dialog_ = nullptr;
   TestingProfile profile_;
 };
 
diff --git a/chrome/browser/ui/views/media_router/cast_toolbar_button_unittest.cc b/chrome/browser/ui/views/media_router/cast_toolbar_button_unittest.cc
index 8cc231e..51ea7e7 100644
--- a/chrome/browser/ui/views/media_router/cast_toolbar_button_unittest.cc
+++ b/chrome/browser/ui/views/media_router/cast_toolbar_button_unittest.cc
@@ -152,11 +152,12 @@
   std::unique_ptr<BrowserWindow> window_;
   std::unique_ptr<Browser> browser_;
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<CastToolbarButton> button_ = nullptr;  // owned by |widget_|.
+  raw_ptr<CastToolbarButton, DanglingUntriaged> button_ =
+      nullptr;  // owned by |widget_|.
   MockContextMenuObserver context_menu_observer_;
   std::unique_ptr<TestingProfile> profile_;
   std::unique_ptr<LoggerImpl> logger_;
-  raw_ptr<MockMediaRouter> media_router_ = nullptr;
+  raw_ptr<MockMediaRouter, DanglingUntriaged> media_router_ = nullptr;
   std::unique_ptr<MirroringMediaControllerHost> mirroring_controller_host_;
 
   gfx::Image idle_icon_;
diff --git a/chrome/browser/ui/views/omnibox/omnibox_view_views_unittest.cc b/chrome/browser/ui/views/omnibox/omnibox_view_views_unittest.cc
index c1c0c42f..774578b 100644
--- a/chrome/browser/ui/views/omnibox/omnibox_view_views_unittest.cc
+++ b/chrome/browser/ui/views/omnibox/omnibox_view_views_unittest.cc
@@ -289,7 +289,7 @@
   }
 
   raw_ptr<LocationBarModel> location_bar_model_;
-  raw_ptr<OmniboxViewViews> omnibox_view_ = nullptr;
+  raw_ptr<OmniboxViewViews, DanglingUntriaged> omnibox_view_ = nullptr;
 };
 
 // OmniboxViewViewsTest -------------------------------------------------------
@@ -389,7 +389,7 @@
   std::unique_ptr<views::Widget> widget_;
 
   // Owned by |widget_|.
-  raw_ptr<TestingOmniboxView> omnibox_view_;
+  raw_ptr<TestingOmniboxView, DanglingUntriaged> omnibox_view_;
 
   std::unique_ptr<views::TextfieldTestApi> test_api_;
 };
diff --git a/chrome/browser/ui/views/page_action/page_action_icon_view_unittest.cc b/chrome/browser/ui/views/page_action/page_action_icon_view_unittest.cc
index b0a2e850..438811a8 100644
--- a/chrome/browser/ui/views/page_action/page_action_icon_view_unittest.cc
+++ b/chrome/browser/ui/views/page_action/page_action_icon_view_unittest.cc
@@ -138,7 +138,7 @@
 
  private:
   TestPageActionIconDelegate delegate_;
-  raw_ptr<TestPageActionIconView> view_;
+  raw_ptr<TestPageActionIconView, DanglingUntriaged> view_;
   std::unique_ptr<views::Widget> widget_;
 };
 
diff --git a/chrome/browser/ui/views/page_info/page_info_bubble_view_unittest.cc b/chrome/browser/ui/views/page_info/page_info_bubble_view_unittest.cc
index 1a1471f..0e40dcd 100644
--- a/chrome/browser/ui/views/page_info/page_info_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/page_info/page_info_bubble_view_unittest.cc
@@ -322,11 +322,13 @@
     quit_closure.Run();
   }
 
-  raw_ptr<views::BubbleDialogDelegateView> bubble_delegate_;
-  raw_ptr<PageInfo> presenter_ = nullptr;
-  raw_ptr<std::vector<PermissionToggleRowView*>> toggle_rows_ = nullptr;
+  raw_ptr<views::BubbleDialogDelegateView, DanglingUntriaged> bubble_delegate_;
+  raw_ptr<PageInfo, DanglingUntriaged> presenter_ = nullptr;
+  raw_ptr<std::vector<PermissionToggleRowView*>, DanglingUntriaged>
+      toggle_rows_ = nullptr;
 
-  raw_ptr<PageInfoNavigationHandler> navigation_handler_ = nullptr;
+  raw_ptr<PageInfoNavigationHandler, DanglingUntriaged> navigation_handler_ =
+      nullptr;
 
   // For recreating the view.
   gfx::NativeWindow parent_;
@@ -446,7 +448,7 @@
   std::unique_ptr<views::ScopedViewsTestHelper> views_helper_;
   raw_ptr<MockTrustSafetySentimentService> mock_sentiment_service_;
 
-  raw_ptr<views::Widget> parent_window_ =
+  raw_ptr<views::Widget, DanglingUntriaged> parent_window_ =
       nullptr;  // Weak. Owned by the NativeWidget.
   std::unique_ptr<test::PageInfoBubbleViewTestApi> api_;
 };
diff --git a/chrome/browser/ui/views/page_info/page_info_main_view.h b/chrome/browser/ui/views/page_info/page_info_main_view.h
index a0b84e4..4b94fc5b 100644
--- a/chrome/browser/ui/views/page_info/page_info_main_view.h
+++ b/chrome/browser/ui/views/page_info/page_info_main_view.h
@@ -180,7 +180,7 @@
 
   raw_ptr<views::View> security_container_view_ = nullptr;
 
-  raw_ptr<views::LabelButton> reset_button_ = nullptr;
+  raw_ptr<views::LabelButton, DanglingUntriaged> reset_button_ = nullptr;
 
   base::WeakPtrFactory<PageInfoMainView> weak_factory_{this};
 };
diff --git a/chrome/browser/ui/views/page_info/safety_tip_page_info_bubble_view_unittest.cc b/chrome/browser/ui/views/page_info/safety_tip_page_info_bubble_view_unittest.cc
index 571ec12..7a67106a 100644
--- a/chrome/browser/ui/views/page_info/safety_tip_page_info_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/page_info/safety_tip_page_info_bubble_view_unittest.cc
@@ -76,8 +76,8 @@
   views::ScopedViewsTestHelper views_helper_{
       std::make_unique<ChromeTestViewsDelegate<>>()};
 
-  raw_ptr<PageInfoBubbleViewBase> bubble_ = nullptr;
-  raw_ptr<views::Widget> parent_window_ =
+  raw_ptr<PageInfoBubbleViewBase, DanglingUntriaged> bubble_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> parent_window_ =
       nullptr;  // Weak. Owned by the NativeWidget.
 };
 
diff --git a/chrome/browser/ui/views/passwords/manage_passwords_view_unittest.cc b/chrome/browser/ui/views/passwords/manage_passwords_view_unittest.cc
index 62d28e8..5c9fe23 100644
--- a/chrome/browser/ui/views/passwords/manage_passwords_view_unittest.cc
+++ b/chrome/browser/ui/views/passwords/manage_passwords_view_unittest.cc
@@ -43,7 +43,7 @@
 
  private:
   base::test::ScopedFeatureList feature_list_;
-  raw_ptr<ManagePasswordsView> view_;
+  raw_ptr<ManagePasswordsView, DanglingUntriaged> view_;
   std::vector<std::unique_ptr<password_manager::PasswordForm>> current_forms_;
 };
 
diff --git a/chrome/browser/ui/views/passwords/move_to_account_store_bubble_view_unittest.cc b/chrome/browser/ui/views/passwords/move_to_account_store_bubble_view_unittest.cc
index 6441385..82a29ab 100644
--- a/chrome/browser/ui/views/passwords/move_to_account_store_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/passwords/move_to_account_store_bubble_view_unittest.cc
@@ -31,7 +31,7 @@
   void TearDown() override;
 
  protected:
-  raw_ptr<MoveToAccountStoreBubbleView> view_;
+  raw_ptr<MoveToAccountStoreBubbleView, DanglingUntriaged> view_;
 };
 
 void MoveToAccountStoreBubbleViewTest::CreateViewAndShow() {
diff --git a/chrome/browser/ui/views/passwords/password_save_unsynced_credentials_locally_view_unittest.cc b/chrome/browser/ui/views/passwords/password_save_unsynced_credentials_locally_view_unittest.cc
index 979eb7df..a0c080c4 100644
--- a/chrome/browser/ui/views/passwords/password_save_unsynced_credentials_locally_view_unittest.cc
+++ b/chrome/browser/ui/views/passwords/password_save_unsynced_credentials_locally_view_unittest.cc
@@ -37,7 +37,7 @@
   void TearDown() override;
 
  protected:
-  raw_ptr<PasswordSaveUnsyncedCredentialsLocallyView> view_;
+  raw_ptr<PasswordSaveUnsyncedCredentialsLocallyView, DanglingUntriaged> view_;
   std::vector<password_manager::PasswordForm> unsynced_credentials_;
 };
 
diff --git a/chrome/browser/ui/views/passwords/password_save_update_view_unittest.cc b/chrome/browser/ui/views/passwords/password_save_update_view_unittest.cc
index 1b1c31f..869c985 100644
--- a/chrome/browser/ui/views/passwords/password_save_update_view_unittest.cc
+++ b/chrome/browser/ui/views/passwords/password_save_update_view_unittest.cc
@@ -60,7 +60,7 @@
   password_manager::PasswordForm pending_password_;
 
  private:
-  raw_ptr<PasswordSaveUpdateView> view_;
+  raw_ptr<PasswordSaveUpdateView, DanglingUntriaged> view_;
   std::vector<std::unique_ptr<password_manager::PasswordForm>> current_forms_;
 };
 
diff --git a/chrome/browser/ui/views/passwords/post_save_compromised_bubble_view_unittest.cc b/chrome/browser/ui/views/passwords/post_save_compromised_bubble_view_unittest.cc
index ea0fc62c..4cfda5e 100644
--- a/chrome/browser/ui/views/passwords/post_save_compromised_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/passwords/post_save_compromised_bubble_view_unittest.cc
@@ -20,7 +20,7 @@
   void TearDown() override;
 
  protected:
-  raw_ptr<PostSaveCompromisedBubbleView> view_;
+  raw_ptr<PostSaveCompromisedBubbleView, DanglingUntriaged> view_;
 };
 
 void PostSaveCompromisedBubbleViewTest::CreateViewAndShow(
diff --git a/chrome/browser/ui/views/permissions/permission_chip_unittest.cc b/chrome/browser/ui/views/permissions/permission_chip_unittest.cc
index e2a261c3..be94560 100644
--- a/chrome/browser/ui/views/permissions/permission_chip_unittest.cc
+++ b/chrome/browser/ui/views/permissions/permission_chip_unittest.cc
@@ -141,7 +141,7 @@
     base::RunLoop().RunUntilIdle();
   }
 
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 
   base::TimeDelta kChipCollapseDuration = base::Seconds(12);
   base::TimeDelta kNormalChipDismissDuration = base::Seconds(6);
diff --git a/chrome/browser/ui/views/profiles/profile_customization_bubble_sync_controller_unittest.cc b/chrome/browser/ui/views/profiles/profile_customization_bubble_sync_controller_unittest.cc
index 6af5f48..ebd861c 100644
--- a/chrome/browser/ui/views/profiles/profile_customization_bubble_sync_controller_unittest.cc
+++ b/chrome/browser/ui/views/profiles/profile_customization_bubble_sync_controller_unittest.cc
@@ -126,7 +126,7 @@
   syncer::TestSyncService test_sync_service_;
 
  private:
-  raw_ptr<Profile> testing_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> testing_profile_ = nullptr;
   TestingProfileManager testing_profile_manager_;
   std::unique_ptr<views::View> testing_view_;
   FakeThemeService fake_theme_service_;
diff --git a/chrome/browser/ui/views/qrcode_generator/qrcode_generator_bubble_unittest.cc b/chrome/browser/ui/views/qrcode_generator/qrcode_generator_bubble_unittest.cc
index fb1dbdac..63bd2af7 100644
--- a/chrome/browser/ui/views/qrcode_generator/qrcode_generator_bubble_unittest.cc
+++ b/chrome/browser/ui/views/qrcode_generator/qrcode_generator_bubble_unittest.cc
@@ -193,7 +193,7 @@
  private:
   WidgetAutoclosePtr anchor_widget_;
   raw_ptr<views::View> anchor_view_;
-  raw_ptr<QRCodeGeneratorBubble> bubble_;
+  raw_ptr<QRCodeGeneratorBubble, DanglingUntriaged> bubble_;
   WidgetAutoclosePtr bubble_widget_;
 
   FakeQRCodeGeneratorService fake_service_;
diff --git a/chrome/browser/ui/views/send_tab_to_self/send_tab_to_self_device_picker_bubble_view_unittest.cc b/chrome/browser/ui/views/send_tab_to_self/send_tab_to_self_device_picker_bubble_view_unittest.cc
index 46c9633..1a041faf 100644
--- a/chrome/browser/ui/views/send_tab_to_self/send_tab_to_self_device_picker_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/send_tab_to_self/send_tab_to_self_device_picker_bubble_view_unittest.cc
@@ -90,7 +90,7 @@
   content::RenderViewHostTestEnabler test_render_host_factories_;
   std::unique_ptr<content::WebContents> web_contents_;
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<SendTabToSelfDevicePickerBubbleView> bubble_;
+  raw_ptr<SendTabToSelfDevicePickerBubbleView, DanglingUntriaged> bubble_;
   // Owned by WebContents.
   raw_ptr<SendTabToSelfBubbleControllerMock> controller_;
 };
diff --git a/chrome/browser/ui/views/sharing_hub/sharing_hub_bubble_view_impl_unittest.cc b/chrome/browser/ui/views/sharing_hub/sharing_hub_bubble_view_impl_unittest.cc
index 30f29c1..82bbe163 100644
--- a/chrome/browser/ui/views/sharing_hub/sharing_hub_bubble_view_impl_unittest.cc
+++ b/chrome/browser/ui/views/sharing_hub/sharing_hub_bubble_view_impl_unittest.cc
@@ -129,12 +129,12 @@
   }
 
  private:
-  raw_ptr<sharing_hub::SharingHubBubbleViewImpl> bubble_;
+  raw_ptr<sharing_hub::SharingHubBubbleViewImpl, DanglingUntriaged> bubble_;
   testing::NiceMock<sharing_hub::FakeSharingHubBubbleController> controller_{
       kFirstPartyActions};
 
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<views::Widget> bubble_widget_;
+  raw_ptr<views::Widget, DanglingUntriaged> bubble_widget_;
 };
 
 TEST_F(SharingHubBubbleTest, AllFirstPartyActionsAppearInOrder) {
diff --git a/chrome/browser/ui/views/side_panel/read_anything/read_anything_controller.h b/chrome/browser/ui/views/side_panel/read_anything/read_anything_controller.h
index 9fedb3e96..ecc9413 100644
--- a/chrome/browser/ui/views/side_panel/read_anything/read_anything_controller.h
+++ b/chrome/browser/ui/views/side_panel/read_anything/read_anything_controller.h
@@ -54,6 +54,6 @@
 
   // ReadAnythingController is owned by ReadAnythingCoordinator which is a
   // browser user data, so this pointer is always valid.
-  raw_ptr<Browser> browser_;
+  raw_ptr<Browser, DanglingUntriaged> browser_;
 };
 #endif  // CHROME_BROWSER_UI_VIEWS_SIDE_PANEL_READ_ANYTHING_READ_ANYTHING_CONTROLLER_H_
diff --git a/chrome/browser/ui/views/side_panel/read_anything/read_anything_coordinator_unittest.cc b/chrome/browser/ui/views/side_panel/read_anything/read_anything_coordinator_unittest.cc
index 6c69df0..1a52e321aa 100644
--- a/chrome/browser/ui/views/side_panel/read_anything/read_anything_coordinator_unittest.cc
+++ b/chrome/browser/ui/views/side_panel/read_anything/read_anything_coordinator_unittest.cc
@@ -63,9 +63,11 @@
   }
 
  protected:
-  raw_ptr<SidePanelCoordinator> side_panel_coordinator_ = nullptr;
-  raw_ptr<SidePanelRegistry> side_panel_registry_ = nullptr;
-  raw_ptr<ReadAnythingCoordinator> read_anything_coordinator_ = nullptr;
+  raw_ptr<SidePanelCoordinator, DanglingUntriaged> side_panel_coordinator_ =
+      nullptr;
+  raw_ptr<SidePanelRegistry, DanglingUntriaged> side_panel_registry_ = nullptr;
+  raw_ptr<ReadAnythingCoordinator, DanglingUntriaged>
+      read_anything_coordinator_ = nullptr;
 
   MockReadAnythingCoordinatorObserver coordinator_observer_;
   base::test::ScopedFeatureList scoped_feature_list_;
diff --git a/chrome/browser/ui/views/side_panel/side_panel_coordinator_unittest.cc b/chrome/browser/ui/views/side_panel/side_panel_coordinator_unittest.cc
index 9246c10d..034eb67 100644
--- a/chrome/browser/ui/views/side_panel/side_panel_coordinator_unittest.cc
+++ b/chrome/browser/ui/views/side_panel/side_panel_coordinator_unittest.cc
@@ -135,9 +135,10 @@
   }
 
  protected:
-  raw_ptr<SidePanelCoordinator> coordinator_;
-  raw_ptr<SidePanelRegistry> global_registry_;
-  std::vector<raw_ptr<SidePanelRegistry>> contextual_registries_;
+  raw_ptr<SidePanelCoordinator, DanglingUntriaged> coordinator_;
+  raw_ptr<SidePanelRegistry, DanglingUntriaged> global_registry_;
+  std::vector<raw_ptr<SidePanelRegistry, DanglingUntriaged>>
+      contextual_registries_;
 };
 
 class MockSidePanelViewStateObserver : public SidePanelViewStateObserver {
@@ -1448,9 +1449,9 @@
     global_registry_->Register(std::move(entry3));
   }
 
-  raw_ptr<SidePanelEntry> loading_content_entry1_;
-  raw_ptr<SidePanelEntry> loading_content_entry2_;
-  raw_ptr<SidePanelEntry> loaded_content_entry1_;
+  raw_ptr<SidePanelEntry, DanglingUntriaged> loading_content_entry1_;
+  raw_ptr<SidePanelEntry, DanglingUntriaged> loading_content_entry2_;
+  raw_ptr<SidePanelEntry, DanglingUntriaged> loaded_content_entry1_;
 };
 
 TEST_F(SidePanelCoordinatorLoadingContentTest,
diff --git a/chrome/browser/ui/views/site_data/page_specific_site_data_dialog.cc b/chrome/browser/ui/views/site_data/page_specific_site_data_dialog.cc
index 2d23ea4..45b464d6 100644
--- a/chrome/browser/ui/views/site_data/page_specific_site_data_dialog.cc
+++ b/chrome/browser/ui/views/site_data/page_specific_site_data_dialog.cc
@@ -510,8 +510,10 @@
   // the actual content settings to determine the state.
   std::unique_ptr<CookiesTreeModel> allowed_cookies_tree_model_;
   std::unique_ptr<CookiesTreeModel> blocked_cookies_tree_model_;
-  raw_ptr<BrowsingDataModel> allowed_browsing_data_model_for_testing_ = nullptr;
-  raw_ptr<BrowsingDataModel> blocked_browsing_data_model_for_testing_ = nullptr;
+  raw_ptr<BrowsingDataModel, DanglingUntriaged>
+      allowed_browsing_data_model_for_testing_ = nullptr;
+  raw_ptr<BrowsingDataModel, DanglingUntriaged>
+      blocked_browsing_data_model_for_testing_ = nullptr;
   std::unique_ptr<FaviconCache> favicon_cache_;
   scoped_refptr<content_settings::CookieSettings> cookie_settings_;
   raw_ptr<HostContentSettingsMap> host_content_settings_map_;
diff --git a/chrome/browser/ui/views/tabs/color_picker_view_unittest.cc b/chrome/browser/ui/views/tabs/color_picker_view_unittest.cc
index 3353d1b5..b100633 100644
--- a/chrome/browser/ui/views/tabs/color_picker_view_unittest.cc
+++ b/chrome/browser/ui/views/tabs/color_picker_view_unittest.cc
@@ -87,7 +87,7 @@
   ::testing::NiceMock<
       base::MockCallback<ColorPickerView::ColorSelectedCallback>>
       color_selected_callback_;
-  raw_ptr<ColorPickerView> color_picker_;
+  raw_ptr<ColorPickerView, DanglingUntriaged> color_picker_;
 
  private:
   std::unique_ptr<views::Widget> widget_;
diff --git a/chrome/browser/ui/views/tabs/fake_tab_slot_controller.h b/chrome/browser/ui/views/tabs/fake_tab_slot_controller.h
index 25f1c66d..99ec61bf 100644
--- a/chrome/browser/ui/views/tabs/fake_tab_slot_controller.h
+++ b/chrome/browser/ui/views/tabs/fake_tab_slot_controller.h
@@ -111,9 +111,9 @@
 
  private:
   raw_ptr<TabStripController> tab_strip_controller_;
-  raw_ptr<TabContainer> tab_container_;
+  raw_ptr<TabContainer, DanglingUntriaged> tab_container_;
   ui::ListSelectionModel selection_model_;
-  raw_ptr<Tab> active_tab_ = nullptr;
+  raw_ptr<Tab, DanglingUntriaged> active_tab_ = nullptr;
   bool paint_throbber_to_layer_ = true;
 
   SkColor tab_bg_color_active_ = gfx::kPlaceholderColor;
diff --git a/chrome/browser/ui/views/tabs/overflow_view_unittest.cc b/chrome/browser/ui/views/tabs/overflow_view_unittest.cc
index c6f9507..9e5e6f0 100644
--- a/chrome/browser/ui/views/tabs/overflow_view_unittest.cc
+++ b/chrome/browser/ui/views/tabs/overflow_view_unittest.cc
@@ -150,10 +150,12 @@
   static constexpr gfx::Size kPreferredSize2{55, 50};
   static constexpr gfx::Size kMinimumSize2{25, 30};
   std::unique_ptr<views::View> parent_view_;
-  raw_ptr<OverflowView> overflow_view_ = nullptr;
-  raw_ptr<views::StaticSizedView> primary_view_ = nullptr;
-  raw_ptr<views::StaticSizedView> prefix_indicator_view_ = nullptr;
-  raw_ptr<views::StaticSizedView> postfix_indicator_view_ = nullptr;
+  raw_ptr<OverflowView, DanglingUntriaged> overflow_view_ = nullptr;
+  raw_ptr<views::StaticSizedView, DanglingUntriaged> primary_view_ = nullptr;
+  raw_ptr<views::StaticSizedView, DanglingUntriaged> prefix_indicator_view_ =
+      nullptr;
+  raw_ptr<views::StaticSizedView, DanglingUntriaged> postfix_indicator_view_ =
+      nullptr;
 };
 
 constexpr gfx::Size OverflowViewTest::kDefaultParentSize;
diff --git a/chrome/browser/ui/views/tabs/tab_container_unittest.cc b/chrome/browser/ui/views/tabs/tab_container_unittest.cc
index 0727bea..7800ea8 100644
--- a/chrome/browser/ui/views/tabs/tab_container_unittest.cc
+++ b/chrome/browser/ui/views/tabs/tab_container_unittest.cc
@@ -126,7 +126,7 @@
 
  private:
   const raw_ref<TabStripController> tab_strip_controller_;
-  raw_ptr<const TabContainer> tab_container_;
+  raw_ptr<const TabContainer, DanglingUntriaged> tab_container_;
 
   // Set this to true to emulate a tab being animated outside `tab_container_`.
   bool is_animating_outside_container_ = false;
@@ -418,7 +418,7 @@
 
   // Get the group tab's close button center point
   Tab* tab = tab_container_->GetTabAtModelIndex(1);
-  raw_ptr<TabCloseButton> tab_close_button = tab->close_button();
+  TabCloseButton* tab_close_button = tab->close_button();
   gfx::Point tab_center = tab_close_button->GetBoundsInScreen().CenterPoint();
 
   // Remove the tab
diff --git a/chrome/browser/ui/views/tabs/tab_strip_scroll_container_unittest.cc b/chrome/browser/ui/views/tabs/tab_strip_scroll_container_unittest.cc
index 0603b42..543dc4b 100644
--- a/chrome/browser/ui/views/tabs/tab_strip_scroll_container_unittest.cc
+++ b/chrome/browser/ui/views/tabs/tab_strip_scroll_container_unittest.cc
@@ -41,9 +41,10 @@
   ~TabStripScrollContainerTest() override = default;
 
  protected:
-  raw_ptr<FakeBaseTabStripController> controller_ = nullptr;
-  raw_ptr<TabStripScrollContainer> tab_strip_scroll_container_ = nullptr;
-  raw_ptr<TabStrip> tab_strip_ = nullptr;
+  raw_ptr<FakeBaseTabStripController, DanglingUntriaged> controller_ = nullptr;
+  raw_ptr<TabStripScrollContainer, DanglingUntriaged>
+      tab_strip_scroll_container_ = nullptr;
+  raw_ptr<TabStrip, DanglingUntriaged> tab_strip_ = nullptr;
   std::unique_ptr<views::Widget> root_widget_;
 };
 
diff --git a/chrome/browser/ui/views/tabs/tab_strip_scroll_session_unittest.cc b/chrome/browser/ui/views/tabs/tab_strip_scroll_session_unittest.cc
index 944ef53..b36c21f 100644
--- a/chrome/browser/ui/views/tabs/tab_strip_scroll_session_unittest.cc
+++ b/chrome/browser/ui/views/tabs/tab_strip_scroll_session_unittest.cc
@@ -93,7 +93,7 @@
   std::unique_ptr<MockTabDragWithScrollManager> drag_controller_;
   std::unique_ptr<views::ScrollView> scroll_view_;
   std::unique_ptr<TabStripScrollSessionWithTimer> scroll_session_;
-  raw_ptr<views::View> attached_context_;
+  raw_ptr<views::View, DanglingUntriaged> attached_context_;
   raw_ptr<base::MockRepeatingTimer> mock_timer_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
diff --git a/chrome/browser/ui/views/tabs/tab_strip_unittest.cc b/chrome/browser/ui/views/tabs/tab_strip_unittest.cc
index 994847fa..666ae2d 100644
--- a/chrome/browser/ui/views/tabs/tab_strip_unittest.cc
+++ b/chrome/browser/ui/views/tabs/tab_strip_unittest.cc
@@ -211,9 +211,9 @@
   }
 
   // Owned by TabStrip.
-  raw_ptr<FakeBaseTabStripController> controller_ = nullptr;
-  raw_ptr<TabStrip> tab_strip_ = nullptr;
-  raw_ptr<views::View> tab_strip_parent_ = nullptr;
+  raw_ptr<FakeBaseTabStripController, DanglingUntriaged> controller_ = nullptr;
+  raw_ptr<TabStrip, DanglingUntriaged> tab_strip_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> tab_strip_parent_ = nullptr;
   std::unique_ptr<views::Widget> widget_;
 
   ui::MouseEvent dummy_event_ = ui::MouseEvent(ui::ET_MOUSE_PRESSED,
diff --git a/chrome/browser/ui/views/tabs/tab_unittest.cc b/chrome/browser/ui/views/tabs/tab_unittest.cc
index ad22b43..87490909 100644
--- a/chrome/browser/ui/views/tabs/tab_unittest.cc
+++ b/chrome/browser/ui/views/tabs/tab_unittest.cc
@@ -276,8 +276,8 @@
   }
 
   // Owned by TabStrip.
-  raw_ptr<FakeBaseTabStripController> controller_ = nullptr;
-  raw_ptr<TabStrip> tab_strip_ = nullptr;
+  raw_ptr<FakeBaseTabStripController, DanglingUntriaged> controller_ = nullptr;
+  raw_ptr<TabStrip, DanglingUntriaged> tab_strip_ = nullptr;
   std::unique_ptr<views::Widget> widget_;
 };
 
diff --git a/chrome/browser/ui/views/toolbar/chrome_labs_coordinator.h b/chrome/browser/ui/views/toolbar/chrome_labs_coordinator.h
index d21836d..c5f1fa1 100644
--- a/chrome/browser/ui/views/toolbar/chrome_labs_coordinator.h
+++ b/chrome/browser/ui/views/toolbar/chrome_labs_coordinator.h
@@ -69,7 +69,7 @@
       nullptr;
 
   std::unique_ptr<flags_ui::FlagsStorage> flags_storage_;
-  raw_ptr<flags_ui::FlagsState> flags_state_;
+  raw_ptr<flags_ui::FlagsState, DanglingUntriaged> flags_state_;
   std::unique_ptr<ChromeLabsViewController> controller_;
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   bool is_waiting_to_show_ = false;
diff --git a/chrome/browser/ui/views/toolbar/chrome_labs_unittest.cc b/chrome/browser/ui/views/toolbar/chrome_labs_unittest.cc
index ffe451a..ebd1423 100644
--- a/chrome/browser/ui/views/toolbar/chrome_labs_unittest.cc
+++ b/chrome/browser/ui/views/toolbar/chrome_labs_unittest.cc
@@ -382,8 +382,8 @@
 
  protected:
   ScopedChromeLabsModelDataForTesting scoped_chrome_labs_model_data_;
-  raw_ptr<ChromeLabsBubbleView> bubble_view_;
-  raw_ptr<views::Widget> bubble_widget_;
+  raw_ptr<ChromeLabsBubbleView, DanglingUntriaged> bubble_view_;
+  raw_ptr<views::Widget, DanglingUntriaged> bubble_widget_;
 
  private:
 #if BUILDFLAG(IS_CHROMEOS_ASH)
diff --git a/chrome/browser/ui/views/toolbar/chrome_labs_view_controller.h b/chrome/browser/ui/views/toolbar/chrome_labs_view_controller.h
index 79bc5a3f..09c10011 100644
--- a/chrome/browser/ui/views/toolbar/chrome_labs_view_controller.h
+++ b/chrome/browser/ui/views/toolbar/chrome_labs_view_controller.h
@@ -46,9 +46,9 @@
   raw_ptr<const ChromeLabsModel, DanglingUntriaged> model_;
   raw_ptr<ChromeLabsBubbleView, DanglingUntriaged> chrome_labs_bubble_view_;
   base::CallbackListSubscription restart_callback_;
-  raw_ptr<Browser> browser_;
-  raw_ptr<flags_ui::FlagsState> flags_state_;
-  raw_ptr<flags_ui::FlagsStorage> flags_storage_;
+  raw_ptr<Browser, DanglingUntriaged> browser_;
+  raw_ptr<flags_ui::FlagsState, DanglingUntriaged> flags_state_;
+  raw_ptr<flags_ui::FlagsStorage, DanglingUntriaged> flags_storage_;
 };
 
 #endif  // CHROME_BROWSER_UI_VIEWS_TOOLBAR_CHROME_LABS_VIEW_CONTROLLER_H_
diff --git a/chrome/browser/ui/views/toolbar/toolbar_actions_bar_bubble_views_unittest.cc b/chrome/browser/ui/views/toolbar/toolbar_actions_bar_bubble_views_unittest.cc
index 9a80b88..60e6ae1 100644
--- a/chrome/browser/ui/views/toolbar/toolbar_actions_bar_bubble_views_unittest.cc
+++ b/chrome/browser/ui/views/toolbar/toolbar_actions_bar_bubble_views_unittest.cc
@@ -101,8 +101,8 @@
 
  private:
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<views::Widget> bubble_widget_ = nullptr;
-  raw_ptr<ToolbarActionsBarBubbleViews> bubble_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> bubble_widget_ = nullptr;
+  raw_ptr<ToolbarActionsBarBubbleViews, DanglingUntriaged> bubble_ = nullptr;
 };
 
 TEST_F(ToolbarActionsBarBubbleViewsTest, TestBubbleLayoutActionButton) {
diff --git a/chrome/browser/ui/views/toolbar/toolbar_button_unittest.cc b/chrome/browser/ui/views/toolbar/toolbar_button_unittest.cc
index 74ec365..74db0e89 100644
--- a/chrome/browser/ui/views/toolbar/toolbar_button_unittest.cc
+++ b/chrome/browser/ui/views/toolbar/toolbar_button_unittest.cc
@@ -164,7 +164,7 @@
   views::Widget* widget() { return widget_.get(); }
 
  protected:
-  raw_ptr<TestToolbarButton> button_ = nullptr;
+  raw_ptr<TestToolbarButton, DanglingUntriaged> button_ = nullptr;
 
  private:
   std::unique_ptr<views::Widget> widget_;
diff --git a/chrome/browser/ui/views/translate/partial_translate_bubble_view_unittest.cc b/chrome/browser/ui/views/translate/partial_translate_bubble_view_unittest.cc
index 99eea2b..b2e5454 100644
--- a/chrome/browser/ui/views/translate/partial_translate_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/translate/partial_translate_bubble_view_unittest.cc
@@ -135,8 +135,8 @@
   }
 
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<FakePartialTranslateBubbleModel> mock_model_;
-  raw_ptr<PartialTranslateBubbleView> bubble_;
+  raw_ptr<FakePartialTranslateBubbleModel, DanglingUntriaged> mock_model_;
+  raw_ptr<PartialTranslateBubbleView, DanglingUntriaged> bubble_;
 };
 
 TEST_F(PartialTranslateBubbleViewTest,
diff --git a/chrome/browser/ui/views/translate/translate_bubble_controller_unittest.cc b/chrome/browser/ui/views/translate/translate_bubble_controller_unittest.cc
index cd57698..c7eb24a 100644
--- a/chrome/browser/ui/views/translate/translate_bubble_controller_unittest.cc
+++ b/chrome/browser/ui/views/translate/translate_bubble_controller_unittest.cc
@@ -250,8 +250,9 @@
   std::unique_ptr<translate::testing::MockTranslateMetricsLogger>
       mock_translate_metrics_logger_;
 
-  raw_ptr<FakeTranslateBubbleModel> fake_translate_bubble_model_ = nullptr;
-  raw_ptr<FakePartialTranslateBubbleModel>
+  raw_ptr<FakeTranslateBubbleModel, DanglingUntriaged>
+      fake_translate_bubble_model_ = nullptr;
+  raw_ptr<FakePartialTranslateBubbleModel, DanglingUntriaged>
       fake_partial_translate_bubble_model_ = nullptr;
 
   // Owned by WebContents.
diff --git a/chrome/browser/ui/views/translate/translate_bubble_view_unittest.cc b/chrome/browser/ui/views/translate/translate_bubble_view_unittest.cc
index 435db99..ebdfd546 100644
--- a/chrome/browser/ui/views/translate/translate_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/translate/translate_bubble_view_unittest.cc
@@ -230,8 +230,8 @@
   }
 
   std::unique_ptr<views::Widget> anchor_widget_;
-  raw_ptr<MockTranslateBubbleModel> mock_model_;
-  raw_ptr<TranslateBubbleView> bubble_;
+  raw_ptr<MockTranslateBubbleModel, DanglingUntriaged> mock_model_;
+  raw_ptr<TranslateBubbleView, DanglingUntriaged> bubble_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/chrome/browser/ui/views/user_education/browser_feature_promo_controller_unittest.cc b/chrome/browser/ui/views/user_education/browser_feature_promo_controller_unittest.cc
index 2b9741b..4caa1f2 100644
--- a/chrome/browser/ui/views/user_education/browser_feature_promo_controller_unittest.cc
+++ b/chrome/browser/ui/views/user_education/browser_feature_promo_controller_unittest.cc
@@ -237,8 +237,9 @@
               controller_->GetPromoStatus(*feature));
   }
 
-  raw_ptr<BrowserFeaturePromoController> controller_;
-  raw_ptr<NiceMock<feature_engagement::test::MockTracker>> mock_tracker_;
+  raw_ptr<BrowserFeaturePromoController, DanglingUntriaged> controller_;
+  raw_ptr<NiceMock<feature_engagement::test::MockTracker>, DanglingUntriaged>
+      mock_tracker_;
   BrowserFeaturePromoController::TestLock lock_;
   int custom_callback_count_ = 0;
 
diff --git a/chrome/browser/ui/views/user_education/views_tutorial_unittest.cc b/chrome/browser/ui/views/user_education/views_tutorial_unittest.cc
index ccce1d5a..8afb07e9 100644
--- a/chrome/browser/ui/views/user_education/views_tutorial_unittest.cc
+++ b/chrome/browser/ui/views/user_education/views_tutorial_unittest.cc
@@ -110,8 +110,8 @@
                                         &help_bubble_registry_};
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<views::LabelButton> button_ = nullptr;
-  raw_ptr<views::Label> indicator_ = nullptr;
+  raw_ptr<views::LabelButton, DanglingUntriaged> button_ = nullptr;
+  raw_ptr<views::Label, DanglingUntriaged> indicator_ = nullptr;
   bool hide_button_on_press_ = false;
 
  private:
diff --git a/chrome/browser/ui/views/webid/account_selection_bubble_view_unittest.cc b/chrome/browser/ui/views/webid/account_selection_bubble_view_unittest.cc
index a59d565..c1d855d 100644
--- a/chrome/browser/ui/views/webid/account_selection_bubble_view_unittest.cc
+++ b/chrome/browser/ui/views/webid/account_selection_bubble_view_unittest.cc
@@ -445,7 +445,7 @@
     return test_shared_url_loader_factory_;
   }
 
-  raw_ptr<AccountSelectionBubbleView> dialog_;
+  raw_ptr<AccountSelectionBubbleView, DanglingUntriaged> dialog_;
 
  private:
   base::test::ScopedFeatureList feature_list_;
diff --git a/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler.h b/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler.h
index 8ad1f4f..60c7a49 100644
--- a/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler.h
+++ b/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler.h
@@ -135,7 +135,8 @@
   // Contains the info necessary to start a media route.
   std::unique_ptr<MediaRouteStarter> media_route_starter_;
 
-  raw_ptr<AccessCodeCastSinkService> access_code_sink_service_;
+  raw_ptr<AccessCodeCastSinkService, DanglingUntriaged>
+      access_code_sink_service_;
   raw_ptr<signin::IdentityManager> identity_manager_;
   raw_ptr<syncer::SyncService> sync_service_;
 
diff --git a/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler_unittest.cc b/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler_unittest.cc
index bbf9966..4f0f2c08 100644
--- a/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler_unittest.cc
+++ b/chrome/browser/ui/webui/access_code_cast/access_code_cast_handler_unittest.cc
@@ -320,7 +320,7 @@
 
   scoped_refptr<base::TestMockTimeTaskRunner> mock_time_task_runner_;
 
-  raw_ptr<MockMediaRouter> router_;
+  raw_ptr<MockMediaRouter, DanglingUntriaged> router_;
   std::unique_ptr<LoggerImpl> logger_;
   signin::IdentityTestEnvironment identity_test_env_;
 
@@ -345,7 +345,7 @@
   NiceMock<cast_channel::MockCastMessageHandler> message_handler_;
   std::unique_ptr<StrictMock<MockPage>> page_;
   std::unique_ptr<TestingProfileManager> profile_manager_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::unique_ptr<MockCastMediaSinkServiceImpl>
       mock_cast_media_sink_service_impl_;
   std::unique_ptr<MockWebContentsPresentationManager> presentation_manager_;
diff --git a/chrome/browser/ui/webui/browser_command/browser_command_handler.h b/chrome/browser/ui/webui/browser_command/browser_command_handler.h
index fecafa19..d25cb303 100644
--- a/chrome/browser/ui/webui/browser_command/browser_command_handler.h
+++ b/chrome/browser/ui/webui/browser_command/browser_command_handler.h
@@ -89,7 +89,7 @@
       WindowOpenDisposition disposition);
 
   FeedbackCommandSettings feedback_settings_;
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
   std::vector<browser_command::mojom::Command> supported_commands_;
   std::unique_ptr<CommandUpdater> command_updater_;
   mojo::Receiver<browser_command::mojom::CommandHandler> page_handler_;
diff --git a/chrome/browser/ui/webui/certificates_handler_unittest.cc b/chrome/browser/ui/webui/certificates_handler_unittest.cc
index 9fc65eed..a46ea42 100644
--- a/chrome/browser/ui/webui/certificates_handler_unittest.cc
+++ b/chrome/browser/ui/webui/certificates_handler_unittest.cc
@@ -45,7 +45,8 @@
  protected:
   content::TestWebUI web_ui_;
   certificate_manager::CertificatesHandler cert_handler_;
-  raw_ptr<sync_preferences::TestingPrefServiceSyncable> pref_service_ = nullptr;
+  raw_ptr<sync_preferences::TestingPrefServiceSyncable, DanglingUntriaged>
+      pref_service_ = nullptr;
 };
 
 #if BUILDFLAG(IS_CHROMEOS)
diff --git a/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller.h b/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller.h
index 8c9c9dc..7f15e8c 100644
--- a/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller.h
+++ b/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller.h
@@ -45,7 +45,7 @@
  private:
   raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
   raw_ptr<ShoppingService> shopping_service_;
-  raw_ptr<ShoppingListHandler> shopping_list_hander_;
+  raw_ptr<ShoppingListHandler, DanglingUntriaged> shopping_list_hander_;
 };
 
 }  // namespace commerce
diff --git a/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller_unittest.cc b/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller_unittest.cc
index 82be3de..d777c7e 100644
--- a/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller_unittest.cc
+++ b/chrome/browser/ui/webui/commerce/shopping_list_context_menu_controller_unittest.cc
@@ -85,7 +85,7 @@
  protected:
   content::BrowserTaskEnvironment task_environment_;
   base::UserActionTester user_action_tester_;
-  raw_ptr<const bookmarks::BookmarkNode> bookmark_;
+  raw_ptr<const bookmarks::BookmarkNode, DanglingUntriaged> bookmark_;
 
  private:
   std::unique_ptr<bookmarks::BookmarkModel> bookmark_model_;
diff --git a/chrome/browser/ui/webui/history/browsing_history_handler_unittest.cc b/chrome/browser/ui/webui/history/browsing_history_handler_unittest.cc
index 107c005..6ea023e 100644
--- a/chrome/browser/ui/webui/history/browsing_history_handler_unittest.cc
+++ b/chrome/browser/ui/webui/history/browsing_history_handler_unittest.cc
@@ -99,7 +99,7 @@
  private:
   base::SimpleTestClock test_clock_;
   bool postpone_query_results_ = false;
-  raw_ptr<history::MockBrowsingHistoryService> mock_service_;
+  raw_ptr<history::MockBrowsingHistoryService, DanglingUntriaged> mock_service_;
 };
 
 }  // namespace
@@ -170,8 +170,9 @@
     return service;
   }
 
-  raw_ptr<syncer::TestSyncService> sync_service_ = nullptr;
-  raw_ptr<history::FakeWebHistoryService> web_history_service_ = nullptr;
+  raw_ptr<syncer::TestSyncService, DanglingUntriaged> sync_service_ = nullptr;
+  raw_ptr<history::FakeWebHistoryService, DanglingUntriaged>
+      web_history_service_ = nullptr;
   std::unique_ptr<content::TestWebUI> web_ui_;
 };
 
diff --git a/chrome/browser/ui/webui/new_tab_page/new_tab_page_handler_unittest.cc b/chrome/browser/ui/webui/new_tab_page/new_tab_page_handler_unittest.cc
index cfd4a0b..363fb2d 100644
--- a/chrome/browser/ui/webui/new_tab_page/new_tab_page_handler_unittest.cc
+++ b/chrome/browser/ui/webui/new_tab_page/new_tab_page_handler_unittest.cc
@@ -342,7 +342,7 @@
   content::TestWebContentsFactory factory_;
   raw_ptr<content::WebContents> web_contents_;  // Weak. Owned by factory_.
   // Pointer to mock that will eventually be solely owned by the handler.
-  raw_ptr<MockCustomizeChromeFeaturePromoHelper>
+  raw_ptr<MockCustomizeChromeFeaturePromoHelper, DanglingUntriaged>
       mock_customize_chrome_feature_promo_helper_;
   std::unique_ptr<MockCustomizeChromeFeaturePromoHelper>
       mock_customize_chrome_feature_promo_helper_ptr_;
diff --git a/chrome/browser/ui/webui/ntp/app_launcher_handler_unittest.cc b/chrome/browser/ui/webui/ntp/app_launcher_handler_unittest.cc
index c8ac6ac..741e32b 100644
--- a/chrome/browser/ui/webui/ntp/app_launcher_handler_unittest.cc
+++ b/chrome/browser/ui/webui/ntp/app_launcher_handler_unittest.cc
@@ -181,7 +181,7 @@
   WebAppProvider* provider() { return WebAppProvider::GetForTest(profile()); }
 
   web_app::OsIntegrationManager::ScopedSuppressForTesting os_hooks_suppress_;
-  raw_ptr<extensions::ExtensionService> extension_service_;
+  raw_ptr<extensions::ExtensionService, DanglingUntriaged> extension_service_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/chrome/browser/ui/webui/password_manager/promo_card_unittest.cc b/chrome/browser/ui/webui/password_manager/promo_card_unittest.cc
index 5fbdface..db6436c4 100644
--- a/chrome/browser/ui/webui/password_manager/promo_card_unittest.cc
+++ b/chrome/browser/ui/webui/password_manager/promo_card_unittest.cc
@@ -415,7 +415,7 @@
   web_app::FakeWebAppProvider* provider() { return provider_; }
 
  private:
-  raw_ptr<web_app::FakeWebAppProvider> provider_;
+  raw_ptr<web_app::FakeWebAppProvider, DanglingUntriaged> provider_;
 };
 
 TEST_F(PromoCardShortcutTest, NoPromoIfShortcutInstalled) {
diff --git a/chrome/browser/ui/webui/password_manager/promo_cards_handler.h b/chrome/browser/ui/webui/password_manager/promo_cards_handler.h
index 18c44f1..acd9dfdb 100644
--- a/chrome/browser/ui/webui/password_manager/promo_cards_handler.h
+++ b/chrome/browser/ui/webui/password_manager/promo_cards_handler.h
@@ -42,7 +42,7 @@
 
   PromoCardInterface* GetPromoToShowAndUpdatePref();
 
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   std::vector<std::unique_ptr<PromoCardInterface>> promo_cards_;
 };
diff --git a/chrome/browser/ui/webui/password_manager/sync_handler.h b/chrome/browser/ui/webui/password_manager/sync_handler.h
index ca65a20..2017a6bd 100644
--- a/chrome/browser/ui/webui/password_manager/sync_handler.h
+++ b/chrome/browser/ui/webui/password_manager/sync_handler.h
@@ -70,7 +70,7 @@
   syncer::SyncService* GetSyncService() const;
 
   // Weak pointer.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   base::ScopedObservation<syncer::SyncService, syncer::SyncServiceObserver>
       sync_service_observation_{this};
diff --git a/chrome/browser/ui/webui/password_manager/sync_handler_unittest.cc b/chrome/browser/ui/webui/password_manager/sync_handler_unittest.cc
index 891da08..e9b13c10 100644
--- a/chrome/browser/ui/webui/password_manager/sync_handler_unittest.cc
+++ b/chrome/browser/ui/webui/password_manager/sync_handler_unittest.cc
@@ -115,7 +115,7 @@
   content::TestWebUI web_ui_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_adaptor_;
-  raw_ptr<MockSyncService> mock_sync_service_;
+  raw_ptr<MockSyncService, DanglingUntriaged> mock_sync_service_;
   raw_ptr<SyncHandler> handler_;
 };
 
diff --git a/chrome/browser/ui/webui/print_preview/print_preview_handler_unittest.cc b/chrome/browser/ui/webui/print_preview/print_preview_handler_unittest.cc
index c044141..3c6bebc 100644
--- a/chrome/browser/ui/webui/print_preview/print_preview_handler_unittest.cc
+++ b/chrome/browser/ui/webui/print_preview/print_preview_handler_unittest.cc
@@ -412,7 +412,7 @@
   int bad_messages_;
   base::flat_set<mojom::PrinterType> called_for_type_;
   std::unique_ptr<PrinterHandler> test_printer_handler_;
-  const raw_ptr<content::WebContents> initiator_;
+  const raw_ptr<content::WebContents, DanglingUntriaged> initiator_;
 };
 
 #if BUILDFLAG(ENABLE_PRINT_CONTENT_ANALYSIS)
diff --git a/chrome/browser/ui/webui/sanitized_image_source_unittest.cc b/chrome/browser/ui/webui/sanitized_image_source_unittest.cc
index 52ccf6a..453f40ce 100644
--- a/chrome/browser/ui/webui/sanitized_image_source_unittest.cc
+++ b/chrome/browser/ui/webui/sanitized_image_source_unittest.cc
@@ -81,7 +81,8 @@
   content::BrowserTaskEnvironment task_environment_;
   std::unique_ptr<TestingProfile> profile_;
   network::TestURLLoaderFactory test_url_loader_factory_;
-  raw_ptr<MockDataDecoderDelegate> mock_data_decoder_delegate_;
+  raw_ptr<MockDataDecoderDelegate, DanglingUntriaged>
+      mock_data_decoder_delegate_;
   std::unique_ptr<SanitizedImageSource> sanitized_image_source_;
 };
 
diff --git a/chrome/browser/ui/webui/settings/downloads_handler_unittest.cc b/chrome/browser/ui/webui/settings/downloads_handler_unittest.cc
index 1befd780..ac9c7dc9 100644
--- a/chrome/browser/ui/webui/settings/downloads_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/downloads_handler_unittest.cc
@@ -81,7 +81,8 @@
   raw_ptr<DownloadCoreService> service_;
   raw_ptr<content::MockDownloadManager>
       download_manager_;  // Owned by |profile_|.
-  raw_ptr<ChromeDownloadManagerDelegate> chrome_download_manager_delegate_;
+  raw_ptr<ChromeDownloadManagerDelegate, DanglingUntriaged>
+      chrome_download_manager_delegate_;
 
   bool connection_policy_enabled_;
   std::string account_name_, account_login_, folder_name_, folder_id_;
diff --git a/chrome/browser/ui/webui/settings/hats_handler_unittest.cc b/chrome/browser/ui/webui/settings/hats_handler_unittest.cc
index 14701e7..54c4e57c 100644
--- a/chrome/browser/ui/webui/settings/hats_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/hats_handler_unittest.cc
@@ -80,8 +80,9 @@
 
   content::TestWebUI* web_ui() { return web_ui_.get(); }
   HatsHandler* handler() { return handler_.get(); }
-  raw_ptr<MockHatsService> mock_hats_service_;
-  raw_ptr<MockTrustSafetySentimentService> mock_sentiment_service_;
+  raw_ptr<MockHatsService, DanglingUntriaged> mock_hats_service_;
+  raw_ptr<MockTrustSafetySentimentService, DanglingUntriaged>
+      mock_sentiment_service_;
 
  protected:
   // This should only be accessed in the test constructor, to avoid race
diff --git a/chrome/browser/ui/webui/settings/people_handler.h b/chrome/browser/ui/webui/settings/people_handler.h
index 4908e5a..5c6ec38 100644
--- a/chrome/browser/ui/webui/settings/people_handler.h
+++ b/chrome/browser/ui/webui/settings/people_handler.h
@@ -233,7 +233,7 @@
   void InitializeSyncBlocker();
 
   // Weak pointer.
-  raw_ptr<Profile> profile_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
 
   // Prevents Sync from running until configuration is complete.
   std::unique_ptr<syncer::SyncSetupInProgressHandle> sync_blocker_;
diff --git a/chrome/browser/ui/webui/settings/people_handler_unittest.cc b/chrome/browser/ui/webui/settings/people_handler_unittest.cc
index 8977053..93d298d 100644
--- a/chrome/browser/ui/webui/settings/people_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/people_handler_unittest.cc
@@ -366,7 +366,7 @@
 
   testing::NiceMock<base::MockCallback<base::RepeatingClosure>>
       mock_on_setup_in_progress_handle_destroyed_;
-  raw_ptr<syncer::MockSyncService> mock_sync_service_;
+  raw_ptr<syncer::MockSyncService, DanglingUntriaged> mock_sync_service_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_adaptor_;
   content::TestWebUI web_ui_;
diff --git a/chrome/browser/ui/webui/settings/performance_handler_unittest.cc b/chrome/browser/ui/webui/settings/performance_handler_unittest.cc
index 7c8dae8f..36e2100 100644
--- a/chrome/browser/ui/webui/settings/performance_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/performance_handler_unittest.cc
@@ -80,7 +80,7 @@
   std::unique_ptr<content::TestWebUI> web_ui_;
   std::unique_ptr<PerformanceHandler> handler_;
   TestingProfile profile_;
-  raw_ptr<TestingProfile> incognito_profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> incognito_profile_ = nullptr;
   std::unique_ptr<content::WebContents> web_contents_;
   std::vector<std::unique_ptr<Browser>> browsers_;
 };
diff --git a/chrome/browser/ui/webui/settings/safety_check_handler_unittest.cc b/chrome/browser/ui/webui/settings/safety_check_handler_unittest.cc
index 65ac6416..f38ecf0 100644
--- a/chrome/browser/ui/webui/settings/safety_check_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/safety_check_handler_unittest.cc
@@ -334,8 +334,9 @@
   content::BrowserTaskEnvironment browser_task_environment_;
   std::unique_ptr<TestingProfile> profile_;
   std::unique_ptr<content::WebContents> web_contents_;
-  raw_ptr<safety_check::TestUpdateCheckHelper> update_helper_ = nullptr;
-  raw_ptr<TestVersionUpdater> version_updater_ = nullptr;
+  raw_ptr<safety_check::TestUpdateCheckHelper, DanglingUntriaged>
+      update_helper_ = nullptr;
+  raw_ptr<TestVersionUpdater, DanglingUntriaged> version_updater_ = nullptr;
   std::unique_ptr<password_manager::BulkLeakCheckService> test_leak_service_;
   scoped_refptr<TestPasswordsDelegate> test_passwords_delegate_;
   raw_ptr<extensions::ExtensionPrefs> test_extension_prefs_ = nullptr;
diff --git a/chrome/browser/ui/webui/settings/safety_hub_handler.h b/chrome/browser/ui/webui/settings/safety_hub_handler.h
index a4455f94..92fdeb18 100644
--- a/chrome/browser/ui/webui/settings/safety_hub_handler.h
+++ b/chrome/browser/ui/webui/settings/safety_hub_handler.h
@@ -72,7 +72,7 @@
   // Sends the list of unused site permissions to review to the WebUI.
   void SendUnusedSitePermissionsReviewList();
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 };
 
 #endif  // CHROME_BROWSER_UI_WEBUI_SETTINGS_SAFETY_HUB_HANDLER_H_
diff --git a/chrome/browser/ui/webui/settings/site_settings_handler.h b/chrome/browser/ui/webui/settings/site_settings_handler.h
index 1063a09..f60b9b5c 100644
--- a/chrome/browser/ui/webui/settings/site_settings_handler.h
+++ b/chrome/browser/ui/webui/settings/site_settings_handler.h
@@ -420,7 +420,7 @@
   // Sends the list of notification permissions to review to the WebUI.
   void SendNotificationPermissionReviewList();
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 
   base::ScopedMultiSourceObservation<Profile, ProfileObserver>
       observed_profiles_{this};
diff --git a/chrome/browser/ui/webui/settings/site_settings_handler_unittest.cc b/chrome/browser/ui/webui/settings/site_settings_handler_unittest.cc
index 22d05b1f..12eb736 100644
--- a/chrome/browser/ui/webui/settings/site_settings_handler_unittest.cc
+++ b/chrome/browser/ui/webui/settings/site_settings_handler_unittest.cc
@@ -870,7 +870,7 @@
   content::BrowserTaskEnvironment task_environment_;
   std::unique_ptr<TestingProfileManager> testing_profile_manager_;
   raw_ptr<TestingProfile> profile_ = nullptr;
-  raw_ptr<Profile> incognito_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> incognito_profile_ = nullptr;
   content::TestWebUI web_ui_;
   std::unique_ptr<SiteSettingsHandler> handler_;
 #if BUILDFLAG(IS_CHROMEOS_ASH)
diff --git a/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler.h b/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler.h
index 4b9cc20..2a5aae9 100644
--- a/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler.h
+++ b/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler.h
@@ -105,7 +105,7 @@
   // |reading_list_ui_| to remain valid for the lifetime of |this|.
   const raw_ptr<ReadingListUI> reading_list_ui_;
   const raw_ptr<content::WebUI> web_ui_;
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 
   absl::optional<GURL> active_tab_url_;
   reading_list::mojom::CurrentPageActionButtonState
diff --git a/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler_unittest.cc b/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler_unittest.cc
index 9f9cbb5..ba04b99 100644
--- a/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler_unittest.cc
+++ b/chrome/browser/ui/webui/side_panel/reading_list/reading_list_page_handler_unittest.cc
@@ -193,7 +193,7 @@
   std::unique_ptr<content::WebContents> web_contents_;
   std::unique_ptr<content::TestWebUI> test_web_ui_;
   std::unique_ptr<TestReadingListPageHandler> handler_;
-  raw_ptr<ReadingListModel> model_;
+  raw_ptr<ReadingListModel, DanglingUntriaged> model_;
 };
 
 TEST_F(TestReadingListPageHandlerTest, GetReadLaterEntries) {
diff --git a/chrome/browser/ui/webui/side_panel/user_notes/user_notes_page_handler_unittest.cc b/chrome/browser/ui/webui/side_panel/user_notes/user_notes_page_handler_unittest.cc
index be4f8bb..9e1ccab 100644
--- a/chrome/browser/ui/webui/side_panel/user_notes/user_notes_page_handler_unittest.cc
+++ b/chrome/browser/ui/webui/side_panel/user_notes/user_notes_page_handler_unittest.cc
@@ -83,7 +83,7 @@
 
  protected:
   MockUserNotesPage page_;
-  raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
+  raw_ptr<bookmarks::BookmarkModel, DanglingUntriaged> bookmark_model_;
 
  private:
   std::unique_ptr<TestUserNotesPageHandler> handler_;
diff --git a/chrome/browser/ui/webui/signin/sync_confirmation_handler_unittest.cc b/chrome/browser/ui/webui/signin/sync_confirmation_handler_unittest.cc
index 5a08a01d..00656668 100644
--- a/chrome/browser/ui/webui/signin/sync_confirmation_handler_unittest.cc
+++ b/chrome/browser/ui/webui/signin/sync_confirmation_handler_unittest.cc
@@ -206,7 +206,8 @@
  private:
   std::unique_ptr<content::TestWebUI> web_ui_;
   std::unique_ptr<SyncConfirmationUI> sync_confirmation_ui_;
-  raw_ptr<TestingSyncConfirmationHandler> handler_;  // Not owned.
+  raw_ptr<TestingSyncConfirmationHandler, DanglingUntriaged>
+      handler_;  // Not owned.
   base::UserActionTester user_action_tester_;
   std::unordered_map<std::string, int> string_to_grd_id_map_;
   base::ScopedObservation<LoginUIService, LoginUIService::Observer>
diff --git a/chrome/browser/ui/webui/signin/turn_sync_on_helper_unittest.cc b/chrome/browser/ui/webui/signin/turn_sync_on_helper_unittest.cc
index 8f393c6f..f99601b 100644
--- a/chrome/browser/ui/webui/signin/turn_sync_on_helper_unittest.cc
+++ b/chrome/browser/ui/webui/signin/turn_sync_on_helper_unittest.cc
@@ -878,10 +878,11 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   ScopedTestingLocalState local_state_;
   CoreAccountId account_id_;
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
   std::unique_ptr<IdentityTestEnvironmentProfileAdaptor>
       identity_test_env_profile_adaptor_;
-  raw_ptr<FakeUserPolicySigninService> user_policy_signin_service_ = nullptr;
+  raw_ptr<FakeUserPolicySigninService, DanglingUntriaged>
+      user_policy_signin_service_ = nullptr;
   std::string initial_device_id_;
   testing::NiceMock<syncer::SyncUserSettingsMock> mock_sync_settings_;
 
@@ -903,7 +904,7 @@
   std::string merge_data_previous_email_;
   std::string merge_data_new_email_;
   bool switched_to_new_profile_ = false;
-  raw_ptr<Profile> new_profile_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> new_profile_ = nullptr;
   bool sync_confirmation_shown_ = false;
   SyncDisabledConfirmation sync_disabled_confirmation_ = kNotShown;
   bool sync_settings_shown_ = false;
diff --git a/chrome/browser/ui/webui/sync_internals/sync_internals_message_handler_unittest.cc b/chrome/browser/ui/webui/sync_internals/sync_internals_message_handler_unittest.cc
index 6ce5f481..91f2e1a 100644
--- a/chrome/browser/ui/webui/sync_internals/sync_internals_message_handler_unittest.cc
+++ b/chrome/browser/ui/webui/sync_internals/sync_internals_message_handler_unittest.cc
@@ -188,11 +188,11 @@
 
  private:
   content::TestWebUI web_ui_;
-  raw_ptr<TestSyncService> test_sync_service_;
-  raw_ptr<FakeUserEventService> fake_user_event_service_;
+  raw_ptr<TestSyncService, DanglingUntriaged> test_sync_service_;
+  raw_ptr<FakeUserEventService, DanglingUntriaged> fake_user_event_service_;
   std::unique_ptr<TestableSyncInternalsMessageHandler> handler_;
   int about_sync_data_delegate_call_count_ = 0;
-  raw_ptr<SyncService> last_delegate_sync_service_ = nullptr;
+  raw_ptr<SyncService, DanglingUntriaged> last_delegate_sync_service_ = nullptr;
   // Fake return value for sync_ui_util::ConstructAboutInformation().
   base::Value::Dict about_information_;
 };
diff --git a/chrome/browser/ui/webui/tab_search/tab_search_page_handler.h b/chrome/browser/ui/webui/tab_search/tab_search_page_handler.h
index 501336c..0e4e8a4 100644
--- a/chrome/browser/ui/webui/tab_search/tab_search_page_handler.h
+++ b/chrome/browser/ui/webui/tab_search/tab_search_page_handler.h
@@ -148,7 +148,8 @@
   mojo::Receiver<tab_search::mojom::PageHandler> receiver_;
   mojo::Remote<tab_search::mojom::Page> page_;
   const raw_ptr<content::WebUI> web_ui_;
-  const raw_ptr<ui::MojoBubbleWebUIController> webui_controller_;
+  const raw_ptr<ui::MojoBubbleWebUIController, DanglingUntriaged>
+      webui_controller_;
   const raw_ptr<MetricsReporter> metrics_reporter_;
   BrowserTabStripTracker browser_tab_strip_tracker_{this, this};
   std::unique_ptr<base::RetainingOneShotTimer> debounce_timer_;
diff --git a/chrome/browser/ui/webui/tab_search/tab_search_page_handler_unittest.cc b/chrome/browser/ui/webui/tab_search/tab_search_page_handler_unittest.cc
index 8ea9998..e24fbfc 100644
--- a/chrome/browser/ui/webui/tab_search/tab_search_page_handler_unittest.cc
+++ b/chrome/browser/ui/webui/tab_search/tab_search_page_handler_unittest.cc
@@ -222,7 +222,7 @@
 
   std::unique_ptr<content::WebContents> web_contents_;
   content::TestWebUI web_ui_;
-  raw_ptr<Profile> profile2_;
+  raw_ptr<Profile, DanglingUntriaged> profile2_;
   std::unique_ptr<Browser> browser2_;
   std::unique_ptr<Browser> browser3_;
   std::unique_ptr<Browser> browser4_;
diff --git a/chrome/browser/updates/announcement_notification/announcement_notification_service.cc b/chrome/browser/updates/announcement_notification/announcement_notification_service.cc
index d9f015f..ebd6a226 100644
--- a/chrome/browser/updates/announcement_notification/announcement_notification_service.cc
+++ b/chrome/browser/updates/announcement_notification/announcement_notification_service.cc
@@ -192,8 +192,8 @@
     return entry && entry->GetSigninState() != SigninState::kNotSignedIn;
   }
 
-  raw_ptr<Profile> profile_;
-  raw_ptr<PrefService> pref_service_;
+  raw_ptr<Profile, DanglingUntriaged> profile_;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_;
   std::unique_ptr<Delegate> delegate_;
   raw_ptr<base::Clock> clock_;
 
diff --git a/chrome/browser/web_applications/commands/clear_browsing_data_command_unittest.cc b/chrome/browser/web_applications/commands/clear_browsing_data_command_unittest.cc
index fabce8e4..f231374a 100644
--- a/chrome/browser/web_applications/commands/clear_browsing_data_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/clear_browsing_data_command_unittest.cc
@@ -32,7 +32,7 @@
   FakeWebAppProvider* provider() { return web_app_provider_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> web_app_provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> web_app_provider_;
 };
 
 TEST_F(ClearBrowsingDataCommandTest, ClearLastLaunchTimeForAllTimes) {
diff --git a/chrome/browser/web_applications/commands/externally_managed_install_command_unittest.cc b/chrome/browser/web_applications/commands/externally_managed_install_command_unittest.cc
index d8affe0..224afaf 100644
--- a/chrome/browser/web_applications/commands/externally_managed_install_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/externally_managed_install_command_unittest.cc
@@ -174,7 +174,7 @@
 
  private:
   base::flat_map<AppId, BitmapData> app_to_icons_data_;
-  raw_ptr<TestShortcutManager> shortcut_manager_;
+  raw_ptr<TestShortcutManager, DanglingUntriaged> shortcut_manager_;
   std::unique_ptr<TestWebAppUrlLoader> url_loader_;
 };
 
diff --git a/chrome/browser/web_applications/commands/fetch_manifest_and_install_command_unittest.cc b/chrome/browser/web_applications/commands/fetch_manifest_and_install_command_unittest.cc
index 19ee9f38..d10670399 100644
--- a/chrome/browser/web_applications/commands/fetch_manifest_and_install_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/fetch_manifest_and_install_command_unittest.cc
@@ -203,7 +203,7 @@
  private:
   base::HistogramTester histogram_tester_;
   scoped_refptr<TestFileUtils> file_utils_;
-  raw_ptr<FakeWebAppUiManager> fake_ui_manager_ = nullptr;
+  raw_ptr<FakeWebAppUiManager, DanglingUntriaged> fake_ui_manager_ = nullptr;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   ArcAppTest arc_test_;
diff --git a/chrome/browser/web_applications/commands/install_app_locally_command_unittest.cc b/chrome/browser/web_applications/commands/install_app_locally_command_unittest.cc
index da8078be..875c0b22 100644
--- a/chrome/browser/web_applications/commands/install_app_locally_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/install_app_locally_command_unittest.cc
@@ -175,7 +175,7 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
diff --git a/chrome/browser/web_applications/commands/install_from_sync_command.h b/chrome/browser/web_applications/commands/install_from_sync_command.h
index c61d19d8..b3180501 100644
--- a/chrome/browser/web_applications/commands/install_from_sync_command.h
+++ b/chrome/browser/web_applications/commands/install_from_sync_command.h
@@ -110,7 +110,7 @@
   std::unique_ptr<SharedWebContentsWithAppLockDescription> lock_description_;
   std::unique_ptr<SharedWebContentsWithAppLock> lock_;
 
-  const raw_ptr<WebAppUrlLoader> url_loader_;
+  const raw_ptr<WebAppUrlLoader, DanglingUntriaged> url_loader_;
   const raw_ptr<Profile> profile_;
   const std::unique_ptr<WebAppDataRetriever> data_retriever_;
   const Params params_;
diff --git a/chrome/browser/web_applications/commands/install_from_sync_command_unittest.cc b/chrome/browser/web_applications/commands/install_from_sync_command_unittest.cc
index bdcdb5b..68c6e79 100644
--- a/chrome/browser/web_applications/commands/install_from_sync_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/install_from_sync_command_unittest.cc
@@ -235,7 +235,7 @@
     return base::UTF8ToUTF16(registrar().GetAppShortName(app_id));
   }
 
-  raw_ptr<TestWebAppUrlLoader> command_manager_url_loader_;
+  raw_ptr<TestWebAppUrlLoader, DanglingUntriaged> command_manager_url_loader_;
   std::unique_ptr<TestWebAppUrlLoader> url_loader_;
 };
 
diff --git a/chrome/browser/web_applications/commands/install_placeholder_command_unittest.cc b/chrome/browser/web_applications/commands/install_placeholder_command_unittest.cc
index 2f3e2518..af41ab5 100644
--- a/chrome/browser/web_applications/commands/install_placeholder_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/install_placeholder_command_unittest.cc
@@ -57,7 +57,7 @@
   TestShortcutManager* shortcut_manager() { return shortcut_manager_; }
 
  private:
-  raw_ptr<TestShortcutManager> shortcut_manager_;
+  raw_ptr<TestShortcutManager, DanglingUntriaged> shortcut_manager_;
 };
 
 TEST_F(InstallPlaceholderCommandTest, InstallPlaceholder) {
diff --git a/chrome/browser/web_applications/commands/os_integration_synchronize_command_unittest.cc b/chrome/browser/web_applications/commands/os_integration_synchronize_command_unittest.cc
index d4c3ad8..c53df2e 100644
--- a/chrome/browser/web_applications/commands/os_integration_synchronize_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/os_integration_synchronize_command_unittest.cc
@@ -188,7 +188,7 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
diff --git a/chrome/browser/web_applications/commands/run_on_os_login_command_unittest.cc b/chrome/browser/web_applications/commands/run_on_os_login_command_unittest.cc
index 56b0fdb5..b83db0d0 100644
--- a/chrome/browser/web_applications/commands/run_on_os_login_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/run_on_os_login_command_unittest.cc
@@ -127,8 +127,8 @@
   WebAppProvider* provider() { return provider_; }
 
  private:
-  raw_ptr<FakeOsIntegrationManager> os_integration_manager_;
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeOsIntegrationManager, DanglingUntriaged> os_integration_manager_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/chrome/browser/web_applications/commands/sub_app_install_command_unittest.cc b/chrome/browser/web_applications/commands/sub_app_install_command_unittest.cc
index 6394958..62703f0 100644
--- a/chrome/browser/web_applications/commands/sub_app_install_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/sub_app_install_command_unittest.cc
@@ -133,7 +133,7 @@
   const GURL parent_url_{"http://www.foo.bar/web_apps/basic.html"};
   const GURL sub_app_url_{"http://www.foo.bar/web_apps/standalone/basic.html"};
 
-  raw_ptr<TestWebAppUrlLoader> command_manager_url_loader_;
+  raw_ptr<TestWebAppUrlLoader, DanglingUntriaged> command_manager_url_loader_;
 };
 
 TEST_F(SubAppInstallCommandTest, InstallSingleAppSuccess) {
diff --git a/chrome/browser/web_applications/commands/update_file_handler_command_unittest.cc b/chrome/browser/web_applications/commands/update_file_handler_command_unittest.cc
index 7f69e69..44ac29f 100644
--- a/chrome/browser/web_applications/commands/update_file_handler_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/update_file_handler_command_unittest.cc
@@ -63,7 +63,7 @@
   WebAppProvider* provider() { return provider_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/chrome/browser/web_applications/commands/web_app_uninstall_command_unittest.cc b/chrome/browser/web_applications/commands/web_app_uninstall_command_unittest.cc
index e59b4f8..04fc5f8 100644
--- a/chrome/browser/web_applications/commands/web_app_uninstall_command_unittest.cc
+++ b/chrome/browser/web_applications/commands/web_app_uninstall_command_unittest.cc
@@ -70,7 +70,7 @@
 
   WebAppProvider* provider() { return WebAppProvider::GetForTest(profile()); }
 
-  raw_ptr<testing::StrictMock<MockOsIntegrationManager>>
+  raw_ptr<testing::StrictMock<MockOsIntegrationManager>, DanglingUntriaged>
       os_integration_manager_;
   scoped_refptr<testing::StrictMock<MockFileUtilsWrapper>> file_utils_wrapper_;
   base::HistogramTester histogram_tester_;
diff --git a/chrome/browser/web_applications/extensions/externally_managed_app_install_task_unittest.cc b/chrome/browser/web_applications/extensions/externally_managed_app_install_task_unittest.cc
index df77281..9d623609 100644
--- a/chrome/browser/web_applications/extensions/externally_managed_app_install_task_unittest.cc
+++ b/chrome/browser/web_applications/extensions/externally_managed_app_install_task_unittest.cc
@@ -380,12 +380,13 @@
 
  private:
   std::unique_ptr<TestWebAppUrlLoader> url_loader_;
-  raw_ptr<WebAppCommandScheduler> command_scheduler_ = nullptr;
-  raw_ptr<WebAppRegistrar> registrar_ = nullptr;
-  raw_ptr<FakeDataRetriever> data_retriever_ = nullptr;
-  raw_ptr<TestExternallyManagedAppInstallFinalizer> install_finalizer_ =
+  raw_ptr<WebAppCommandScheduler, DanglingUntriaged> command_scheduler_ =
       nullptr;
-  raw_ptr<FakeWebAppUiManager> ui_manager_ = nullptr;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> registrar_ = nullptr;
+  raw_ptr<FakeDataRetriever, DanglingUntriaged> data_retriever_ = nullptr;
+  raw_ptr<TestExternallyManagedAppInstallFinalizer, DanglingUntriaged>
+      install_finalizer_ = nullptr;
+  raw_ptr<FakeWebAppUiManager, DanglingUntriaged> ui_manager_ = nullptr;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/chrome/browser/web_applications/extensions/web_app_uninstall_and_replace_job_unittest.cc b/chrome/browser/web_applications/extensions/web_app_uninstall_and_replace_job_unittest.cc
index 1e7a895..3e2c6119 100644
--- a/chrome/browser/web_applications/extensions/web_app_uninstall_and_replace_job_unittest.cc
+++ b/chrome/browser/web_applications/extensions/web_app_uninstall_and_replace_job_unittest.cc
@@ -107,7 +107,7 @@
   TestShortcutManager* shortcut_manager() { return shortcut_manager_; }
 
  private:
-  raw_ptr<TestShortcutManager> shortcut_manager_;
+  raw_ptr<TestShortcutManager, DanglingUntriaged> shortcut_manager_;
 };
 
 // `WebAppUninstallAndReplaceJob` uses `AppServiceProxy` to do uninstall, app
diff --git a/chrome/browser/web_applications/externally_managed_app_manager.h b/chrome/browser/web_applications/externally_managed_app_manager.h
index b1d63d3..b255333 100644
--- a/chrome/browser/web_applications/externally_managed_app_manager.h
+++ b/chrome/browser/web_applications/externally_managed_app_manager.h
@@ -256,7 +256,7 @@
   base::OnceClosure registrations_complete_callback_;
 
   raw_ptr<WebAppUiManager, DanglingUntriaged> ui_manager_ = nullptr;
-  raw_ptr<WebAppInstallFinalizer> finalizer_ = nullptr;
+  raw_ptr<WebAppInstallFinalizer, DanglingUntriaged> finalizer_ = nullptr;
   raw_ptr<WebAppCommandScheduler, DanglingUntriaged> command_scheduler_ =
       nullptr;
 
diff --git a/chrome/browser/web_applications/externally_managed_app_manager_impl_unittest.cc b/chrome/browser/web_applications/externally_managed_app_manager_impl_unittest.cc
index 3a43b11f..388dfb3 100644
--- a/chrome/browser/web_applications/externally_managed_app_manager_impl_unittest.cc
+++ b/chrome/browser/web_applications/externally_managed_app_manager_impl_unittest.cc
@@ -611,9 +611,10 @@
   WebAppCommandScheduler& command_scheduler() { return provider().scheduler(); }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
-  raw_ptr<FakeInstallFinalizer> install_finalizer_;
-  raw_ptr<TestExternallyManagedAppManager> externally_managed_app_manager_impl_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
+  raw_ptr<FakeInstallFinalizer, DanglingUntriaged> install_finalizer_;
+  raw_ptr<TestExternallyManagedAppManager, DanglingUntriaged>
+      externally_managed_app_manager_impl_;
 
   TestExternallyManagedAppInstallTaskManager test_install_task_manager_;
   base::test::ScopedFeatureList scoped_feature_list_;
diff --git a/chrome/browser/web_applications/externally_managed_app_manager_unittest.cc b/chrome/browser/web_applications/externally_managed_app_manager_unittest.cc
index b8a316ad16..bffe4d4 100644
--- a/chrome/browser/web_applications/externally_managed_app_manager_unittest.cc
+++ b/chrome/browser/web_applications/externally_managed_app_manager_unittest.cc
@@ -198,7 +198,7 @@
   int deduped_install_count_ = 0;
   int deduped_uninstall_count_ = 0;
 
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
 
   std::unique_ptr<ExternallyInstalledWebAppPrefs>
       externally_installed_app_prefs_;
diff --git a/chrome/browser/web_applications/isolated_web_apps/isolated_web_app_url_loader_factory_unittest.cc b/chrome/browser/web_applications/isolated_web_apps/isolated_web_app_url_loader_factory_unittest.cc
index 84a50e7..da46d73 100644
--- a/chrome/browser/web_applications/isolated_web_apps/isolated_web_app_url_loader_factory_unittest.cc
+++ b/chrome/browser/web_applications/isolated_web_apps/isolated_web_app_url_loader_factory_unittest.cc
@@ -256,7 +256,7 @@
   bool enable_dev_mode_feature_flag_;
   base::test::ScopedFeatureList scoped_feature_list_;
 
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<ScopedUrlHandler> url_handler_;
 
   data_decoder::test::InProcessDataDecoder in_process_data_decoder_;
diff --git a/chrome/browser/web_applications/os_integration/file_handling_sub_manager.h b/chrome/browser/web_applications/os_integration/file_handling_sub_manager.h
index ec531df..ffa1e17a3 100644
--- a/chrome/browser/web_applications/os_integration/file_handling_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/file_handling_sub_manager.h
@@ -54,8 +54,8 @@
                 base::OnceClosure callback);
 
   const base::FilePath profile_path_;
-  const raw_ref<WebAppRegistrar> registrar_;
-  const raw_ref<WebAppSyncBridge> sync_bridge_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
+  const raw_ref<WebAppSyncBridge, DanglingUntriaged> sync_bridge_;
 
   base::WeakPtrFactory<FileHandlingSubManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/file_handling_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/file_handling_sub_manager_unittest.cc
index 1b5bdb5..43d3178 100644
--- a/chrome/browser/web_applications/os_integration/file_handling_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/file_handling_sub_manager_unittest.cc
@@ -124,7 +124,7 @@
     }
   }
 
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
diff --git a/chrome/browser/web_applications/os_integration/os_integration_manager.h b/chrome/browser/web_applications/os_integration/os_integration_manager.h
index ebd5711..fd34c990 100644
--- a/chrome/browser/web_applications/os_integration/os_integration_manager.h
+++ b/chrome/browser/web_applications/os_integration/os_integration_manager.h
@@ -365,9 +365,9 @@
       base::OnceClosure update_finished_callback);
 
   const raw_ptr<Profile> profile_;
-  raw_ptr<WebAppRegistrar> registrar_ = nullptr;
-  raw_ptr<WebAppUiManager> ui_manager_ = nullptr;
-  raw_ptr<WebAppSyncBridge> sync_bridge_ = nullptr;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> registrar_ = nullptr;
+  raw_ptr<WebAppUiManager, DanglingUntriaged> ui_manager_ = nullptr;
+  raw_ptr<WebAppSyncBridge, DanglingUntriaged> sync_bridge_ = nullptr;
 
   std::unique_ptr<WebAppShortcutManager> shortcut_manager_;
   std::unique_ptr<WebAppFileHandlerManager> file_handler_manager_;
diff --git a/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager.h b/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager.h
index bfc03f7..b4fe9e5 100644
--- a/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager.h
@@ -35,7 +35,7 @@
 
  private:
   const base::FilePath profile_path_;
-  const raw_ref<WebAppRegistrar> registrar_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
 
   base::WeakPtrFactory<ProtocolHandlingSubManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager_unittest.cc
index cb7d1a0..99e77485 100644
--- a/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/protocol_handling_sub_manager_unittest.cc
@@ -118,7 +118,7 @@
   WebAppProvider& provider() { return *provider_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
 };
diff --git a/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager.h b/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager.h
index a8669a5..e17e0c0 100644
--- a/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager.h
@@ -63,9 +63,9 @@
       std::unique_ptr<ShortcutInfo> shortcut_info);
 
   const raw_ref<Profile> profile_;
-  const raw_ref<WebAppRegistrar> registrar_;
-  const raw_ref<WebAppSyncBridge> sync_bridge_;
-  const raw_ref<WebAppIconManager> icon_manager_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
+  const raw_ref<WebAppSyncBridge, DanglingUntriaged> sync_bridge_;
+  const raw_ref<WebAppIconManager, DanglingUntriaged> icon_manager_;
 
   base::WeakPtrFactory<RunOnOsLoginSubManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager_unittest.cc
index 0da213e..9c1cc7e4 100644
--- a/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/run_on_os_login_sub_manager_unittest.cc
@@ -113,7 +113,7 @@
   WebAppRegistrar& registrar() { return provider().registrar_unsafe(); }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
 };
diff --git a/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager.h b/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager.h
index 1469fda..c8e95ab 100644
--- a/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager.h
@@ -57,8 +57,8 @@
       ShortcutsMenuIconBitmaps shortcut_menu_icon_bitmaps);
 
   const base::FilePath profile_path_;
-  const raw_ref<WebAppIconManager> icon_manager_;
-  const raw_ref<WebAppRegistrar> registrar_;
+  const raw_ref<WebAppIconManager, DanglingUntriaged> icon_manager_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
 
   base::WeakPtrFactory<ShortcutMenuHandlingSubManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager_unittest.cc
index 2cceac6e..d0331c0 100644
--- a/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/shortcut_menu_handling_sub_manager_unittest.cc
@@ -183,7 +183,7 @@
   WebAppProvider& provider() { return *provider_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
 };
diff --git a/chrome/browser/web_applications/os_integration/shortcut_sub_manager.h b/chrome/browser/web_applications/os_integration/shortcut_sub_manager.h
index 6a3e2a06..b4d4a0d 100644
--- a/chrome/browser/web_applications/os_integration/shortcut_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/shortcut_sub_manager.h
@@ -62,8 +62,8 @@
                              base::flat_map<SquareSizePx, base::Time> time_map);
 
   const raw_ref<Profile> profile_;
-  const raw_ref<WebAppIconManager> icon_manager_;
-  const raw_ref<WebAppRegistrar> registrar_;
+  const raw_ref<WebAppIconManager, DanglingUntriaged> icon_manager_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
 
   base::WeakPtrFactory<ShortcutSubManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/shortcut_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/shortcut_sub_manager_unittest.cc
index e629890..69751ce 100644
--- a/chrome/browser/web_applications/os_integration/shortcut_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/shortcut_sub_manager_unittest.cc
@@ -114,7 +114,7 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
 };
diff --git a/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager.h b/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager.h
index 0473d54..bfa819fe 100644
--- a/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager.h
+++ b/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager.h
@@ -44,7 +44,7 @@
  private:
   void CompleteUnregistration(const AppId& app_id);
   const base::FilePath profile_path_;
-  const raw_ref<WebAppRegistrar> registrar_;
+  const raw_ref<WebAppRegistrar, DanglingUntriaged> registrar_;
   base::WeakPtrFactory<UninstallationViaOsSettingsSubManager> weak_factory_{
       this};
 };
diff --git a/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager_unittest.cc b/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager_unittest.cc
index 57447cf7..7ef92380 100644
--- a/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/uninstallation_via_os_settings_sub_manager_unittest.cc
@@ -120,7 +120,7 @@
   WebAppProvider& provider() { return *provider_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   base::test::ScopedFeatureList scoped_feature_list_;
   std::unique_ptr<OsIntegrationTestOverrideImpl::BlockingRegistration>
       test_override_;
diff --git a/chrome/browser/web_applications/os_integration/url_handler_manager.h b/chrome/browser/web_applications/os_integration/url_handler_manager.h
index 37f5159..13b31ed0 100644
--- a/chrome/browser/web_applications/os_integration/url_handler_manager.h
+++ b/chrome/browser/web_applications/os_integration/url_handler_manager.h
@@ -55,7 +55,7 @@
 
  private:
   const raw_ptr<Profile> profile_;
-  raw_ptr<WebAppRegistrar> registrar_;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> registrar_;
   std::unique_ptr<WebAppOriginAssociationManager> association_manager_;
 };
 
diff --git a/chrome/browser/web_applications/os_integration/web_app_file_handler_manager.h b/chrome/browser/web_applications/os_integration/web_app_file_handler_manager.h
index 380221df..1c2c1d3 100644
--- a/chrome/browser/web_applications/os_integration/web_app_file_handler_manager.h
+++ b/chrome/browser/web_applications/os_integration/web_app_file_handler_manager.h
@@ -92,8 +92,8 @@
 
   static bool disable_automatic_file_handler_cleanup_for_testing_;
 
-  [[maybe_unused]] const raw_ptr<Profile> profile_;
-  raw_ptr<WebAppSyncBridge> sync_bridge_;
+  [[maybe_unused]] const raw_ptr<Profile, DanglingUntriaged> profile_;
+  raw_ptr<WebAppSyncBridge, DanglingUntriaged> sync_bridge_;
 
   base::WeakPtrFactory<WebAppFileHandlerManager> weak_ptr_factory_{this};
 };
diff --git a/chrome/browser/web_applications/os_integration/web_app_file_handler_manager_unittest.cc b/chrome/browser/web_applications/os_integration/web_app_file_handler_manager_unittest.cc
index 74489b4..4fd01c3 100644
--- a/chrome/browser/web_applications/os_integration/web_app_file_handler_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/web_app_file_handler_manager_unittest.cc
@@ -191,7 +191,7 @@
   const AppId& app_id() const { return app_id_; }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
   std::unique_ptr<FakeWebAppFileHandlerManager> file_handler_manager_;
 
   AppId app_id_;
diff --git a/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager.h b/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager.h
index 0399b8fe..1d140dd 100644
--- a/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager.h
+++ b/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager.h
@@ -67,8 +67,8 @@
                                     ResultCallback callback);
 
  private:
-  raw_ptr<WebAppRegistrar> app_registrar_;
-  const raw_ptr<Profile> profile_;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> app_registrar_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 };
 
 }  // namespace web_app
diff --git a/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager_unittest.cc b/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager_unittest.cc
index c17ded0..bd2b5e92 100644
--- a/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager_unittest.cc
+++ b/chrome/browser/web_applications/os_integration/web_app_protocol_handler_manager_unittest.cc
@@ -74,7 +74,7 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
 
   std::unique_ptr<WebAppProtocolHandlerManager> protocol_handler_manager_;
 };
diff --git a/chrome/browser/web_applications/os_integration/web_app_shortcut_manager.h b/chrome/browser/web_applications/os_integration/web_app_shortcut_manager.h
index 6692cbb..0077ca2 100644
--- a/chrome/browser/web_applications/os_integration/web_app_shortcut_manager.h
+++ b/chrome/browser/web_applications/os_integration/web_app_shortcut_manager.h
@@ -173,8 +173,8 @@
 
   const raw_ptr<Profile> profile_;
 
-  raw_ptr<WebAppRegistrar> registrar_ = nullptr;
-  raw_ptr<WebAppIconManager> icon_manager_ = nullptr;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> registrar_ = nullptr;
+  raw_ptr<WebAppIconManager, DanglingUntriaged> icon_manager_ = nullptr;
   raw_ptr<WebAppFileHandlerManager, DanglingUntriaged> file_handler_manager_ =
       nullptr;
   raw_ptr<WebAppProtocolHandlerManager, DanglingUntriaged>
diff --git a/chrome/browser/web_applications/policy/web_app_policy_manager.h b/chrome/browser/web_applications/policy/web_app_policy_manager.h
index 15571a6..ec577e0 100644
--- a/chrome/browser/web_applications/policy/web_app_policy_manager.h
+++ b/chrome/browser/web_applications/policy/web_app_policy_manager.h
@@ -180,10 +180,10 @@
 
   // Used to install, uninstall, and update apps. Should outlive this class
   // (owned by WebAppProvider).
-  raw_ptr<ExternallyManagedAppManager> externally_managed_app_manager_ =
-      nullptr;
-  raw_ptr<WebAppRegistrar> app_registrar_ = nullptr;
-  raw_ptr<WebAppSyncBridge> sync_bridge_ = nullptr;
+  raw_ptr<ExternallyManagedAppManager, DanglingUntriaged>
+      externally_managed_app_manager_ = nullptr;
+  raw_ptr<WebAppRegistrar, DanglingUntriaged> app_registrar_ = nullptr;
+  raw_ptr<WebAppSyncBridge, DanglingUntriaged> sync_bridge_ = nullptr;
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   raw_ptr<const ash::SystemWebAppDelegateMap, DanglingUntriaged>
       system_web_apps_delegate_map_ = nullptr;
diff --git a/chrome/browser/web_applications/policy/web_app_policy_manager_unittest.cc b/chrome/browser/web_applications/policy/web_app_policy_manager_unittest.cc
index 711bc7e..73da318 100644
--- a/chrome/browser/web_applications/policy/web_app_policy_manager_unittest.cc
+++ b/chrome/browser/web_applications/policy/web_app_policy_manager_unittest.cc
@@ -535,9 +535,10 @@
   webapps::InstallResultCode install_result_code_ =
       webapps::InstallResultCode::kSuccessNewInstall;
 
-  raw_ptr<FakeWebAppProvider> provider_;
-  raw_ptr<FakeExternallyManagedAppManager> fake_externally_managed_app_manager_;
-  raw_ptr<WebAppPolicyManager> web_app_policy_manager_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
+  raw_ptr<FakeExternallyManagedAppManager, DanglingUntriaged>
+      fake_externally_managed_app_manager_;
+  raw_ptr<WebAppPolicyManager, DanglingUntriaged> web_app_policy_manager_;
 
 #if BUILDFLAG(IS_CHROMEOS_ASH)
   std::unique_ptr<ash::TestSystemWebAppManager> test_system_app_manager_;
diff --git a/chrome/browser/web_applications/preinstalled_web_app_manager_unittest.cc b/chrome/browser/web_applications/preinstalled_web_app_manager_unittest.cc
index 99a2326..22248008 100644
--- a/chrome/browser/web_applications/preinstalled_web_app_manager_unittest.cc
+++ b/chrome/browser/web_applications/preinstalled_web_app_manager_unittest.cc
@@ -266,8 +266,8 @@
 
   base::test::ScopedCommandLine command_line_;
 #endif
-  raw_ptr<FakeWebAppProvider> provider_ = nullptr;
-  raw_ptr<Profile> profile_ = nullptr;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_ = nullptr;
+  raw_ptr<Profile, DanglingUntriaged> profile_ = nullptr;
 
   base::test::ScopedFeatureList scoped_feature_list_;
   // To support context of browser threads.
diff --git a/chrome/browser/web_applications/test/web_app_test.h b/chrome/browser/web_applications/test/web_app_test.h
index ab6f046a..540dd462d 100644
--- a/chrome/browser/web_applications/test/web_app_test.h
+++ b/chrome/browser/web_applications/test/web_app_test.h
@@ -32,7 +32,7 @@
  private:
   TestingProfileManager testing_profile_manager_{
       TestingBrowserProcess::GetGlobal()};
-  raw_ptr<TestingProfile> profile_;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_;
 };
 
 #endif  // CHROME_BROWSER_WEB_APPLICATIONS_TEST_WEB_APP_TEST_H_
diff --git a/chrome/browser/web_applications/web_app_command_manager_unittest.cc b/chrome/browser/web_applications/web_app_command_manager_unittest.cc
index 475c6dde..03d4ed7 100644
--- a/chrome/browser/web_applications/web_app_command_manager_unittest.cc
+++ b/chrome/browser/web_applications/web_app_command_manager_unittest.cc
@@ -187,7 +187,7 @@
   TestWebAppUrlLoader* url_loader() const { return url_loader_.get(); }
 
  private:
-  raw_ptr<TestWebAppUrlLoader> url_loader_;
+  raw_ptr<TestWebAppUrlLoader, DanglingUntriaged> url_loader_;
 };
 
 TEST_F(WebAppCommandManagerTest, SimpleCommand) {
diff --git a/chrome/browser/web_applications/web_app_command_scheduler_unittest.cc b/chrome/browser/web_applications/web_app_command_scheduler_unittest.cc
index 8b44a66..a7643ac7 100644
--- a/chrome/browser/web_applications/web_app_command_scheduler_unittest.cc
+++ b/chrome/browser/web_applications/web_app_command_scheduler_unittest.cc
@@ -33,7 +33,7 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
 };
 
 TEST_F(WebAppCommandSchedulerTest, FetchManifestAndInstall) {
diff --git a/chrome/browser/web_applications/web_app_database.h b/chrome/browser/web_applications/web_app_database.h
index aa9a343..9f574bc 100644
--- a/chrome/browser/web_applications/web_app_database.h
+++ b/chrome/browser/web_applications/web_app_database.h
@@ -84,7 +84,8 @@
                      const absl::optional<syncer::ModelError>& error);
 
   std::unique_ptr<syncer::ModelTypeStore> store_;
-  const raw_ptr<AbstractWebAppDatabaseFactory> database_factory_;
+  const raw_ptr<AbstractWebAppDatabaseFactory, DanglingUntriaged>
+      database_factory_;
   ReportErrorCallback error_callback_;
 
   // Database is opened if store is created and all data read.
diff --git a/chrome/browser/web_applications/web_app_database_unittest.cc b/chrome/browser/web_applications/web_app_database_unittest.cc
index d6243fc7..a9a58c9 100644
--- a/chrome/browser/web_applications/web_app_database_unittest.cc
+++ b/chrome/browser/web_applications/web_app_database_unittest.cc
@@ -158,9 +158,9 @@
   }
 
  private:
-  raw_ptr<WebAppSyncBridge> sync_bridge_;
-  raw_ptr<FakeWebAppDatabaseFactory> database_factory_;
-  raw_ptr<FakeWebAppProvider> provider_;
+  raw_ptr<WebAppSyncBridge, DanglingUntriaged> sync_bridge_;
+  raw_ptr<FakeWebAppDatabaseFactory, DanglingUntriaged> database_factory_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
 
   testing::NiceMock<syncer::MockModelTypeChangeProcessor> mock_processor_;
 };
diff --git a/chrome/browser/web_applications/web_app_icon_manager_unittest.cc b/chrome/browser/web_applications/web_app_icon_manager_unittest.cc
index 00cc8de..33ede89 100644
--- a/chrome/browser/web_applications/web_app_icon_manager_unittest.cc
+++ b/chrome/browser/web_applications/web_app_icon_manager_unittest.cc
@@ -278,9 +278,9 @@
   }
 
  private:
-  raw_ptr<FakeWebAppProvider> provider_;
-  raw_ptr<WebAppInstallManager> install_manager_;
-  raw_ptr<WebAppIconManager> icon_manager_;
+  raw_ptr<FakeWebAppProvider, DanglingUntriaged> provider_;
+  raw_ptr<WebAppInstallManager, DanglingUntriaged> install_manager_;
+  raw_ptr<WebAppIconManager, DanglingUntriaged> icon_manager_;
 
   scoped_refptr<TestFileUtils> file_utils_;
 };
diff --git a/chrome/browser/web_applications/web_app_install_manager.h b/chrome/browser/web_applications/web_app_install_manager.h
index 92c0d4c..5919237 100644
--- a/chrome/browser/web_applications/web_app_install_manager.h
+++ b/chrome/browser/web_applications/web_app_install_manager.h
@@ -64,7 +64,7 @@
 
   void LogErrorObject(base::Value::Dict object);
 
-  const raw_ptr<Profile> profile_;
+  const raw_ptr<Profile, DanglingUntriaged> profile_;
 
   std::unique_ptr<ErrorLog> error_log_;
   bool error_log_updated_ = false;
diff --git a/chrome/browser/webid/federated_identity_api_permission_context_unittest.cc b/chrome/browser/webid/federated_identity_api_permission_context_unittest.cc
index 6c086fd1..e03c99c 100644
--- a/chrome/browser/webid/federated_identity_api_permission_context_unittest.cc
+++ b/chrome/browser/webid/federated_identity_api_permission_context_unittest.cc
@@ -42,8 +42,8 @@
   Profile* profile() { return &profile_; }
 
  protected:
-  raw_ptr<FederatedIdentityApiPermissionContext> context_;
-  raw_ptr<HostContentSettingsMap> host_content_settings_map_;
+  raw_ptr<FederatedIdentityApiPermissionContext, DanglingUntriaged> context_;
+  raw_ptr<HostContentSettingsMap, DanglingUntriaged> host_content_settings_map_;
 
   ContentSetting GetContentSetting(const GURL& rp_url) {
     return host_content_settings_map_->GetContentSetting(
diff --git a/chrome/browser/webid/federated_identity_auto_reauthn_permission_context_unittest.cc b/chrome/browser/webid/federated_identity_auto_reauthn_permission_context_unittest.cc
index 83526cb..095216b7 100644
--- a/chrome/browser/webid/federated_identity_auto_reauthn_permission_context_unittest.cc
+++ b/chrome/browser/webid/federated_identity_auto_reauthn_permission_context_unittest.cc
@@ -39,8 +39,9 @@
   Profile* profile() { return profile_.get(); }
 
  protected:
-  raw_ptr<FederatedIdentityAutoReauthnPermissionContext> context_;
-  raw_ptr<HostContentSettingsMap> host_content_settings_map_;
+  raw_ptr<FederatedIdentityAutoReauthnPermissionContext, DanglingUntriaged>
+      context_;
+  raw_ptr<HostContentSettingsMap, DanglingUntriaged> host_content_settings_map_;
 
   ContentSetting GetContentSetting(const GURL& rp_url) {
     return host_content_settings_map_->GetContentSetting(
diff --git a/chrome/common/google_url_loader_throttle_unittest.cc b/chrome/common/google_url_loader_throttle_unittest.cc
index 023e73df..7eacab8 100644
--- a/chrome/common/google_url_loader_throttle_unittest.cc
+++ b/chrome/common/google_url_loader_throttle_unittest.cc
@@ -153,8 +153,8 @@
   base::test::ScopedFeatureList feature_list_{
       switches::kEnableBoundSessionCrendentials};
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<FakeBoundSessionRequestThrottledListener> bound_session_listener_ =
-      nullptr;
+  raw_ptr<FakeBoundSessionRequestThrottledListener, DanglingUntriaged>
+      bound_session_listener_ = nullptr;
   std::unique_ptr<GoogleURLLoaderThrottle> throttle_;
   std::unique_ptr<MockThrottleDelegate> delegate_;
   chrome::mojom::BoundSessionParamsPtr bound_session_params_;
diff --git a/chrome/services/system_signals/linux/linux_system_signals_service_unittest.cc b/chrome/services/system_signals/linux/linux_system_signals_service_unittest.cc
index 6b32ef7..459cb150 100644
--- a/chrome/services/system_signals/linux/linux_system_signals_service_unittest.cc
+++ b/chrome/services/system_signals/linux/linux_system_signals_service_unittest.cc
@@ -40,7 +40,7 @@
   }
 
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockFileSystemService> file_system_service_;
+  raw_ptr<MockFileSystemService, DanglingUntriaged> file_system_service_;
   std::unique_ptr<LinuxSystemSignalsService> linux_system_signals_service_;
 };
 
diff --git a/chrome/test/base/browser_with_test_window_test.h b/chrome/test/base/browser_with_test_window_test.h
index 0c1d6894..e679404 100644
--- a/chrome/test/base/browser_with_test_window_test.h
+++ b/chrome/test/base/browser_with_test_window_test.h
@@ -240,7 +240,7 @@
   std::unique_ptr<ash::KioskAppManager> kiosk_app_manager_;
 #endif
 
-  raw_ptr<TestingProfile> profile_ = nullptr;
+  raw_ptr<TestingProfile, DanglingUntriaged> profile_ = nullptr;
 
   // test_url_loader_factory_ is declared before profile_manager_
   // to guarantee it outlives any profiles that might use it.
diff --git a/chrome/test/interaction/interaction_test_util_browser_unittest.cc b/chrome/test/interaction/interaction_test_util_browser_unittest.cc
index 1cae98d..564d87f 100644
--- a/chrome/test/interaction/interaction_test_util_browser_unittest.cc
+++ b/chrome/test/interaction/interaction_test_util_browser_unittest.cc
@@ -73,11 +73,11 @@
   std::unique_ptr<views::LayoutProvider> layout_provider_;
   InteractionTestUtilBrowser test_util_;
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<views::View> contents_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> contents_ = nullptr;
 };
 
 TEST_F(InteractionTestUtilBrowserTest, PressHoverButton) {
-  raw_ptr<HoverButton> hover_button;
+  raw_ptr<HoverButton, DanglingUntriaged> hover_button;
   auto pressed = base::BindLambdaForTesting([&]() {
     hover_button->parent()->RemoveChildViewT(hover_button);
     hover_button = nullptr;
diff --git a/components/autofill/content/browser/content_autofill_driver_factory_unittest.cc b/components/autofill/content/browser/content_autofill_driver_factory_unittest.cc
index 68b83df..5e84960 100644
--- a/components/autofill/content/browser/content_autofill_driver_factory_unittest.cc
+++ b/components/autofill/content/browser/content_autofill_driver_factory_unittest.cc
@@ -216,7 +216,7 @@
   content::RenderFrameHost* child_rfh() { return child_rfh_; }
 
  private:
-  raw_ptr<content::RenderFrameHost> child_rfh_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> child_rfh_ = nullptr;
 };
 
 TEST_F(ContentAutofillDriverFactoryTest_WithTwoFrames, TwoDrivers) {
diff --git a/components/autofill/content/browser/content_autofill_router.h b/components/autofill/content/browser/content_autofill_router.h
index 7dd6e6a8..8e931c7 100644
--- a/components/autofill/content/browser/content_autofill_router.h
+++ b/components/autofill/content/browser/content_autofill_router.h
@@ -371,7 +371,8 @@
 
   // The driver that triggered the last AskForValuesToFill() call.
   // Update with SetLastQueriedSource().
-  raw_ptr<ContentAutofillDriver> last_queried_source_ = nullptr;
+  raw_ptr<ContentAutofillDriver, DanglingUntriaged> last_queried_source_ =
+      nullptr;
   // The driver to which the last AskForValuesToFill() call was routed.
   // Update with SetLastQueriedTarget().
   raw_ptr<ContentAutofillDriver> last_queried_target_ = nullptr;
diff --git a/components/autofill/content/browser/form_forest.h b/components/autofill/content/browser/form_forest.h
index 3c1a3b6..48da74b 100644
--- a/components/autofill/content/browser/form_forest.h
+++ b/components/autofill/content/browser/form_forest.h
@@ -214,7 +214,7 @@
     // empty FrameData is created when a parent form can Resolve() a child's
     // LocalFrameToken and no form from that child frame has been seen yet.
     // However, if |child_forms| is non-empty, then driver is non-null.
-    raw_ptr<AutofillDriver> driver = nullptr;
+    raw_ptr<AutofillDriver, DanglingUntriaged> driver = nullptr;
   };
 
   FormForest();
diff --git a/components/autofill/core/browser/autofill_external_delegate.h b/components/autofill/core/browser/autofill_external_delegate.h
index 3798f420..0bbdb91 100644
--- a/components/autofill/core/browser/autofill_external_delegate.h
+++ b/components/autofill/core/browser/autofill_external_delegate.h
@@ -164,7 +164,7 @@
 
   // Provides driver-level context to the shared code of the component. Must
   // outlive this object.
-  const raw_ptr<AutofillDriver> driver_;  // weak
+  const raw_ptr<AutofillDriver, DanglingUntriaged> driver_;  // weak
 
   // The current form and field selected by Autofill.
   FormData query_form_;
diff --git a/components/autofill/core/browser/autofill_manager.h b/components/autofill/core/browser/autofill_manager.h
index 0dad162..58522a4 100644
--- a/components/autofill/core/browser/autofill_manager.h
+++ b/components/autofill/core/browser/autofill_manager.h
@@ -530,7 +530,7 @@
 
   // Provides driver-level context to the shared code of the component. Must
   // outlive this object.
-  const raw_ptr<AutofillDriver> driver_;
+  const raw_ptr<AutofillDriver, DanglingUntriaged> driver_;
 
   // Do not access this directly. Instead, please use client() or
   // unsafe_client(). These functions check (or explicitly don't check) that the
diff --git a/components/autofill/core/browser/browser_autofill_manager_unittest.cc b/components/autofill/core/browser/browser_autofill_manager_unittest.cc
index a84a796f..bcb0cdd 100644
--- a/components/autofill/core/browser/browser_autofill_manager_unittest.cc
+++ b/components/autofill/core/browser/browser_autofill_manager_unittest.cc
@@ -1154,13 +1154,14 @@
   NiceMock<MockAutofillClient> autofill_client_;
   std::unique_ptr<MockAutofillDriver> autofill_driver_;
   std::unique_ptr<TestBrowserAutofillManager> browser_autofill_manager_;
-  raw_ptr<TestAutofillExternalDelegate> external_delegate_;
+  raw_ptr<TestAutofillExternalDelegate, DanglingUntriaged> external_delegate_;
   scoped_refptr<AutofillWebDataService> database_;
   raw_ptr<MockAutofillDownloadManager> download_manager_;
   std::unique_ptr<MockAutocompleteHistoryManager> autocomplete_history_manager_;
   std::unique_ptr<MockIBANManager> iban_manager_;
   std::unique_ptr<MockMerchantPromoCodeManager> merchant_promo_code_manager_;
-  raw_ptr<MockSingleFieldFormFillRouter> single_field_form_fill_router_;
+  raw_ptr<MockSingleFieldFormFillRouter, DanglingUntriaged>
+      single_field_form_fill_router_;
   raw_ptr<TestStrikeDatabase> strike_database_;
   raw_ptr<payments::TestPaymentsClient> payments_client_;
   raw_ptr<TestFormDataImporter> test_form_data_importer_;
diff --git a/components/autofill/core/browser/form_data_importer_unittest.cc b/components/autofill/core/browser/form_data_importer_unittest.cc
index ced34883..a3c578c 100644
--- a/components/autofill/core/browser/form_data_importer_unittest.cc
+++ b/components/autofill/core/browser/form_data_importer_unittest.cc
@@ -773,7 +773,8 @@
   // as the destructor of the clients FormDataImporter relies on it.
   std::unique_ptr<PersonalDataManager> personal_data_manager_;
   std::unique_ptr<TestAutofillClient> autofill_client_;
-  raw_ptr<MockVirtualCardEnrollmentManager> virtual_card_enrollment_manager_;
+  raw_ptr<MockVirtualCardEnrollmentManager, DanglingUntriaged>
+      virtual_card_enrollment_manager_;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
diff --git a/components/autofill/core/browser/metrics/autofill_metrics_test_base.h b/components/autofill/core/browser/metrics/autofill_metrics_test_base.h
index 577fe9e..21175cf 100644
--- a/components/autofill/core/browser/metrics/autofill_metrics_test_base.h
+++ b/components/autofill/core/browser/metrics/autofill_metrics_test_base.h
@@ -219,10 +219,10 @@
   base::test::TaskEnvironment task_environment_;
   test::AutofillUnitTestEnvironment autofill_test_environment_;
   std::unique_ptr<MockAutofillClient> autofill_client_;
-  raw_ptr<ukm::TestUkmRecorder> test_ukm_recorder_;
+  raw_ptr<ukm::TestUkmRecorder, DanglingUntriaged> test_ukm_recorder_;
   syncer::TestSyncService sync_service_;
   std::unique_ptr<TestAutofillDriver> autofill_driver_;
-  raw_ptr<AutofillExternalDelegate> external_delegate_;
+  raw_ptr<AutofillExternalDelegate, DanglingUntriaged> external_delegate_;
 
  private:
   void CreateTestAutofillProfiles();
diff --git a/components/autofill/core/browser/payments/credit_card_access_manager.h b/components/autofill/core/browser/payments/credit_card_access_manager.h
index 2a72f8c7..4d6ba86 100644
--- a/components/autofill/core/browser/payments/credit_card_access_manager.h
+++ b/components/autofill/core/browser/payments/credit_card_access_manager.h
@@ -432,7 +432,7 @@
   bool is_authentication_in_progress_ = false;
 
   // The associated autofill driver. Weak reference.
-  const raw_ptr<AutofillDriver> driver_;
+  const raw_ptr<AutofillDriver, DanglingUntriaged> driver_;
 
   // The associated autofill client. Weak reference.
   const raw_ptr<AutofillClient> client_;
diff --git a/components/autofill/core/browser/payments/credit_card_access_manager_unittest.cc b/components/autofill/core/browser/payments/credit_card_access_manager_unittest.cc
index fb479731..df624b53 100644
--- a/components/autofill/core/browser/payments/credit_card_access_manager_unittest.cc
+++ b/components/autofill/core/browser/payments/credit_card_access_manager_unittest.cc
@@ -560,7 +560,7 @@
   base::test::TaskEnvironment task_environment_;
   variations::ScopedVariationsIdsProvider scoped_variations_ids_provider_{
       variations::VariationsIdsProvider::Mode::kUseSignedInState};
-  raw_ptr<payments::TestPaymentsClient> payments_client_;
+  raw_ptr<payments::TestPaymentsClient, DanglingUntriaged> payments_client_;
   TestAutofillClient autofill_client_;
   std::unique_ptr<TestAutofillDriver> autofill_driver_;
   scoped_refptr<AutofillWebDataService> database_;
diff --git a/components/autofill/core/browser/payments/credit_card_fido_authenticator.h b/components/autofill/core/browser/payments/credit_card_fido_authenticator.h
index c95a5c0..32abcdd 100644
--- a/components/autofill/core/browser/payments/credit_card_fido_authenticator.h
+++ b/components/autofill/core/browser/payments/credit_card_fido_authenticator.h
@@ -260,7 +260,7 @@
   std::string card_authorization_token_;
 
   // The associated autofill driver. Weak reference.
-  const raw_ptr<AutofillDriver> autofill_driver_;
+  const raw_ptr<AutofillDriver, DanglingUntriaged> autofill_driver_;
 
   // The associated autofill client. Weak reference.
   const raw_ptr<AutofillClient> autofill_client_;
diff --git a/components/autofill/core/browser/payments/full_card_request.h b/components/autofill/core/browser/payments/full_card_request.h
index 8e4e6b8..9ea447da 100644
--- a/components/autofill/core/browser/payments/full_card_request.h
+++ b/components/autofill/core/browser/payments/full_card_request.h
@@ -241,7 +241,7 @@
   const raw_ptr<payments::PaymentsClient> payments_client_;
 
   // Responsible for updating the server card on disk after it's been unmasked.
-  const raw_ptr<PersonalDataManager> personal_data_manager_;
+  const raw_ptr<PersonalDataManager, DanglingUntriaged> personal_data_manager_;
 
   // Receiver of the full PAN and CVC.
   base::WeakPtr<ResultDelegate> result_delegate_;
diff --git a/components/autofill/core/browser/payments/payments_client.h b/components/autofill/core/browser/payments/payments_client.h
index b063beb..186e58d 100644
--- a/components/autofill/core/browser/payments/payments_client.h
+++ b/components/autofill/core/browser/payments/payments_client.h
@@ -568,7 +568,7 @@
   const raw_ptr<signin::IdentityManager> identity_manager_;
 
   // Provided in constructor; not owned by PaymentsClient.
-  const raw_ptr<AccountInfoGetter> account_info_getter_;
+  const raw_ptr<AccountInfoGetter, DanglingUntriaged> account_info_getter_;
 
   // The current request.
   std::unique_ptr<PaymentsRequest> request_;
diff --git a/components/autofill/core/browser/payments/payments_client_unittest.cc b/components/autofill/core/browser/payments/payments_client_unittest.cc
index 433bd2f..a8e59cb 100644
--- a/components/autofill/core/browser/payments/payments_client_unittest.cc
+++ b/components/autofill/core/browser/payments/payments_client_unittest.cc
@@ -537,7 +537,8 @@
 
   AutofillClient::PaymentsRpcResult result_ =
       AutofillClient::PaymentsRpcResult::kNone;
-  raw_ptr<payments::PaymentsClient::UnmaskDetails> unmask_details_;
+  raw_ptr<payments::PaymentsClient::UnmaskDetails, DanglingUntriaged>
+      unmask_details_;
 
   // Server ID of a saved card via credit card upload save.
   PaymentsClient::UploadCardResponseDetails upload_card_response_details_;
@@ -547,8 +548,8 @@
   PaymentsClient::GetDetailsForEnrollmentResponseDetails
       get_details_for_enrollment_response_fields_;
   // The UnmaskResponseDetails retrieved from an UnmaskRequest.  Includes PAN.
-  raw_ptr<PaymentsClient::UnmaskResponseDetails> unmask_response_details_ =
-      nullptr;
+  raw_ptr<PaymentsClient::UnmaskResponseDetails, DanglingUntriaged>
+      unmask_response_details_ = nullptr;
   // The legal message returned from a GetDetails upload save preflight call.
   std::unique_ptr<base::Value::Dict> legal_message_;
   // A list of card BIN ranges supported by Google Payments, returned from a
diff --git a/components/autofill/core/browser/payments/test_payments_client.h b/components/autofill/core/browser/payments/test_payments_client.h
index bfd749a9..5976e82 100644
--- a/components/autofill/core/browser/payments/test_payments_client.h
+++ b/components/autofill/core/browser/payments/test_payments_client.h
@@ -169,7 +169,8 @@
   // useful to control whether or not GetUnmaskDetails() is responded to.
   bool should_return_unmask_details_ = true;
   payments::PaymentsClient::UnmaskDetails unmask_details_;
-  raw_ptr<const payments::PaymentsClient::UnmaskRequestDetails>
+  raw_ptr<const payments::PaymentsClient::UnmaskRequestDetails,
+          DanglingUntriaged>
       unmask_request_ = nullptr;
   payments::PaymentsClient::SelectChallengeOptionRequestDetails
       select_challenge_option_request_;
diff --git a/components/autofill/core/browser/payments/virtual_card_enrollment_manager.h b/components/autofill/core/browser/payments/virtual_card_enrollment_manager.h
index bb20bb6..658b941 100644
--- a/components/autofill/core/browser/payments/virtual_card_enrollment_manager.h
+++ b/components/autofill/core/browser/payments/virtual_card_enrollment_manager.h
@@ -42,7 +42,7 @@
   // GetDetailsForEnrollResponse. The |card_art_image| object is owned by
   // PersonalDataManager if it is the card art, or by the resource bundle if it
   // is the network icon.
-  raw_ptr<const gfx::ImageSkia> card_art_image = nullptr;
+  raw_ptr<const gfx::ImageSkia, DanglingUntriaged> card_art_image = nullptr;
   // The Google-specific legal messages that the user must accept before
   // opting-in to virtual card enrollment.
   LegalMessageLines google_legal_message;
@@ -350,11 +350,11 @@
   // The associated personal data manager, used to save and load personal data
   // to/from the web database. Weak reference. May be nullptr, which indicates
   // OTR.
-  raw_ptr<PersonalDataManager> personal_data_manager_;
+  raw_ptr<PersonalDataManager, DanglingUntriaged> personal_data_manager_;
 
   // The associated |payments_client_| that is used for all requests to the
   // server.
-  raw_ptr<payments::PaymentsClient> payments_client_;
+  raw_ptr<payments::PaymentsClient, DanglingUntriaged> payments_client_;
 
   // The database that is used to count instrument_id-keyed strikes to suppress
   // prompting users to enroll in virtual cards.
diff --git a/components/autofill/core/browser/personal_data_manager_cleaner.h b/components/autofill/core/browser/personal_data_manager_cleaner.h
index 89fa54ec..10931b80 100644
--- a/components/autofill/core/browser/personal_data_manager_cleaner.h
+++ b/components/autofill/core/browser/personal_data_manager_cleaner.h
@@ -140,7 +140,8 @@
 
   // The personal data manager, used to load and update the personal data
   // from/to the web database.
-  const raw_ptr<PersonalDataManager> personal_data_manager_ = nullptr;
+  const raw_ptr<PersonalDataManager, DanglingUntriaged> personal_data_manager_ =
+      nullptr;
 
   // The PrefService used by this instance.
   const raw_ptr<PrefService> pref_service_ = nullptr;
diff --git a/components/autofill/core/browser/strike_databases/strike_database_integrator_base.h b/components/autofill/core/browser/strike_databases/strike_database_integrator_base.h
index 1a393e34..f07fbdd8 100644
--- a/components/autofill/core/browser/strike_databases/strike_database_integrator_base.h
+++ b/components/autofill/core/browser/strike_databases/strike_database_integrator_base.h
@@ -130,7 +130,7 @@
   friend class StrikeDatabaseTest;
   friend class StrikeDatabaseTester;
 
-  raw_ptr<StrikeDatabaseBase> strike_database_;
+  raw_ptr<StrikeDatabaseBase, DanglingUntriaged> strike_database_;
 
   // For projects in which strikes don't have unique identifiers, the
   // id suffix is set to |kSharedId|. This makes sure that projects requiring
diff --git a/components/autofill/core/browser/ui/payments/card_unmask_prompt_controller_impl_unittest.cc b/components/autofill/core/browser/ui/payments/card_unmask_prompt_controller_impl_unittest.cc
index 5cf667b..1ce4937 100644
--- a/components/autofill/core/browser/ui/payments/card_unmask_prompt_controller_impl_unittest.cc
+++ b/components/autofill/core/browser/ui/payments/card_unmask_prompt_controller_impl_unittest.cc
@@ -75,7 +75,7 @@
                              bool allow_retry) override {}
 
  private:
-  raw_ptr<CardUnmaskPromptController> controller_;
+  raw_ptr<CardUnmaskPromptController, DanglingUntriaged> controller_;
 };
 
 class TestCardUnmaskPromptController : public CardUnmaskPromptControllerImpl {
diff --git a/components/blocked_content/popup_blocker_tab_helper_unittest.cc b/components/blocked_content/popup_blocker_tab_helper_unittest.cc
index f1cde8ec..574cff1 100644
--- a/components/blocked_content/popup_blocker_tab_helper_unittest.cc
+++ b/components/blocked_content/popup_blocker_tab_helper_unittest.cc
@@ -82,7 +82,7 @@
 
  private:
   base::test::ScopedFeatureList feature_list_;
-  raw_ptr<PopupBlockerTabHelper> helper_ = nullptr;
+  raw_ptr<PopupBlockerTabHelper, DanglingUntriaged> helper_ = nullptr;
   sync_preferences::TestingPrefServiceSyncable pref_service_;
   scoped_refptr<HostContentSettingsMap> settings_map_;
 };
diff --git a/components/blocked_content/safe_browsing_triggered_popup_blocker_unittest.cc b/components/blocked_content/safe_browsing_triggered_popup_blocker_unittest.cc
index 6e539f7f..e2effff 100644
--- a/components/blocked_content/safe_browsing_triggered_popup_blocker_unittest.cc
+++ b/components/blocked_content/safe_browsing_triggered_popup_blocker_unittest.cc
@@ -154,7 +154,8 @@
   variations::ScopedVariationsIdsProvider scoped_variations_ids_provider_{
       variations::VariationsIdsProvider::Mode::kUseSignedInState};
   scoped_refptr<FakeSafeBrowsingDatabaseManager> fake_safe_browsing_database_;
-  raw_ptr<SafeBrowsingTriggeredPopupBlocker> popup_blocker_ = nullptr;
+  raw_ptr<SafeBrowsingTriggeredPopupBlocker, DanglingUntriaged> popup_blocker_ =
+      nullptr;
   std::unique_ptr<content::TestNavigationThrottleInserter> throttle_inserter_;
   sync_preferences::TestingPrefServiceSyncable pref_service_;
   scoped_refptr<HostContentSettingsMap> settings_map_;
diff --git a/components/blocked_content/subresource_filter_abusive_unittest.cc b/components/blocked_content/subresource_filter_abusive_unittest.cc
index c5e672a..6104c411 100644
--- a/components/blocked_content/subresource_filter_abusive_unittest.cc
+++ b/components/blocked_content/subresource_filter_abusive_unittest.cc
@@ -117,8 +117,8 @@
   MetadataLevel bas_level_ = METADATA_NONE;
   bool enable_adblock_on_abusive_sites_ = false;
 
-  raw_ptr<blocked_content::SafeBrowsingTriggeredPopupBlocker> popup_blocker_ =
-      nullptr;
+  raw_ptr<blocked_content::SafeBrowsingTriggeredPopupBlocker, DanglingUntriaged>
+      popup_blocker_ = nullptr;
 
  private:
   base::test::ScopedFeatureList scoped_features_;
diff --git a/components/blocklist/opt_out_blocklist/opt_out_blocklist_unittest.cc b/components/blocklist/opt_out_blocklist/opt_out_blocklist_unittest.cc
index 67ce326..a66a35a5 100644
--- a/components/blocklist/opt_out_blocklist/opt_out_blocklist_unittest.cc
+++ b/components/blocklist/opt_out_blocklist/opt_out_blocklist_unittest.cc
@@ -287,7 +287,7 @@
   TestOptOutBlocklistDelegate blocklist_delegate_;
 
   base::SimpleTestClock test_clock_;
-  raw_ptr<TestOptOutStore> opt_out_store_;
+  raw_ptr<TestOptOutStore, DanglingUntriaged> opt_out_store_;
   base::Time start_;
 
   std::unique_ptr<TestOptOutBlocklist> block_list_;
diff --git a/components/bookmarks/browser/bookmark_model_unittest.cc b/components/bookmarks/browser/bookmark_model_unittest.cc
index da40766..d320cd9 100644
--- a/components/bookmarks/browser/bookmark_model_unittest.cc
+++ b/components/bookmarks/browser/bookmark_model_unittest.cc
@@ -157,7 +157,7 @@
 
  private:
   raw_ptr<BookmarkModel> model_ = nullptr;
-  raw_ptr<const BookmarkNode> parent_ = nullptr;
+  raw_ptr<const BookmarkNode, DanglingUntriaged> parent_ = nullptr;
   size_t index_ = 0;
   std::unique_ptr<BookmarkNode> last_removed_node_;
 };
diff --git a/components/bookmarks/test/test_bookmark_client.h b/components/bookmarks/test/test_bookmark_client.h
index 07be238..e2bfcd6 100644
--- a/components/bookmarks/test/test_bookmark_client.h
+++ b/components/bookmarks/test/test_bookmark_client.h
@@ -99,7 +99,8 @@
   // managed_node_ exists only until GetLoadManagedNodeCallback gets called, but
   // unowned_managed_node_ stays around after that.
   std::unique_ptr<BookmarkPermanentNode> managed_node_;
-  raw_ptr<BookmarkPermanentNode> unowned_managed_node_ = nullptr;
+  raw_ptr<BookmarkPermanentNode, DanglingUntriaged> unowned_managed_node_ =
+      nullptr;
 
   base::CancelableTaskTracker::TaskId next_task_id_ = 1;
   std::map<GURL, std::list<favicon_base::FaviconImageCallback>>
diff --git a/components/browsing_data/content/browsing_data_model.h b/components/browsing_data/content/browsing_data_model.h
index f26befd..def3cbe 100644
--- a/components/browsing_data/content/browsing_data_model.h
+++ b/components/browsing_data/content/browsing_data_model.h
@@ -260,7 +260,7 @@
   // context, but broken out to allow easier injection in tests.
   // TODO(crbug.com/1271155): More backends to come, they should all be broken
   // out from the browser context at the appropriate level.
-  raw_ptr<content::StoragePartition> storage_partition_;
+  raw_ptr<content::StoragePartition, DanglingUntriaged> storage_partition_;
 
   // Used to handle quota managed data on IO thread.
   scoped_refptr<BrowsingDataQuotaHelper> quota_helper_;
diff --git a/components/captive_portal/content/captive_portal_tab_helper_unittest.cc b/components/captive_portal/content/captive_portal_tab_helper_unittest.cc
index 7c204785..bf4147be 100644
--- a/components/captive_portal/content/captive_portal_tab_helper_unittest.cc
+++ b/components/captive_portal/content/captive_portal_tab_helper_unittest.cc
@@ -193,7 +193,8 @@
   std::unique_ptr<CaptivePortalTabHelper> tab_helper_;
 
   // Owned by |tab_helper_|.
-  raw_ptr<testing::StrictMock<MockCaptivePortalTabReloader>> mock_reloader_;
+  raw_ptr<testing::StrictMock<MockCaptivePortalTabReloader>, DanglingUntriaged>
+      mock_reloader_;
 };
 
 TEST_F(CaptivePortalTabHelperTest, HttpSuccess) {
diff --git a/components/commerce/core/webui/shopping_list_handler.h b/components/commerce/core/webui/shopping_list_handler.h
index cdf7c380..7764adf 100644
--- a/components/commerce/core/webui/shopping_list_handler.h
+++ b/components/commerce/core/webui/shopping_list_handler.h
@@ -111,7 +111,7 @@
   // hosts this will be shut down prior to the rest of the browser.
   raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
   raw_ptr<ShoppingService> shopping_service_;
-  raw_ptr<PrefService> pref_service_;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_;
   raw_ptr<feature_engagement::Tracker> tracker_;
   const std::string locale_;
   std::unique_ptr<Delegate> delegate_;
diff --git a/components/consent_auditor/consent_auditor_impl_unittest.cc b/components/consent_auditor/consent_auditor_impl_unittest.cc
index 87c8148f..37d9c15f 100644
--- a/components/consent_auditor/consent_auditor_impl_unittest.cc
+++ b/components/consent_auditor/consent_auditor_impl_unittest.cc
@@ -100,7 +100,8 @@
  private:
   // Test helpers.
   base::SimpleTestClock test_clock_;
-  raw_ptr<FakeConsentSyncBridge> consent_sync_bridge_ = nullptr;
+  raw_ptr<FakeConsentSyncBridge, DanglingUntriaged> consent_sync_bridge_ =
+      nullptr;
 
   // Test object to be tested.
   std::unique_ptr<ConsentAuditorImpl> consent_auditor_;
diff --git a/components/constrained_window/constrained_window_views_unittest.cc b/components/constrained_window/constrained_window_views_unittest.cc
index 88ee3d9f..603588e 100644
--- a/components/constrained_window/constrained_window_views_unittest.cc
+++ b/components/constrained_window/constrained_window_views_unittest.cc
@@ -132,7 +132,7 @@
   std::unique_ptr<views::DialogDelegate> delegate_;
   raw_ptr<views::View> contents_ = nullptr;
   std::unique_ptr<web_modal::TestWebContentsModalDialogHost> dialog_host_;
-  raw_ptr<Widget> dialog_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> dialog_ = nullptr;
 };
 
 }  // namespace
diff --git a/components/content_capture/browser/content_capture_receiver_test.cc b/components/content_capture/browser/content_capture_receiver_test.cc
index b52a80db..5b76b58a 100644
--- a/components/content_capture/browser/content_capture_receiver_test.cc
+++ b/components/content_capture/browser/content_capture_receiver_test.cc
@@ -122,8 +122,8 @@
   // The sender for child frame.
   std::unique_ptr<FakeContentCaptureSender> child_frame_sender_;
 
-  raw_ptr<content::RenderFrameHost> main_frame_ = nullptr;
-  raw_ptr<content::RenderFrameHost> child_frame_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> main_frame_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> child_frame_ = nullptr;
 
   // Expected removed Ids.
   std::vector<int64_t> expected_removed_ids_{2};
diff --git a/components/content_settings/core/browser/content_settings_info.h b/components/content_settings/core/browser/content_settings_info.h
index 323766d..0eeffd4c 100644
--- a/components/content_settings/core/browser/content_settings_info.h
+++ b/components/content_settings/core/browser/content_settings_info.h
@@ -70,7 +70,7 @@
   OriginRestriction origin_restriction() const { return origin_restriction_; }
 
  private:
-  raw_ptr<const WebsiteSettingsInfo> website_settings_info_;
+  raw_ptr<const WebsiteSettingsInfo, DanglingUntriaged> website_settings_info_;
   const std::vector<std::string> allowlisted_schemes_;
   const std::set<ContentSetting> valid_settings_;
   const IncognitoBehavior incognito_behavior_;
diff --git a/components/content_settings/core/browser/host_content_settings_map.h b/components/content_settings/core/browser/host_content_settings_map.h
index 75bea0fa..43f9365 100644
--- a/components/content_settings/core/browser/host_content_settings_map.h
+++ b/components/content_settings/core/browser/host_content_settings_map.h
@@ -463,7 +463,8 @@
       user_modifiable_providers_;
 
   // content_settings_providers_[PREF_PROVIDER] but specialized.
-  raw_ptr<content_settings::PrefProvider> pref_provider_ = nullptr;
+  raw_ptr<content_settings::PrefProvider, DanglingUntriaged> pref_provider_ =
+      nullptr;
 
   base::ThreadChecker thread_checker_;
 
diff --git a/components/contextual_search/core/browser/contextual_search_delegate_impl.h b/components/contextual_search/core/browser/contextual_search_delegate_impl.h
index 96a6373..fc4387b 100644
--- a/components/contextual_search/core/browser/contextual_search_delegate_impl.h
+++ b/components/contextual_search/core/browser/contextual_search_delegate_impl.h
@@ -169,7 +169,7 @@
   scoped_refptr<network::SharedURLLoaderFactory> url_loader_factory_;
 
   // Holds the TemplateURLService. Not owned.
-  raw_ptr<TemplateURLService> template_url_service_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
 
   // The field trial helper instance, always set up by the constructor.
   std::unique_ptr<ContextualSearchFieldTrial> field_trial_;
diff --git a/components/cronet/cronet_context.h b/components/cronet/cronet_context.h
index 2f725af..2532621 100644
--- a/components/cronet/cronet_context.h
+++ b/components/cronet/cronet_context.h
@@ -384,7 +384,7 @@
 
   // |network_tasks_| is owned by |this|. It is created off the network thread,
   // but invoked and destroyed on network thread.
-  raw_ptr<NetworkTasks> network_tasks_;
+  raw_ptr<NetworkTasks, DanglingUntriaged> network_tasks_;
 
   // Network thread is destroyed from client thread.
   std::unique_ptr<base::Thread> network_thread_;
diff --git a/components/cronet/cronet_upload_data_stream.h b/components/cronet/cronet_upload_data_stream.h
index cb77803..4a4e5aa 100644
--- a/components/cronet/cronet_upload_data_stream.h
+++ b/components/cronet/cronet_upload_data_stream.h
@@ -103,7 +103,7 @@
   // Set to false when a read starts, true when a rewind completes.
   bool at_front_of_stream_;
 
-  const raw_ptr<Delegate> delegate_;
+  const raw_ptr<Delegate, DanglingUntriaged> delegate_;
 
   // Vends pointers on the network thread, though created on a client thread.
   base::WeakPtrFactory<CronetUploadDataStream> weak_factory_{this};
diff --git a/components/cronet/native/upload_data_sink.cc b/components/cronet/native/upload_data_sink.cc
index dba0bda..1c785ae 100644
--- a/components/cronet/native/upload_data_sink.cc
+++ b/components/cronet/native/upload_data_sink.cc
@@ -53,7 +53,8 @@
 
   // The upload data sink that is owned by url request and always accessed on
   // the client thread. It always outlives |this| callback.
-  const raw_ptr<Cronet_UploadDataSinkImpl> upload_data_sink_ = nullptr;
+  const raw_ptr<Cronet_UploadDataSinkImpl, DanglingUntriaged>
+      upload_data_sink_ = nullptr;
 
   // Executor for provider callback, used, but not owned, by |this|. Always
   // outlives |this| callback.
diff --git a/components/cronet/native/url_request.cc b/components/cronet/native/url_request.cc
index e58f9fd..94e00789 100644
--- a/components/cronet/native/url_request.cc
+++ b/components/cronet/native/url_request.cc
@@ -304,7 +304,8 @@
       LOCKS_EXCLUDED(url_request_->lock_) override;
 
   // The UrlRequest which owns context that owns the callback.
-  const raw_ptr<Cronet_UrlRequestImpl> url_request_ = nullptr;
+  const raw_ptr<Cronet_UrlRequestImpl, DanglingUntriaged> url_request_ =
+      nullptr;
 
   // URL chain contains the URL currently being requested, and
   // all URLs previously requested. New URLs are added before
diff --git a/components/cronet/native/url_request.h b/components/cronet/native/url_request.h
index a2c52fea..6e08bd94 100644
--- a/components/cronet/native/url_request.h
+++ b/components/cronet/native/url_request.h
@@ -112,9 +112,11 @@
   base::Lock lock_;
   // NetworkTask object lives on the network thread. Owned by |request_|.
   // Outlives this.
-  raw_ptr<NetworkTasks> network_tasks_ GUARDED_BY(lock_) = nullptr;
+  raw_ptr<NetworkTasks, DanglingUntriaged> network_tasks_ GUARDED_BY(lock_) =
+      nullptr;
   // Cronet URLRequest used for this operation.
-  raw_ptr<CronetURLRequest> request_ GUARDED_BY(lock_) = nullptr;
+  raw_ptr<CronetURLRequest, DanglingUntriaged> request_ GUARDED_BY(lock_) =
+      nullptr;
   bool started_ GUARDED_BY(lock_) = false;
   bool waiting_on_redirect_ GUARDED_BY(lock_) = false;
   bool waiting_on_read_ GUARDED_BY(lock_) = false;
diff --git a/components/custom_handlers/protocol_handler_registry_unittest.cc b/components/custom_handlers/protocol_handler_registry_unittest.cc
index 028f21de..07e5e3e50 100644
--- a/components/custom_handlers/protocol_handler_registry_unittest.cc
+++ b/components/custom_handlers/protocol_handler_registry_unittest.cc
@@ -219,7 +219,7 @@
 
   std::unique_ptr<content::TestBrowserContext> browser_context_;
   sync_preferences::TestingPrefServiceSyncable pref_service_;
-  raw_ptr<TestProtocolHandlerRegistryDelegate>
+  raw_ptr<TestProtocolHandlerRegistryDelegate, DanglingUntriaged>
       delegate_;  // Registry assumes ownership of delegate_.
   std::unique_ptr<ProtocolHandlerRegistry> registry_;
   ProtocolHandler test_protocol_handler_;
diff --git a/components/device_signals/core/browser/signals_aggregator_impl_unittest.cc b/components/device_signals/core/browser/signals_aggregator_impl_unittest.cc
index 3057785..0a9539a 100644
--- a/components/device_signals/core/browser/signals_aggregator_impl_unittest.cc
+++ b/components/device_signals/core/browser/signals_aggregator_impl_unittest.cc
@@ -81,8 +81,8 @@
   }
 
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockSignalsCollector> av_signal_collector_;
-  raw_ptr<MockSignalsCollector> hotfix_signal_collector_;
+  raw_ptr<MockSignalsCollector, DanglingUntriaged> av_signal_collector_;
+  raw_ptr<MockSignalsCollector, DanglingUntriaged> hotfix_signal_collector_;
   testing::StrictMock<MockUserPermissionService> mock_permission_service_;
   std::unique_ptr<SignalsAggregatorImpl> aggregator_;
 
diff --git a/components/device_signals/core/browser/user_permission_service_impl_unittest.cc b/components/device_signals/core/browser/user_permission_service_impl_unittest.cc
index 978ecc2e..3a8b371 100644
--- a/components/device_signals/core/browser/user_permission_service_impl_unittest.cc
+++ b/components/device_signals/core/browser/user_permission_service_impl_unittest.cc
@@ -93,7 +93,8 @@
 
   TestManagementService management_service_;
   absl::optional<ScopedManagementServiceOverrideForTesting> scoped_override_;
-  raw_ptr<testing::StrictMock<MockUserDelegate>> mock_user_delegate_;
+  raw_ptr<testing::StrictMock<MockUserDelegate>, DanglingUntriaged>
+      mock_user_delegate_;
   TestingPrefServiceSimple test_prefs_;
 
   std::unique_ptr<UserPermissionServiceImpl> permission_service_;
diff --git a/components/domain_reliability/monitor_unittest.cc b/components/domain_reliability/monitor_unittest.cc
index f5e41203..735c7ca 100644
--- a/components/domain_reliability/monitor_unittest.cc
+++ b/components/domain_reliability/monitor_unittest.cc
@@ -126,7 +126,7 @@
   base::test::SingleThreadTaskEnvironment task_environment_{
       base::test::TaskEnvironment::MainThreadType::IO};
   std::unique_ptr<net::URLRequestContext> url_request_context_;
-  raw_ptr<MockTime> time_;
+  raw_ptr<MockTime, DanglingUntriaged> time_;
   DomainReliabilityMonitor monitor_;
   DomainReliabilityMonitor::RequestInfo request_;
 };
diff --git a/components/domain_reliability/uploader_unittest.cc b/components/domain_reliability/uploader_unittest.cc
index 041192d9..f143065 100644
--- a/components/domain_reliability/uploader_unittest.cc
+++ b/components/domain_reliability/uploader_unittest.cc
@@ -220,7 +220,7 @@
   net::IsolationInfo expected_isolation_info_;
 
   std::unique_ptr<net::URLRequestContext> url_request_context_;
-  raw_ptr<UploadInterceptor> interceptor_;
+  raw_ptr<UploadInterceptor, DanglingUntriaged> interceptor_;
   MockTime time_;
   std::unique_ptr<DomainReliabilityUploader> uploader_;
 };
diff --git a/components/download/database/download_db_impl_unittest.cc b/components/download/database/download_db_impl_unittest.cc
index 4b2d084..8b47320d 100644
--- a/components/download/database/download_db_impl_unittest.cc
+++ b/components/download/database/download_db_impl_unittest.cc
@@ -90,7 +90,9 @@
 
  protected:
   std::map<std::string, download_pb::DownloadDBEntry> db_entries_;
-  raw_ptr<leveldb_proto::test::FakeDB<download_pb::DownloadDBEntry>> db_;
+  raw_ptr<leveldb_proto::test::FakeDB<download_pb::DownloadDBEntry>,
+          DanglingUntriaged>
+      db_;
   std::unique_ptr<DownloadDBImpl> download_db_;
   bool init_success_;
 };
diff --git a/components/download/internal/background_service/controller_impl.h b/components/download/internal/background_service/controller_impl.h
index b205cbc..ba6379f1 100644
--- a/components/download/internal/background_service/controller_impl.h
+++ b/components/download/internal/background_service/controller_impl.h
@@ -264,7 +264,7 @@
   std::unique_ptr<Configuration> config_;
   ServiceConfigImpl service_config_;
   std::unique_ptr<Logger> logger_;
-  raw_ptr<LogSink> log_sink_;
+  raw_ptr<LogSink, DanglingUntriaged> log_sink_;
   std::unique_ptr<ClientSet> clients_;
   std::unique_ptr<DownloadDriver> driver_;
   std::unique_ptr<Model> model_;
diff --git a/components/download/internal/background_service/download_store_unittest.cc b/components/download/internal/background_service/download_store_unittest.cc
index eba8c17e..db69019 100644
--- a/components/download/internal/background_service/download_store_unittest.cc
+++ b/components/download/internal/background_service/download_store_unittest.cc
@@ -71,7 +71,7 @@
 
  protected:
   std::map<std::string, protodb::Entry> db_entries_;
-  raw_ptr<leveldb_proto::test::FakeDB<protodb::Entry>> db_;
+  raw_ptr<leveldb_proto::test::FakeDB<protodb::Entry>, DanglingUntriaged> db_;
   std::unique_ptr<DownloadStore> store_;
   absl::optional<bool> hard_recover_result_;
 };
diff --git a/components/download/internal/background_service/in_memory_download.h b/components/download/internal/background_service/in_memory_download.h
index 43d4d99..48178185 100644
--- a/components/download/internal/background_service/in_memory_download.h
+++ b/components/download/internal/background_service/in_memory_download.h
@@ -250,7 +250,7 @@
   // Used to access blob storage context.
   scoped_refptr<base::SingleThreadTaskRunner> io_task_runner_;
 
-  raw_ptr<Delegate> delegate_;
+  raw_ptr<Delegate, DanglingUntriaged> delegate_;
 
   // Data downloaded from network, should be moved to avoid extra copy.
   std::string data_;
diff --git a/components/download/internal/background_service/in_memory_download_driver_unittest.cc b/components/download/internal/background_service/in_memory_download_driver_unittest.cc
index f660391..d92653f 100644
--- a/components/download/internal/background_service/in_memory_download_driver_unittest.cc
+++ b/components/download/internal/background_service/in_memory_download_driver_unittest.cc
@@ -109,7 +109,7 @@
   TestInMemoryDownload* last_created_download() { return download_; }
 
  private:
-  raw_ptr<TestInMemoryDownload> download_ = nullptr;
+  raw_ptr<TestInMemoryDownload, DanglingUntriaged> download_ = nullptr;
 };
 
 class InMemoryDownloadDriverTest : public testing::Test {
@@ -155,7 +155,7 @@
  private:
   testing::NiceMock<MockDriverClient> driver_client_;
   std::unique_ptr<InMemoryDownloadDriver> driver_;
-  raw_ptr<TestInMemoryDownloadFactory> factory_;
+  raw_ptr<TestInMemoryDownloadFactory, DanglingUntriaged> factory_;
 };
 
 // Verifies in memory download success and remove API.
diff --git a/components/download/internal/background_service/init_aware_background_download_service_unittest.cc b/components/download/internal/background_service/init_aware_background_download_service_unittest.cc
index 859f8b9..5f7e17f 100644
--- a/components/download/internal/background_service/init_aware_background_download_service_unittest.cc
+++ b/components/download/internal/background_service/init_aware_background_download_service_unittest.cc
@@ -45,7 +45,7 @@
   }
 
  protected:
-  raw_ptr<test::MockController> controller_;
+  raw_ptr<test::MockController, DanglingUntriaged> controller_;
   std::unique_ptr<InitAwareBackgroundDownloadService> service_;
   scoped_refptr<base::TestSimpleTaskRunner> task_runner_;
   base::SingleThreadTaskRunner::CurrentDefaultHandle current_default_handle_;
diff --git a/components/download/internal/background_service/model_impl_unittest.cc b/components/download/internal/background_service/model_impl_unittest.cc
index cf49873..93e1d239 100644
--- a/components/download/internal/background_service/model_impl_unittest.cc
+++ b/components/download/internal/background_service/model_impl_unittest.cc
@@ -45,7 +45,7 @@
 
  protected:
   test::MockModelClient client_;
-  raw_ptr<test::TestStore> store_;
+  raw_ptr<test::TestStore, DanglingUntriaged> store_;
   std::unique_ptr<ModelImpl> model_;
 };
 
diff --git a/components/download/internal/background_service/scheduler/device_status_listener_unittest.cc b/components/download/internal/background_service/scheduler/device_status_listener_unittest.cc
index 3ba010ea..b3e1e5a7 100644
--- a/components/download/internal/background_service/scheduler/device_status_listener_unittest.cc
+++ b/components/download/internal/background_service/scheduler/device_status_listener_unittest.cc
@@ -153,7 +153,7 @@
   // Needed for network change notifier and power monitor.
   base::test::SingleThreadTaskEnvironment task_environment_;
   base::test::ScopedPowerMonitorTestSource power_source_;
-  raw_ptr<TestBatteryStatusListener> test_battery_listener_;
+  raw_ptr<TestBatteryStatusListener, DanglingUntriaged> test_battery_listener_;
   raw_ptr<network::TestNetworkConnectionTracker>
       test_network_connection_tracker_;
 };
diff --git a/components/download/internal/common/download_db_cache_unittest.cc b/components/download/internal/common/download_db_cache_unittest.cc
index 877af6e..0603a8e 100644
--- a/components/download/internal/common/download_db_cache_unittest.cc
+++ b/components/download/internal/common/download_db_cache_unittest.cc
@@ -110,7 +110,9 @@
 
  protected:
   std::map<std::string, download_pb::DownloadDBEntry> db_entries_;
-  raw_ptr<leveldb_proto::test::FakeDB<download_pb::DownloadDBEntry>> db_;
+  raw_ptr<leveldb_proto::test::FakeDB<download_pb::DownloadDBEntry>,
+          DanglingUntriaged>
+      db_;
   std::unique_ptr<DownloadDBCache> db_cache_;
   scoped_refptr<base::TestMockTimeTaskRunner> task_runner_;
   base::test::TaskEnvironment task_environment_;
diff --git a/components/download/internal/common/parallel_download_utils_unittest.cc b/components/download/internal/common/parallel_download_utils_unittest.cc
index 34d5fbe..4887204 100644
--- a/components/download/internal/common/parallel_download_utils_unittest.cc
+++ b/components/download/internal/common/parallel_download_utils_unittest.cc
@@ -48,7 +48,7 @@
 
  protected:
   // Stream for sending data into the SourceStream.
-  raw_ptr<StrictMock<MockInputStream>> input_stream_;
+  raw_ptr<StrictMock<MockInputStream>, DanglingUntriaged> input_stream_;
 };
 
 TEST_F(ParallelDownloadUtilsTest, FindSlicesToDownload) {
diff --git a/components/download/public/common/auto_resumption_handler_unittest.cc b/components/download/public/common/auto_resumption_handler_unittest.cc
index a94d706..fa2900a 100644
--- a/components/download/public/common/auto_resumption_handler_unittest.cc
+++ b/components/download/public/common/auto_resumption_handler_unittest.cc
@@ -113,7 +113,7 @@
 
   scoped_refptr<base::TestMockTimeTaskRunner> task_runner_;
   base::SingleThreadTaskRunner::CurrentDefaultHandle current_default_handle_;
-  raw_ptr<download::test::MockTaskManager> task_manager_;
+  raw_ptr<download::test::MockTaskManager, DanglingUntriaged> task_manager_;
   std::unique_ptr<AutoResumptionHandler> auto_resumption_handler_;
   base::SimpleTestClock clock_;
 };
diff --git a/components/download/public/task/task_manager_unittest.cc b/components/download/public/task/task_manager_unittest.cc
index aa46d45..ef5fa3b 100644
--- a/components/download/public/task/task_manager_unittest.cc
+++ b/components/download/public/task/task_manager_unittest.cc
@@ -79,7 +79,7 @@
   scoped_refptr<base::TestMockTimeTaskRunner> task_runner_;
   base::SingleThreadTaskRunner::CurrentDefaultHandle current_default_handle_;
 
-  raw_ptr<MockTaskScheduler> task_scheduler_;
+  raw_ptr<MockTaskScheduler, DanglingUntriaged> task_scheduler_;
   std::unique_ptr<TaskManagerImpl> task_manager_;
 };
 
diff --git a/components/enterprise/browser/identifiers/profile_id_service_unittest.cc b/components/enterprise/browser/identifiers/profile_id_service_unittest.cc
index 4b66f15f..0f71dd5b 100644
--- a/components/enterprise/browser/identifiers/profile_id_service_unittest.cc
+++ b/components/enterprise/browser/identifiers/profile_id_service_unittest.cc
@@ -42,7 +42,7 @@
                                                   &profile_prefs_);
   }
 
-  raw_ptr<MockProfileIdDelegate> mock_delegate_ = nullptr;
+  raw_ptr<MockProfileIdDelegate, DanglingUntriaged> mock_delegate_ = nullptr;
   TestingPrefServiceSimple profile_prefs_;
   std::unique_ptr<ProfileIdService> service_;
   base::HistogramTester histogram_tester_;
diff --git a/components/enterprise/browser/reporting/report_scheduler.h b/components/enterprise/browser/reporting/report_scheduler.h
index afcb98f..f218b82 100644
--- a/components/enterprise/browser/reporting/report_scheduler.h
+++ b/components/enterprise/browser/reporting/report_scheduler.h
@@ -180,7 +180,7 @@
   // Policy value watcher
   PrefChangeRegistrar pref_change_registrar_;
 
-  raw_ptr<policy::CloudPolicyClient> cloud_policy_client_;
+  raw_ptr<policy::CloudPolicyClient, DanglingUntriaged> cloud_policy_client_;
 
   base::WallClockTimer request_timer_;
 
diff --git a/components/favicon/core/large_icon_service_impl_unittest.cc b/components/favicon/core/large_icon_service_impl_unittest.cc
index 449ecf8..61b9aa96 100644
--- a/components/favicon/core/large_icon_service_impl_unittest.cc
+++ b/components/favicon/core/large_icon_service_impl_unittest.cc
@@ -123,7 +123,7 @@
   base::test::TaskEnvironment task_environment_;
   ui::test::ScopedSetSupportedResourceScaleFactors
       scoped_set_supported_scale_factors_;
-  raw_ptr<NiceMock<MockImageFetcher>> mock_image_fetcher_;
+  raw_ptr<NiceMock<MockImageFetcher>, DanglingUntriaged> mock_image_fetcher_;
   testing::NiceMock<MockFaviconService> mock_favicon_service_;
   LargeIconServiceImpl large_icon_service_;
   base::HistogramTester histogram_tester_;
diff --git a/components/feature_engagement/internal/persistent_availability_store_unittest.cc b/components/feature_engagement/internal/persistent_availability_store_unittest.cc
index 9650dec..0810b63 100644
--- a/components/feature_engagement/internal/persistent_availability_store_unittest.cc
+++ b/components/feature_engagement/internal/persistent_availability_store_unittest.cc
@@ -92,7 +92,7 @@
   std::map<std::string, Availability> db_availabilities_;
 
   // The database that is in use.
-  raw_ptr<leveldb_proto::test::FakeDB<Availability>> db_;
+  raw_ptr<leveldb_proto::test::FakeDB<Availability>, DanglingUntriaged> db_;
 
   // Constant test data.
   base::FilePath storage_dir_;
diff --git a/components/feed/core/v2/feed_stream.h b/components/feed/core/v2/feed_stream.h
index 131a7fc..aa78fb0 100644
--- a/components/feed/core/v2/feed_stream.h
+++ b/components/feed/core/v2/feed_stream.h
@@ -440,8 +440,9 @@
   raw_ptr<PrefService> profile_prefs_;  // May be null.
   raw_ptr<FeedNetwork> feed_network_;
   raw_ptr<ImageFetcher> image_fetcher_;
-  raw_ptr<FeedStore> store_;
-  raw_ptr<PersistentKeyValueStoreImpl> persistent_key_value_store_;
+  raw_ptr<FeedStore, DanglingUntriaged> store_;
+  raw_ptr<PersistentKeyValueStoreImpl, DanglingUntriaged>
+      persistent_key_value_store_;
   raw_ptr<const WireResponseTranslator> wire_response_translator_;
 
   StreamModel::Context stream_model_context_;
diff --git a/components/feed/core/v2/metrics_reporter.h b/components/feed/core/v2/metrics_reporter.h
index 9a02d87..67ed0a87 100644
--- a/components/feed/core/v2/metrics_reporter.h
+++ b/components/feed/core/v2/metrics_reporter.h
@@ -218,7 +218,7 @@
   StreamStats& ForStream(const StreamType& stream_type);
 
   raw_ptr<PrefService> profile_prefs_;
-  raw_ptr<Delegate> delegate_ = nullptr;
+  raw_ptr<Delegate, DanglingUntriaged> delegate_ = nullptr;
 
   StreamStats for_you_stats_;
   StreamStats web_feed_stats_;
diff --git a/components/feed/core/v2/public/ntp_feed_content_fetcher_unittest.cc b/components/feed/core/v2/public/ntp_feed_content_fetcher_unittest.cc
index 2a5ec2c..4b0e266 100644
--- a/components/feed/core/v2/public/ntp_feed_content_fetcher_unittest.cc
+++ b/components/feed/core/v2/public/ntp_feed_content_fetcher_unittest.cc
@@ -90,7 +90,7 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<NtpFeedContentFetcher> ntp_feed_content_fetcher_;
   signin::IdentityTestEnvironment identity_test_env_;
-  raw_ptr<TestFeedNetwork> feed_network_;
+  raw_ptr<TestFeedNetwork, DanglingUntriaged> feed_network_;
   network::TestURLLoaderFactory test_factory_;
   scoped_refptr<network::SharedURLLoaderFactory> shared_url_loader_factory_;
   TestingPrefServiceSimple profile_prefs_;
@@ -134,4 +134,4 @@
   EXPECT_EQ("http://example.com/0/thumbnail.jpg", article.thumbnail_url);
 }
 
-}  // namespace feed::test
\ No newline at end of file
+}  // namespace feed::test
diff --git a/components/feed/core/v2/surface_updater.h b/components/feed/core/v2/surface_updater.h
index 1ddb20c..a810d6e 100644
--- a/components/feed/core/v2/surface_updater.h
+++ b/components/feed/core/v2/surface_updater.h
@@ -130,7 +130,7 @@
   base::flat_set<ContentRevision> sent_content_;
 
   // Owned by |FeedStream|. Null when the model is not loaded.
-  raw_ptr<StreamModel> model_ = nullptr;
+  raw_ptr<StreamModel, DanglingUntriaged> model_ = nullptr;
 
   LaunchReliabilityLogger launch_reliability_logger_;
   bool load_stream_started_ = false;
diff --git a/components/feed/core/v2/web_feed_subscriptions/web_feed_metadata_model.h b/components/feed/core/v2/web_feed_subscriptions/web_feed_metadata_model.h
index 3116f7d8..56ecf66d 100644
--- a/components/feed/core/v2/web_feed_subscriptions/web_feed_metadata_model.h
+++ b/components/feed/core/v2/web_feed_subscriptions/web_feed_metadata_model.h
@@ -53,7 +53,7 @@
   static WebFeedInFlightChange MakePendingInFlightChange(
       const feedstore::PendingWebFeedOperation& operation);
   Operation* FindOperation(base::StringPiece web_feed_id);
-  raw_ptr<FeedStore> store_;
+  raw_ptr<FeedStore, DanglingUntriaged> store_;
   std::vector<Operation> pending_operations_;
   int next_id_ = 0;
 };
diff --git a/components/feed/core/v2/web_feed_subscriptions/web_feed_subscription_model.h b/components/feed/core/v2/web_feed_subscriptions/web_feed_subscription_model.h
index cca10305..c80b5e1 100644
--- a/components/feed/core/v2/web_feed_subscriptions/web_feed_subscription_model.h
+++ b/components/feed/core/v2/web_feed_subscriptions/web_feed_subscription_model.h
@@ -53,7 +53,7 @@
  private:
   // Each of these are non-null and guaranteed to remain valid for the lifetime
   // of WebFeedSubscriptionModel.
-  raw_ptr<FeedStore> store_;
+  raw_ptr<FeedStore, DanglingUntriaged> store_;
   raw_ptr<WebFeedIndex> index_;
   raw_ptr<WebFeedMetadataModel, DanglingUntriaged> metadata_model_;
   // Owned by WebFeedSubscriptionCoordinator so that memory of recent
diff --git a/components/flags_ui/pref_service_flags_storage.h b/components/flags_ui/pref_service_flags_storage.h
index 59beab0..d0351598 100644
--- a/components/flags_ui/pref_service_flags_storage.h
+++ b/components/flags_ui/pref_service_flags_storage.h
@@ -45,7 +45,7 @@
 #endif  // BUILDFLAG(IS_CHROMEOS_ASH)
 
  private:
-  raw_ptr<PrefService> prefs_;
+  raw_ptr<PrefService, DanglingUntriaged> prefs_;
 };
 
 }  // namespace flags_ui
diff --git a/components/fullscreen_control/fullscreen_control_popup_unittest.cc b/components/fullscreen_control/fullscreen_control_popup_unittest.cc
index fd919a5..a5a72ce6f 100644
--- a/components/fullscreen_control/fullscreen_control_popup_unittest.cc
+++ b/components/fullscreen_control/fullscreen_control_popup_unittest.cc
@@ -65,7 +65,7 @@
 
  private:
   std::unique_ptr<gfx::AnimationTestApi> animation_api_;
-  raw_ptr<views::Widget> parent_widget_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> parent_widget_ = nullptr;
 };
 
 TEST_F(FullscreenControlPopupTest, ShowPopupAnimated) {
diff --git a/components/gcm_driver/gcm_account_tracker_unittest.cc b/components/gcm_driver/gcm_account_tracker_unittest.cc
index fc8b28b..f84370d5 100644
--- a/components/gcm_driver/gcm_account_tracker_unittest.cc
+++ b/components/gcm_driver/gcm_account_tracker_unittest.cc
@@ -103,8 +103,9 @@
   bool connected_;
   std::vector<GCMClient::AccountTokenInfo> accounts_;
   bool update_accounts_called_;
-  raw_ptr<GCMConnectionObserver> last_connection_observer_;
-  raw_ptr<GCMConnectionObserver> removed_connection_observer_;
+  raw_ptr<GCMConnectionObserver, DanglingUntriaged> last_connection_observer_;
+  raw_ptr<GCMConnectionObserver, DanglingUntriaged>
+      removed_connection_observer_;
   net::IPEndPoint ip_endpoint_;
   base::Time last_token_fetch_time_;
 };
diff --git a/components/global_media_controls/public/views/media_item_ui_list_view_unittest.cc b/components/global_media_controls/public/views/media_item_ui_list_view_unittest.cc
index 861d7fd..26cd57ce 100644
--- a/components/global_media_controls/public/views/media_item_ui_list_view_unittest.cc
+++ b/components/global_media_controls/public/views/media_item_ui_list_view_unittest.cc
@@ -62,7 +62,7 @@
 
  private:
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<MediaItemUIListView> list_view_ = nullptr;
+  raw_ptr<MediaItemUIListView, DanglingUntriaged> list_view_ = nullptr;
   std::unique_ptr<media_message_center::test::MockMediaNotificationItem> item_;
 };
 
diff --git a/components/global_media_controls/public/views/media_item_ui_view.h b/components/global_media_controls/public/views/media_item_ui_view.h
index 0456a2f..e1a71fa 100644
--- a/components/global_media_controls/public/views/media_item_ui_view.h
+++ b/components/global_media_controls/public/views/media_item_ui_view.h
@@ -159,7 +159,7 @@
   std::u16string title_;
 
   // The scroll view that is currently holding this item.
-  raw_ptr<views::ScrollView> scroll_view_ = nullptr;
+  raw_ptr<views::ScrollView, DanglingUntriaged> scroll_view_ = nullptr;
 
   // Always "visible" so that it reserves space in the header so that the
   // dismiss button can appear without forcing things to shift.
@@ -173,8 +173,9 @@
   raw_ptr<DismissButton> dismiss_button_ = nullptr;
   raw_ptr<media_message_center::MediaNotificationView> view_ = nullptr;
 
-  raw_ptr<MediaItemUIFooter> footer_view_ = nullptr;
-  raw_ptr<MediaItemUIDeviceSelector> device_selector_view_ = nullptr;
+  raw_ptr<MediaItemUIFooter, DanglingUntriaged> footer_view_ = nullptr;
+  raw_ptr<MediaItemUIDeviceSelector, DanglingUntriaged> device_selector_view_ =
+      nullptr;
 
   SkColor foreground_color_ = kDefaultForegroundColor;
   SkColor foreground_disabled_color_ = kDefaultForegroundColor;
diff --git a/components/global_media_controls/public/views/media_item_ui_view_unittest.cc b/components/global_media_controls/public/views/media_item_ui_view_unittest.cc
index 36e77830..51bf682 100644
--- a/components/global_media_controls/public/views/media_item_ui_view_unittest.cc
+++ b/components/global_media_controls/public/views/media_item_ui_view_unittest.cc
@@ -238,9 +238,10 @@
   }
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<test::MockMediaItemUIFooter> footer_ = nullptr;
-  raw_ptr<test::MockMediaItemUIDeviceSelector> device_selector_ = nullptr;
-  raw_ptr<MediaItemUIView> item_ui_ = nullptr;
+  raw_ptr<test::MockMediaItemUIFooter, DanglingUntriaged> footer_ = nullptr;
+  raw_ptr<test::MockMediaItemUIDeviceSelector, DanglingUntriaged>
+      device_selector_ = nullptr;
+  raw_ptr<MediaItemUIView, DanglingUntriaged> item_ui_ = nullptr;
   std::unique_ptr<global_media_controls::test::MockMediaItemUIObserver>
       observer_;
   std::unique_ptr<media_message_center::test::MockMediaNotificationItem> item_;
diff --git a/components/grpc_support/bidirectional_stream_c.cc b/components/grpc_support/bidirectional_stream_c.cc
index 5644a93..4f81eca 100644
--- a/components/grpc_support/bidirectional_stream_c.cc
+++ b/components/grpc_support/bidirectional_stream_c.cc
@@ -124,7 +124,8 @@
 
   // None of these objects are owned by |this|.
   raw_ptr<net::URLRequestContextGetter> request_context_getter_;
-  raw_ptr<grpc_support::BidirectionalStream> bidirectional_stream_;
+  raw_ptr<grpc_support::BidirectionalStream, DanglingUntriaged>
+      bidirectional_stream_;
   // C side
   std::unique_ptr<bidirectional_stream> c_stream_;
   raw_ptr<bidirectional_stream_callback> c_callback_;
diff --git a/components/grpc_support/bidirectional_stream_unittest.cc b/components/grpc_support/bidirectional_stream_unittest.cc
index 85b94f2a0..e2fbe5b 100644
--- a/components/grpc_support/bidirectional_stream_unittest.cc
+++ b/components/grpc_support/bidirectional_stream_unittest.cc
@@ -105,7 +105,7 @@
     ~WriteData();
   };
 
-  raw_ptr<bidirectional_stream> stream;
+  raw_ptr<bidirectional_stream, DanglingUntriaged> stream;
   base::WaitableEvent stream_done_event;
 
   // Test parameters.
@@ -117,7 +117,7 @@
 
   // Test results.
   ResponseStep response_step;
-  raw_ptr<char> read_buffer;
+  raw_ptr<char, DanglingUntriaged> read_buffer;
   std::map<std::string, std::string> response_headers;
   std::map<std::string, std::string> response_trailers;
   std::vector<std::string> read_data;
diff --git a/components/history/content/browser/web_contents_top_sites_observer.h b/components/history/content/browser/web_contents_top_sites_observer.h
index f895a20..49ddbcc 100644
--- a/components/history/content/browser/web_contents_top_sites_observer.h
+++ b/components/history/content/browser/web_contents_top_sites_observer.h
@@ -37,7 +37,7 @@
       const content::LoadCommittedDetails& load_details) override;
 
   // Underlying TopSites instance, may be null during testing.
-  raw_ptr<TopSites> top_sites_;
+  raw_ptr<TopSites, DanglingUntriaged> top_sites_;
 
   WEB_CONTENTS_USER_DATA_KEY_DECL();
 };
diff --git a/components/history/core/browser/browsing_history_service_unittest.cc b/components/history/core/browser/browsing_history_service_unittest.cc
index 9c0d701..567f13d 100644
--- a/components/history/core/browser/browsing_history_service_unittest.cc
+++ b/components/history/core/browser/browsing_history_service_unittest.cc
@@ -314,7 +314,7 @@
   TestWebHistoryService web_history_;
   TestSyncService sync_service_;
   TestBrowsingHistoryDriver driver_;
-  raw_ptr<base::MockOneShotTimer> timer_;
+  raw_ptr<base::MockOneShotTimer, DanglingUntriaged> timer_;
   std::unique_ptr<TestBrowsingHistoryService> browsing_history_service_;
 };
 
diff --git a/components/history/core/browser/sync/typed_url_sync_bridge_unittest.cc b/components/history/core/browser/sync/typed_url_sync_bridge_unittest.cc
index 14ba4a0..f6af240 100644
--- a/components/history/core/browser/sync/typed_url_sync_bridge_unittest.cc
+++ b/components/history/core/browser/sync/typed_url_sync_bridge_unittest.cc
@@ -549,7 +549,7 @@
  protected:
   base::test::SingleThreadTaskEnvironment task_environment_;
   base::ScopedTempDir test_dir_;
-  raw_ptr<MockHistoryBackendClient> history_backend_client_;
+  raw_ptr<MockHistoryBackendClient, DanglingUntriaged> history_backend_client_;
   scoped_refptr<TestHistoryBackendForSync> fake_history_backend_;
   raw_ptr<TypedURLSyncBridge> typed_url_sync_bridge_ = nullptr;
   NiceMock<MockModelTypeChangeProcessor> mock_processor_;
diff --git a/components/image_fetcher/core/cache/image_metadata_store_leveldb.h b/components/image_fetcher/core/cache/image_metadata_store_leveldb.h
index 47d53bc..a51a021 100644
--- a/components/image_fetcher/core/cache/image_metadata_store_leveldb.h
+++ b/components/image_fetcher/core/cache/image_metadata_store_leveldb.h
@@ -109,7 +109,7 @@
   std::unique_ptr<leveldb_proto::ProtoDatabase<CachedImageMetadataProto>>
       database_;
   // Clock is owned by the service that creates this object.
-  raw_ptr<base::Clock> clock_;
+  raw_ptr<base::Clock, DanglingUntriaged> clock_;
   base::WeakPtrFactory<ImageMetadataStoreLevelDB> weak_ptr_factory_{this};
 };
 
diff --git a/components/image_fetcher/core/cache/image_metadata_store_leveldb_unittest.cc b/components/image_fetcher/core/cache/image_metadata_store_leveldb_unittest.cc
index c66d1fc3..4577dcb7 100644
--- a/components/image_fetcher/core/cache/image_metadata_store_leveldb_unittest.cc
+++ b/components/image_fetcher/core/cache/image_metadata_store_leveldb_unittest.cc
@@ -152,7 +152,7 @@
 
  private:
   std::unique_ptr<base::SimpleTestClock> clock_;
-  raw_ptr<FakeDB<CachedImageMetadataProto>> db_;
+  raw_ptr<FakeDB<CachedImageMetadataProto>, DanglingUntriaged> db_;
   std::map<std::string, CachedImageMetadataProto> db_store_;
   std::unique_ptr<ImageMetadataStoreLevelDB> metadata_store_;
 
diff --git a/components/image_fetcher/core/cached_image_fetcher.h b/components/image_fetcher/core/cached_image_fetcher.h
index 1125012..00c1875 100644
--- a/components/image_fetcher/core/cached_image_fetcher.h
+++ b/components/image_fetcher/core/cached_image_fetcher.h
@@ -100,7 +100,7 @@
                  std::string image_data);
 
   // Owned by ImageFetcherService.
-  raw_ptr<ImageFetcher> image_fetcher_;
+  raw_ptr<ImageFetcher, DanglingUntriaged> image_fetcher_;
   scoped_refptr<ImageCache> image_cache_;
 
   // Whether the ImageCache is allowed to be modified in any way from requests
diff --git a/components/invalidation/impl/fcm_invalidation_listener_unittest.cc b/components/invalidation/impl/fcm_invalidation_listener_unittest.cc
index 0ade704a..153222a4e 100644
--- a/components/invalidation/impl/fcm_invalidation_listener_unittest.cc
+++ b/components/invalidation/impl/fcm_invalidation_listener_unittest.cc
@@ -210,8 +210,9 @@
  private:
   base::test::SingleThreadTaskEnvironment task_environment_;
   data_decoder::test::InProcessDataDecoder in_process_data_decoder_;
-  raw_ptr<TestFCMSyncNetworkChannel> fcm_sync_network_channel_;
-  raw_ptr<MockSubscriptionManager> subscription_manager_;
+  raw_ptr<TestFCMSyncNetworkChannel, DanglingUntriaged>
+      fcm_sync_network_channel_;
+  raw_ptr<MockSubscriptionManager, DanglingUntriaged> subscription_manager_;
 
  protected:
   // Tests need to access these directly.
diff --git a/components/invalidation/impl/fcm_invalidation_service_unittest.cc b/components/invalidation/impl/fcm_invalidation_service_unittest.cc
index 9cc394f..5bd80c3b 100644
--- a/components/invalidation/impl/fcm_invalidation_service_unittest.cc
+++ b/components/invalidation/impl/fcm_invalidation_service_unittest.cc
@@ -193,7 +193,8 @@
   // The service has to be below the provider since the service keeps
   // a non-owned pointer to the provider.
   std::unique_ptr<FCMInvalidationService> invalidation_service_;
-  raw_ptr<FCMInvalidationListener> fake_listener_;  // Owned by the service.
+  raw_ptr<FCMInvalidationListener, DanglingUntriaged>
+      fake_listener_;  // Owned by the service.
 };
 
 INSTANTIATE_TYPED_TEST_SUITE_P(FCMInvalidationServiceTest,
diff --git a/components/media_message_center/media_controls_progress_view_unittest.cc b/components/media_message_center/media_controls_progress_view_unittest.cc
index 07eb653..f10c7e5 100644
--- a/components/media_message_center/media_controls_progress_view_unittest.cc
+++ b/components/media_message_center/media_controls_progress_view_unittest.cc
@@ -59,7 +59,8 @@
   MOCK_METHOD1(SeekTo, void(double));
 
  protected:
-  raw_ptr<MediaControlsProgressView> progress_view_ = nullptr;
+  raw_ptr<MediaControlsProgressView, DanglingUntriaged> progress_view_ =
+      nullptr;
 
  private:
   views::Widget widget_;
diff --git a/components/media_message_center/media_notification_volume_slider_view_unittest.cc b/components/media_message_center/media_notification_volume_slider_view_unittest.cc
index 4b09078..e0d01c0 100644
--- a/components/media_message_center/media_notification_volume_slider_view_unittest.cc
+++ b/components/media_message_center/media_notification_volume_slider_view_unittest.cc
@@ -57,7 +57,7 @@
 
  private:
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<MediaNotificationVolumeSliderView> volume_slider_;
+  raw_ptr<MediaNotificationVolumeSliderView, DanglingUntriaged> volume_slider_;
 };
 
 TEST_F(MediaNotificationVolumeSliderViewTest, SetVolume) {
diff --git a/components/media_message_center/media_squiggly_progress_view_unittest.cc b/components/media_message_center/media_squiggly_progress_view_unittest.cc
index 0876e7b2..3e95ceeb 100644
--- a/components/media_message_center/media_squiggly_progress_view_unittest.cc
+++ b/components/media_message_center/media_squiggly_progress_view_unittest.cc
@@ -44,7 +44,7 @@
 
  private:
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<MediaSquigglyProgressView> view_ = nullptr;
+  raw_ptr<MediaSquigglyProgressView, DanglingUntriaged> view_ = nullptr;
 };
 
 TEST_F(MediaSquigglyProgressViewTest, MediaPlaying) {
diff --git a/components/media_router/browser/issue_manager.h b/components/media_router/browser/issue_manager.h
index 0debbf1..584d8b89 100644
--- a/components/media_router/browser/issue_manager.h
+++ b/components/media_router/browser/issue_manager.h
@@ -100,7 +100,7 @@
   base::ObserverList<IssuesObserver>::Unchecked issues_observers_;
 
   // Pointer to the top Issue in |issues_|, or |nullptr| if there are no issues.
-  raw_ptr<const Issue> top_issue_;
+  raw_ptr<const Issue, DanglingUntriaged> top_issue_;
 
   // The SingleThreadTaskRunner that this IssueManager runs on, and is used
   // for posting issue auto-dismissal tasks.
diff --git a/components/media_router/browser/mirroring_to_flinging_switcher_unittest.cc b/components/media_router/browser/mirroring_to_flinging_switcher_unittest.cc
index 9d809ed0..4b0b947 100644
--- a/components/media_router/browser/mirroring_to_flinging_switcher_unittest.cc
+++ b/components/media_router/browser/mirroring_to_flinging_switcher_unittest.cc
@@ -104,7 +104,7 @@
   content::BrowserTaskEnvironment task_environment_;
   content::TestBrowserContext browser_context_;
   TestMediaRouterFactory media_router_factory_;
-  raw_ptr<MockMediaRouter> media_router_ = nullptr;
+  raw_ptr<MockMediaRouter, DanglingUntriaged> media_router_ = nullptr;
   std::unique_ptr<content::WebContents> web_contents_;
   std::unique_ptr<TestWebContentsPresentationManager> presentation_manager_;
 };
diff --git a/components/media_router/browser/presentation/local_presentation_manager.h b/components/media_router/browser/presentation/local_presentation_manager.h
index a1b0fb72..d52f8a7 100644
--- a/components/media_router/browser/presentation/local_presentation_manager.h
+++ b/components/media_router/browser/presentation/local_presentation_manager.h
@@ -216,7 +216,8 @@
 
     const blink::mojom::PresentationInfo presentation_info_;
     absl::optional<MediaRoute> route_;
-    raw_ptr<content::WebContents> receiver_web_contents_ = nullptr;
+    raw_ptr<content::WebContents, DanglingUntriaged> receiver_web_contents_ =
+        nullptr;
 
     // Callback to invoke whenever a receiver connection is available.
     content::ReceiverConnectionAvailableCallback receiver_callback_;
diff --git a/components/media_router/common/providers/cast/channel/cast_socket_unittest.cc b/components/media_router/common/providers/cast/channel/cast_socket_unittest.cc
index 98172df..bcc9d4f6 100644
--- a/components/media_router/common/providers/cast/channel/cast_socket_unittest.cc
+++ b/components/media_router/common/providers/cast/channel/cast_socket_unittest.cc
@@ -244,7 +244,7 @@
   }
 
  private:
-  raw_ptr<MockCastTransport> mock_transport_ = nullptr;
+  raw_ptr<MockCastTransport, DanglingUntriaged> mock_transport_ = nullptr;
 };
 
 // TODO(https://crbug.com/928467):  Remove this class.
@@ -411,7 +411,7 @@
   std::unique_ptr<net::URLRequestContext> url_request_context_;
   std::unique_ptr<network::NetworkContext> network_context_;
   mojo::Remote<network::mojom::NetworkContext> network_context_remote_;
-  raw_ptr<Logger> logger_;
+  raw_ptr<Logger, DanglingUntriaged> logger_;
   CompleteHandler handler_;
   std::unique_ptr<MockCastSocketObserver> observer_;
   CastSocketOpenParams socket_open_params_;
diff --git a/components/media_router/common/providers/cast/channel/cast_transport_unittest.cc b/components/media_router/common/providers/cast/channel/cast_transport_unittest.cc
index 7d4a02d6..6306cd24 100644
--- a/components/media_router/common/providers/cast/channel/cast_transport_unittest.cc
+++ b/components/media_router/common/providers/cast/channel/cast_transport_unittest.cc
@@ -174,7 +174,7 @@
   }
 
   base::test::SingleThreadTaskEnvironment task_environment_;
-  raw_ptr<MockCastTransportDelegate> delegate_;
+  raw_ptr<MockCastTransportDelegate, DanglingUntriaged> delegate_;
   MockSocket mock_socket_;
   // This field is not a raw_ptr<> because templates made it difficult for the
   // rewriter to see that |.get()| needs to be appended.
diff --git a/components/media_router/common/providers/cast/channel/keep_alive_delegate_unittest.cc b/components/media_router/common/providers/cast/channel/keep_alive_delegate_unittest.cc
index af6d662..4f90dd1 100644
--- a/components/media_router/common/providers/cast/channel/keep_alive_delegate_unittest.cc
+++ b/components/media_router/common/providers/cast/channel/keep_alive_delegate_unittest.cc
@@ -109,8 +109,8 @@
   std::unique_ptr<KeepAliveDelegate> keep_alive_;
   scoped_refptr<Logger> logger_;
   raw_ptr<MockCastTransportDelegate> inner_delegate_;
-  raw_ptr<MockTimerWithMonitoredReset> liveness_timer_;
-  raw_ptr<MockTimerWithMonitoredReset> ping_timer_;
+  raw_ptr<MockTimerWithMonitoredReset, DanglingUntriaged> liveness_timer_;
+  raw_ptr<MockTimerWithMonitoredReset, DanglingUntriaged> ping_timer_;
 };
 
 TEST_F(KeepAliveDelegateTest, TestErrorHandledBeforeStarting) {
diff --git a/components/mirroring/browser/single_client_video_capture_host_unittest.cc b/components/mirroring/browser/single_client_video_capture_host_unittest.cc
index f0f3c6b..8c8c787 100644
--- a/components/mirroring/browser/single_client_video_capture_host_unittest.cc
+++ b/components/mirroring/browser/single_client_video_capture_host_unittest.cc
@@ -298,7 +298,7 @@
   base::test::TaskEnvironment task_environment_;
   std::unique_ptr<MockVideoCaptureObserver> consumer_;
   base::WeakPtr<VideoFrameReceiver> frame_receiver_;
-  raw_ptr<MockVideoCaptureDevice> launched_device_ = nullptr;
+  raw_ptr<MockVideoCaptureDevice, DanglingUntriaged> launched_device_ = nullptr;
 
  private:
   std::unique_ptr<content::VideoCaptureDeviceLauncher> CreateDeviceLauncher() {
diff --git a/components/mirroring/service/captured_audio_input_unittest.cc b/components/mirroring/service/captured_audio_input_unittest.cc
index df266c2..280540c 100644
--- a/components/mirroring/service/captured_audio_input_unittest.cc
+++ b/components/mirroring/service/captured_audio_input_unittest.cc
@@ -156,7 +156,7 @@
   base::test::TaskEnvironment task_environment_;
   std::unique_ptr<media::AudioInputIPC> audio_input_;
   MockDelegate delegate_;
-  raw_ptr<MockStream> stream_ = nullptr;
+  raw_ptr<MockStream, DanglingUntriaged> stream_ = nullptr;
   mojo::Remote<media::mojom::AudioInputStreamClient> stream_client_;
   base::CancelableSyncSocket socket_;
 };
diff --git a/components/mirroring/service/media_remoter.h b/components/mirroring/service/media_remoter.h
index eb6c427..c084590 100644
--- a/components/mirroring/service/media_remoter.h
+++ b/components/mirroring/service/media_remoter.h
@@ -157,7 +157,7 @@
   std::unique_ptr<RemotingSender> video_sender_;
 
   // Used only if StartRpcMessaging is called with a cast transport.
-  raw_ptr<media::cast::CastTransport> transport_ = nullptr;
+  raw_ptr<media::cast::CastTransport, DanglingUntriaged> transport_ = nullptr;
 
   // Used only if StartRpcMessaging is called with openscreen::cast::Sender
   // objects.
diff --git a/components/mirroring/service/remoting_sender_unittest.cc b/components/mirroring/service/remoting_sender_unittest.cc
index be50d31..254220d 100644
--- a/components/mirroring/service/remoting_sender_unittest.cc
+++ b/components/mirroring/service/remoting_sender_unittest.cc
@@ -225,7 +225,7 @@
   base::test::TaskEnvironment task_environment_;
   const scoped_refptr<media::cast::CastEnvironment> cast_environment_;
 
-  raw_ptr<testing::StrictMock<FakeSender>> sender_;
+  raw_ptr<testing::StrictMock<FakeSender>, DanglingUntriaged> sender_;
   bool expecting_error_callback_run_ = false;
 
   std::unique_ptr<MojoSenderWrapper> mojo_sender_wrapper_;
diff --git a/components/mirroring/service/rpc_dispatcher_impl.h b/components/mirroring/service/rpc_dispatcher_impl.h
index 17a79290..e62e616 100644
--- a/components/mirroring/service/rpc_dispatcher_impl.h
+++ b/components/mirroring/service/rpc_dispatcher_impl.h
@@ -34,7 +34,7 @@
   void ProcessResponse(RpcDispatcher::ResponseCallback callback,
                        const ReceiverResponse& response);
 
-  raw_ref<MessageDispatcher> message_dispatcher_;
+  raw_ref<MessageDispatcher, DanglingUntriaged> message_dispatcher_;
   bool is_subscribed_ = false;
 };
 
diff --git a/components/no_state_prefetch/browser/no_state_prefetch_processor_impl_unittest.cc b/components/no_state_prefetch/browser/no_state_prefetch_processor_impl_unittest.cc
index 38b8607..984fb30 100644
--- a/components/no_state_prefetch/browser/no_state_prefetch_processor_impl_unittest.cc
+++ b/components/no_state_prefetch/browser/no_state_prefetch_processor_impl_unittest.cc
@@ -68,7 +68,7 @@
   }
 
  private:
-  raw_ptr<MockNoStatePrefetchLinkManager> link_manager_;
+  raw_ptr<MockNoStatePrefetchLinkManager, DanglingUntriaged> link_manager_;
 };
 
 class NoStatePrefetchProcessorImplTest
diff --git a/components/offline_pages/core/background/offliner_client_unittest.cc b/components/offline_pages/core/background/offliner_client_unittest.cc
index d3eabad..0802213 100644
--- a/components/offline_pages/core/background/offliner_client_unittest.cc
+++ b/components/offline_pages/core/background/offliner_client_unittest.cc
@@ -40,7 +40,7 @@
       task_runner_current_default_handle_{task_runner_};
 
   MockProgressCallback progress_callback_;
-  raw_ptr<OfflinerStub> offliner_ = new OfflinerStub;
+  raw_ptr<OfflinerStub, DanglingUntriaged> offliner_ = new OfflinerStub;
   OfflinerClient client_{std::unique_ptr<OfflinerStub>(offliner_),
                          progress_callback_.Get()};
 };
diff --git a/components/offline_pages/core/background/pick_request_task.h b/components/offline_pages/core/background/pick_request_task.h
index e531b65..2e4f1d4 100644
--- a/components/offline_pages/core/background/pick_request_task.h
+++ b/components/offline_pages/core/background/pick_request_task.h
@@ -100,7 +100,7 @@
 
   // Member variables, all pointers are not owned here.
   raw_ptr<RequestQueueStore> store_;
-  raw_ptr<OfflinerPolicy> policy_;
+  raw_ptr<OfflinerPolicy, DanglingUntriaged> policy_;
   RequestPickedCallback picked_callback_;
   RequestNotPickedCallback not_picked_callback_;
   DeviceConditions device_conditions_;
diff --git a/components/offline_pages/core/background/request_coordinator_unittest.cc b/components/offline_pages/core/background/request_coordinator_unittest.cc
index 4ac311a1..da128c5 100644
--- a/components/offline_pages/core/background/request_coordinator_unittest.cc
+++ b/components/offline_pages/core/background/request_coordinator_unittest.cc
@@ -390,7 +390,7 @@
   }
 
  protected:
-  raw_ptr<ActiveTabInfoStub> active_tab_info_ = nullptr;
+  raw_ptr<ActiveTabInfoStub, DanglingUntriaged> active_tab_info_ = nullptr;
 
  private:
   GetRequestsResult last_get_requests_result_;
@@ -399,9 +399,10 @@
   scoped_refptr<base::TestMockTimeTaskRunner> task_runner_;
   base::SingleThreadTaskRunner::CurrentDefaultHandle
       task_runner_current_default_handle_;
-  raw_ptr<network::NetworkQualityTracker> network_quality_tracker_;
+  raw_ptr<network::NetworkQualityTracker, DanglingUntriaged>
+      network_quality_tracker_;
   std::unique_ptr<RequestCoordinatorStubTaco> coordinator_taco_;
-  raw_ptr<OfflinerStub> offliner_;
+  raw_ptr<OfflinerStub, DanglingUntriaged> offliner_;
   base::WaitableEvent waiter_;
   ObserverStub observer_;
   AddRequestResult expected_add_request_result_;
diff --git a/components/omnibox/browser/bookmark_provider.h b/components/omnibox/browser/bookmark_provider.h
index 0052644..91e5d02 100644
--- a/components/omnibox/browser/bookmark_provider.h
+++ b/components/omnibox/browser/bookmark_provider.h
@@ -66,7 +66,8 @@
 
   const raw_ptr<AutocompleteProviderClient> client_;
   const raw_ptr<bookmarks::BookmarkModel> local_or_syncable_bookmark_model_;
-  const raw_ptr<bookmarks::BookmarkModel> account_bookmark_model_;
+  const raw_ptr<bookmarks::BookmarkModel, DanglingUntriaged>
+      account_bookmark_model_;
 };
 
 #endif  // COMPONENTS_OMNIBOX_BROWSER_BOOKMARK_PROVIDER_H_
diff --git a/components/omnibox/browser/keyword_provider.h b/components/omnibox/browser/keyword_provider.h
index db590de..354afad8 100644
--- a/components/omnibox/browser/keyword_provider.h
+++ b/components/omnibox/browser/keyword_provider.h
@@ -177,13 +177,13 @@
   AutocompleteInput keyword_input_;
 
   // Model for the keywords.
-  raw_ptr<TemplateURLService> model_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> model_;
 
   // Delegate to handle the extensions-only logic for KeywordProvider.
   // NULL when extensions are not enabled. May be NULL for tests.
   std::unique_ptr<KeywordExtensionsDelegate> extensions_delegate_;
 
-  raw_ptr<AutocompleteProviderClient> client_;
+  raw_ptr<AutocompleteProviderClient, DanglingUntriaged> client_;
 };
 
 #endif  // COMPONENTS_OMNIBOX_BROWSER_KEYWORD_PROVIDER_H_
diff --git a/components/omnibox/browser/most_visited_sites_provider.h b/components/omnibox/browser/most_visited_sites_provider.h
index da577fad..0bf1c80 100644
--- a/components/omnibox/browser/most_visited_sites_provider.h
+++ b/components/omnibox/browser/most_visited_sites_provider.h
@@ -46,7 +46,7 @@
 
   void BlockURL(const GURL& site_url);
 
-  const raw_ptr<AutocompleteProviderClient> client_;
+  const raw_ptr<AutocompleteProviderClient, DanglingUntriaged> client_;
   // Note: used to cancel requests - not a general purpose WeakPtr factory.
   base::WeakPtrFactory<MostVisitedSitesProvider> request_weak_ptr_factory_{
       this};
diff --git a/components/omnibox/browser/test_omnibox_client.h b/components/omnibox/browser/test_omnibox_client.h
index 1152551..afcdddd 100644
--- a/components/omnibox/browser/test_omnibox_client.h
+++ b/components/omnibox/browser/test_omnibox_client.h
@@ -50,8 +50,8 @@
 
  private:
   SessionID session_id_;
-  raw_ptr<bookmarks::BookmarkModel> bookmark_model_;
-  raw_ptr<TemplateURLService> template_url_service_;
+  raw_ptr<bookmarks::BookmarkModel, DanglingUntriaged> bookmark_model_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
   TestSchemeClassifier scheme_classifier_;
   AutocompleteClassifier autocomplete_classifier_;
   GURL page_url_for_last_favicon_request_;
diff --git a/components/open_from_clipboard/clipboard_recent_content_generic_unittest.cc b/components/open_from_clipboard/clipboard_recent_content_generic_unittest.cc
index c3ef561..99fd0ba5 100644
--- a/components/open_from_clipboard/clipboard_recent_content_generic_unittest.cc
+++ b/components/open_from_clipboard/clipboard_recent_content_generic_unittest.cc
@@ -83,7 +83,7 @@
     ui::Clipboard::DestroyClipboardForCurrentThread();
   }
 
-  raw_ptr<ui::TestClipboard> test_clipboard_;
+  raw_ptr<ui::TestClipboard, DanglingUntriaged> test_clipboard_;
   url::ScopedSchemeRegistryForTests scoped_scheme_registry_;
 };
 
diff --git a/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer.h b/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer.h
index dafae0c..a108dafa 100644
--- a/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer.h
+++ b/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer.h
@@ -74,7 +74,8 @@
   void DidStopLoading() override;
 
   // Not owned. Guaranteed to outlive |this|.
-  raw_ptr<PageContentAnnotationsService> page_content_annotations_service_;
+  raw_ptr<PageContentAnnotationsService, DanglingUntriaged>
+      page_content_annotations_service_;
 
   SalientImageRetriever salient_image_retriever_;
 
@@ -84,10 +85,11 @@
   raw_ptr<OptimizationGuideLogger> optimization_guide_logger_;
 
   // Not owned. Guaranteed to outlive |this|.
-  raw_ptr<TemplateURLService> template_url_service_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
 
   // Not owned. Guaranteed to outlive |this|.
-  raw_ptr<OptimizationGuideDecider> optimization_guide_decider_;
+  raw_ptr<OptimizationGuideDecider, DanglingUntriaged>
+      optimization_guide_decider_;
 
   // Not owned. Guaranteed to outlive |this|.
   raw_ptr<prerender::NoStatePrefetchManager> no_state_prefetch_manager_;
diff --git a/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer_unittest.cc b/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer_unittest.cc
index 9be6971b..6dfd16bc 100644
--- a/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer_unittest.cc
+++ b/components/optimization_guide/content/browser/page_content_annotations_web_contents_observer_unittest.cc
@@ -314,7 +314,7 @@
   std::unique_ptr<FakePageContentAnnotationsService>
       page_content_annotations_service_;
   std::unique_ptr<TemplateURLService> template_url_service_;
-  raw_ptr<TemplateURL> template_url_;
+  raw_ptr<TemplateURL, DanglingUntriaged> template_url_;
   std::unique_ptr<FakeOptimizationGuideDecider> optimization_guide_decider_;
 };
 
diff --git a/components/optimization_guide/core/hint_cache_unittest.cc b/components/optimization_guide/core/hint_cache_unittest.cc
index 1039f80..ddd5b92 100644
--- a/components/optimization_guide/core/hint_cache_unittest.cc
+++ b/components/optimization_guide/core/hint_cache_unittest.cc
@@ -174,7 +174,7 @@
 
   std::unique_ptr<OptimizationGuideStore> optimization_guide_store_;
   std::unique_ptr<HintCache> hint_cache_;
-  raw_ptr<const proto::Hint> loaded_hint_;
+  raw_ptr<const proto::Hint, DanglingUntriaged> loaded_hint_;
 
   bool is_store_initialized_;
   bool are_component_hints_updated_;
diff --git a/components/optimization_guide/core/hints_fetcher.h b/components/optimization_guide/core/hints_fetcher.h
index 9c8e741c..95d363ab 100644
--- a/components/optimization_guide/core/hints_fetcher.h
+++ b/components/optimization_guide/core/hints_fetcher.h
@@ -173,7 +173,7 @@
   optimization_guide::proto::RequestContext request_context_;
 
   // A reference to the PrefService for this profile. Not owned.
-  raw_ptr<PrefService> pref_service_ = nullptr;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_ = nullptr;
 
   // Holds the hosts being requested by the hints fetcher.
   std::vector<std::string> hosts_fetched_;
diff --git a/components/optimization_guide/core/optimization_guide_store.h b/components/optimization_guide/core/optimization_guide_store.h
index 546bf400..0d85cca 100644
--- a/components/optimization_guide/core/optimization_guide_store.h
+++ b/components/optimization_guide/core/optimization_guide_store.h
@@ -467,7 +467,7 @@
   scoped_refptr<base::SequencedTaskRunner> store_task_runner_;
 
   // Pref service. Not owned. Guaranteed to outlive |this|.
-  raw_ptr<PrefService> pref_service_;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_;
 
   SEQUENCE_CHECKER(sequence_checker_);
 
diff --git a/components/optimization_guide/core/optimization_guide_store_unittest.cc b/components/optimization_guide/core/optimization_guide_store_unittest.cc
index a25c6250..f645e0f9 100644
--- a/components/optimization_guide/core/optimization_guide_store_unittest.cc
+++ b/components/optimization_guide/core/optimization_guide_store_unittest.cc
@@ -429,7 +429,7 @@
  private:
   base::test::TaskEnvironment task_environment_;
   std::unique_ptr<TestingPrefServiceSimple> pref_service_;
-  raw_ptr<FakeDB<proto::StoreEntry>> db_;
+  raw_ptr<FakeDB<proto::StoreEntry>, DanglingUntriaged> db_;
   StoreEntryMap db_store_;
   std::unique_ptr<OptimizationGuideStore> guide_store_;
   base::ScopedTempDir temp_dir_;
diff --git a/components/optimization_guide/core/prediction_manager.h b/components/optimization_guide/core/prediction_manager.h
index a54dd36..898d8ab7 100644
--- a/components/optimization_guide/core/prediction_manager.h
+++ b/components/optimization_guide/core/prediction_manager.h
@@ -333,7 +333,7 @@
   raw_ptr<OptimizationGuideLogger> optimization_guide_logger_;
 
   // A reference to the PrefService for this profile. Not owned.
-  raw_ptr<PrefService> pref_service_ = nullptr;
+  raw_ptr<PrefService, DanglingUntriaged> pref_service_ = nullptr;
 
   // The repeating callback that will be used to determine if component updates
   // are enabled.
diff --git a/components/origin_trials/browser/leveldb_persistence_provider_unittest.cc b/components/origin_trials/browser/leveldb_persistence_provider_unittest.cc
index e2219cd..e1745d3 100644
--- a/components/origin_trials/browser/leveldb_persistence_provider_unittest.cc
+++ b/components/origin_trials/browser/leveldb_persistence_provider_unittest.cc
@@ -85,7 +85,8 @@
   content::BrowserTaskEnvironment task_environment_;
   std::map<std::string, origin_trials_pb::TrialTokenDbEntries> db_entries_;
 
-  raw_ptr<FakeDB<origin_trials_pb::TrialTokenDbEntries>> fake_db_unretained_;
+  raw_ptr<FakeDB<origin_trials_pb::TrialTokenDbEntries>, DanglingUntriaged>
+      fake_db_unretained_;
   std::unique_ptr<LevelDbPersistenceProvider> persistence_provider_;
 };
 
diff --git a/components/os_crypt/sync/key_storage_kwallet_unittest.cc b/components/os_crypt/sync/key_storage_kwallet_unittest.cc
index 82f92bf8..2eea5de1 100644
--- a/components/os_crypt/sync/key_storage_kwallet_unittest.cc
+++ b/components/os_crypt/sync/key_storage_kwallet_unittest.cc
@@ -367,7 +367,7 @@
   }
 
  protected:
-  raw_ptr<StrictMock<MockKWalletDBus>> kwallet_dbus_mock_;
+  raw_ptr<StrictMock<MockKWalletDBus>, DanglingUntriaged> kwallet_dbus_mock_;
   KeyStorageKWallet key_storage_kwallet_;
   const std::string wallet_name_ = "mollet";
 };
diff --git a/components/page_info/core/about_this_site_service.h b/components/page_info/core/about_this_site_service.h
index 62f63a2..ce10b99 100644
--- a/components/page_info/core/about_this_site_service.h
+++ b/components/page_info/core/about_this_site_service.h
@@ -84,7 +84,7 @@
 
  private:
   std::unique_ptr<Client> client_;
-  raw_ptr<TemplateURLService> template_url_service_;
+  raw_ptr<TemplateURLService, DanglingUntriaged> template_url_service_;
 
   base::WeakPtrFactory<AboutThisSiteService> weak_ptr_factory_{this};
 };
diff --git a/components/page_info/page_info.h b/components/page_info/page_info.h
index 5c6ab0f..a9ffdf9 100644
--- a/components/page_info/page_info.h
+++ b/components/page_info/page_info.h
@@ -436,7 +436,7 @@
   // specific data (local stored objects like cookies), site-specific
   // permissions (location, pop-up, plugin, etc. permissions) and site-specific
   // information (identity, connection status, etc.).
-  raw_ptr<PageInfoUI> ui_;
+  raw_ptr<PageInfoUI, DanglingUntriaged> ui_;
 
   // A web contents getter used to retrieve the associated WebContents object.
   base::WeakPtr<content::WebContents> web_contents_;
diff --git a/components/page_load_metrics/browser/metrics_web_contents_observer_unittest.cc b/components/page_load_metrics/browser/metrics_web_contents_observer_unittest.cc
index 5b372c87..d822524 100644
--- a/components/page_load_metrics/browser/metrics_web_contents_observer_unittest.cc
+++ b/components/page_load_metrics/browser/metrics_web_contents_observer_unittest.cc
@@ -249,7 +249,8 @@
   }
 
   base::HistogramTester histogram_tester_;
-  raw_ptr<TestMetricsWebContentsObserverEmbedder> embedder_interface_;
+  raw_ptr<TestMetricsWebContentsObserverEmbedder, DanglingUntriaged>
+      embedder_interface_;
 
  private:
   int num_errors_ = 0;
diff --git a/components/page_load_metrics/browser/observers/ad_metrics/ads_page_load_metrics_observer_unittest.cc b/components/page_load_metrics/browser/observers/ad_metrics/ads_page_load_metrics_observer_unittest.cc
index 72362e88..9e104683 100644
--- a/components/page_load_metrics/browser/observers/ad_metrics/ads_page_load_metrics_observer_unittest.cc
+++ b/components/page_load_metrics/browser/observers/ad_metrics/ads_page_load_metrics_observer_unittest.cc
@@ -873,7 +873,8 @@
   std::unique_ptr<base::SimpleTestTickClock> clock_;
 
   // A pointer to the AdsPageLoadMetricsObserver used by the tests.
-  raw_ptr<AdsPageLoadMetricsObserver> ads_observer_ = nullptr;
+  raw_ptr<AdsPageLoadMetricsObserver, DanglingUntriaged> ads_observer_ =
+      nullptr;
 };
 
 INSTANTIATE_TEST_SUITE_P(All, AdsPageLoadMetricsObserverTest, testing::Bool());
diff --git a/components/page_load_metrics/browser/observers/page_load_metrics_observer_tester.h b/components/page_load_metrics/browser/observers/page_load_metrics_observer_tester.h
index 5a9eb3ca..d552e6e1 100644
--- a/components/page_load_metrics/browser/observers/page_load_metrics_observer_tester.h
+++ b/components/page_load_metrics/browser/observers/page_load_metrics_observer_tester.h
@@ -180,9 +180,10 @@
   content::WebContents* web_contents() const { return web_contents_; }
 
   RegisterObserversCallback register_callback_;
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
   raw_ptr<content::RenderViewHostTestHarness> rfh_test_harness_;
-  raw_ptr<MetricsWebContentsObserver> metrics_web_contents_observer_;
+  raw_ptr<MetricsWebContentsObserver, DanglingUntriaged>
+      metrics_web_contents_observer_;
   base::HistogramTester histogram_tester_;
   ukm::TestAutoSetUkmRecorder test_ukm_recorder_;
 };
diff --git a/components/page_load_metrics/browser/page_load_tracker_unittest.cc b/components/page_load_metrics/browser/page_load_tracker_unittest.cc
index d9cdd03c..0f0e3dd 100644
--- a/components/page_load_metrics/browser/page_load_tracker_unittest.cc
+++ b/components/page_load_metrics/browser/page_load_tracker_unittest.cc
@@ -133,7 +133,7 @@
   base::flat_map<std::string, ukm::SourceId> ukm_source_ids_;
 
   PageLoadMetricsObserverEvents events_;
-  raw_ptr<TestPageLoadMetricsObserver> observer_;
+  raw_ptr<TestPageLoadMetricsObserver, DanglingUntriaged> observer_;
   bool is_observer_passed_ = false;
 
   GURL target_url_;
diff --git a/components/password_manager/content/browser/content_password_manager_driver.h b/components/password_manager/content/browser/content_password_manager_driver.h
index c36aacf..7da0fcb 100644
--- a/components/password_manager/content/browser/content_password_manager_driver.h
+++ b/components/password_manager/content/browser/content_password_manager_driver.h
@@ -170,7 +170,7 @@
   const mojo::AssociatedRemote<autofill::mojom::PasswordGenerationAgent>&
   GetPasswordGenerationAgent();
 
-  raw_ptr<content::RenderFrameHost> render_frame_host_;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> render_frame_host_;
   raw_ptr<PasswordManagerClient> client_;
   PasswordGenerationFrameHelper password_generation_helper_;
   PasswordAutofillManager password_autofill_manager_;
diff --git a/components/password_manager/core/browser/affiliation/affiliation_backend_unittest.cc b/components/password_manager/core/browser/affiliation/affiliation_backend_unittest.cc
index 5ae5ff0..3440cfc 100644
--- a/components/password_manager/core/browser/affiliation/affiliation_backend_unittest.cc
+++ b/components/password_manager/core/browser/affiliation/affiliation_backend_unittest.cc
@@ -430,7 +430,8 @@
   MockAffiliationConsumer mock_consumer_;
   network::TestURLLoaderFactory test_url_loader_factory_;
   // Owned by |backend_|.
-  raw_ptr<MockAffiliationFetchThrottler> mock_fetch_throttler_ = nullptr;
+  raw_ptr<MockAffiliationFetchThrottler, DanglingUntriaged>
+      mock_fetch_throttler_ = nullptr;
 };
 
 TEST_P(AffiliationBackendTest, OnDemandRequestSucceedsWithFetch) {
diff --git a/components/password_manager/core/browser/affiliation/facet_manager_unittest.cc b/components/password_manager/core/browser/affiliation/facet_manager_unittest.cc
index ea03ecb..98a56ddb 100644
--- a/components/password_manager/core/browser/affiliation/facet_manager_unittest.cc
+++ b/components/password_manager/core/browser/affiliation/facet_manager_unittest.cc
@@ -77,7 +77,7 @@
   NotificationAccuracy accuracy_;
   const base::TimeDelta too_late_delay_;
   scoped_refptr<base::TestMockTimeTaskRunner> task_runner_;
-  raw_ptr<FacetManager> facet_manager_;
+  raw_ptr<FacetManager, DanglingUntriaged> facet_manager_;
 };
 
 // Stub/mock implementation for FacetManagerHost.
diff --git a/components/password_manager/core/browser/affiliation/fake_affiliation_api.h b/components/password_manager/core/browser/affiliation/fake_affiliation_api.h
index c8fde6f..0b7a441 100644
--- a/components/password_manager/core/browser/affiliation/fake_affiliation_api.h
+++ b/components/password_manager/core/browser/affiliation/fake_affiliation_api.h
@@ -52,7 +52,8 @@
   }
 
  private:
-  raw_ptr<FakeAffiliationFetcherFactory> fake_fetcher_factory_ = nullptr;
+  raw_ptr<FakeAffiliationFetcherFactory, DanglingUntriaged>
+      fake_fetcher_factory_ = nullptr;
   std::vector<AffiliatedFacets> preset_equivalence_relation_;
   std::vector<GroupedFacets> groups_;
 };
diff --git a/components/password_manager/core/browser/credential_manager_impl_unittest.cc b/components/password_manager/core/browser/credential_manager_impl_unittest.cc
index 3b9f838a..3601faa 100644
--- a/components/password_manager/core/browser/credential_manager_impl_unittest.cc
+++ b/components/password_manager/core/browser/credential_manager_impl_unittest.cc
@@ -426,7 +426,7 @@
   scoped_refptr<TestPasswordStore> account_store_;
   std::unique_ptr<testing::NiceMock<MockPasswordManagerClient>> client_;
   std::unique_ptr<MockAffiliationService> mock_affiliation_service_;
-  raw_ptr<MockAffiliatedMatchHelper> mock_match_helper_;
+  raw_ptr<MockAffiliatedMatchHelper, DanglingUntriaged> mock_match_helper_;
   std::unique_ptr<CredentialManagerImpl> cm_service_impl_;
 };
 
diff --git a/components/password_manager/core/browser/form_saver_impl.h b/components/password_manager/core/browser/form_saver_impl.h
index 6481a843..9f1f235 100644
--- a/components/password_manager/core/browser/form_saver_impl.h
+++ b/components/password_manager/core/browser/form_saver_impl.h
@@ -48,7 +48,7 @@
   // form handler or origin handler which could embed FormSaver.
 
   // Cached pointer to the PasswordStoreInterface.
-  const raw_ptr<PasswordStoreInterface> store_;
+  const raw_ptr<PasswordStoreInterface, DanglingUntriaged> store_;
 };
 
 }  // namespace password_manager
diff --git a/components/password_manager/core/browser/http_password_store_migrator.h b/components/password_manager/core/browser/http_password_store_migrator.h
index 8e415387..cefbf76 100644
--- a/components/password_manager/core/browser/http_password_store_migrator.h
+++ b/components/password_manager/core/browser/http_password_store_migrator.h
@@ -79,7 +79,7 @@
  private:
   void ProcessPasswordStoreResults();
 
-  const raw_ptr<PasswordStoreInterface> store_;
+  const raw_ptr<PasswordStoreInterface, DanglingUntriaged> store_;
   raw_ptr<Consumer> consumer_;
 
   // |ProcessPasswordStoreResults| requires that both |OnHSTSQueryResult| and
diff --git a/components/password_manager/core/browser/leak_detection/bulk_leak_check_impl_unittest.cc b/components/password_manager/core/browser/leak_detection/bulk_leak_check_impl_unittest.cc
index ca2775b..32f2693 100644
--- a/components/password_manager/core/browser/leak_detection/bulk_leak_check_impl_unittest.cc
+++ b/components/password_manager/core/browser/leak_detection/bulk_leak_check_impl_unittest.cc
@@ -110,7 +110,7 @@
   base::test::TaskEnvironment task_env_;
   signin::IdentityTestEnvironment identity_test_env_;
   ::testing::StrictMock<MockBulkLeakCheckDelegateInterface> delegate_;
-  raw_ptr<MockLeakDetectionRequestFactory> request_factory_;
+  raw_ptr<MockLeakDetectionRequestFactory, DanglingUntriaged> request_factory_;
   BulkLeakCheckImpl bulk_check_;
 };
 
diff --git a/components/password_manager/core/browser/leak_detection/leak_detection_check_impl_unittest.cc b/components/password_manager/core/browser/leak_detection/leak_detection_check_impl_unittest.cc
index ec0012f..b60e095 100644
--- a/components/password_manager/core/browser/leak_detection/leak_detection_check_impl_unittest.cc
+++ b/components/password_manager/core/browser/leak_detection/leak_detection_check_impl_unittest.cc
@@ -112,7 +112,7 @@
   base::test::TaskEnvironment task_env_;
   signin::IdentityTestEnvironment identity_test_env_;
   StrictMock<MockLeakDetectionDelegateInterface> delegate_;
-  raw_ptr<MockLeakDetectionRequestFactory> request_factory_;
+  raw_ptr<MockLeakDetectionRequestFactory, DanglingUntriaged> request_factory_;
   base::HistogramTester histogram_tester_;
   base::ScopedMockElapsedTimersForTest mock_elapsed_timers_;
   std::unique_ptr<LeakDetectionCheckImpl> leak_check_;
diff --git a/components/password_manager/core/browser/leak_detection_delegate_unittest.cc b/components/password_manager/core/browser/leak_detection_delegate_unittest.cc
index a94bc545..5145543 100644
--- a/components/password_manager/core/browser/leak_detection_delegate_unittest.cc
+++ b/components/password_manager/core/browser/leak_detection_delegate_unittest.cc
@@ -180,7 +180,8 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   testing::NiceMock<MockPasswordManagerClient> client_;
-  raw_ptr<MockLeakDetectionCheckFactory> mock_factory_ = nullptr;
+  raw_ptr<MockLeakDetectionCheckFactory, DanglingUntriaged> mock_factory_ =
+      nullptr;
   scoped_refptr<MockPasswordStoreInterface> mock_profile_store_ =
       base::MakeRefCounted<testing::StrictMock<MockPasswordStoreInterface>>();
   scoped_refptr<MockPasswordStoreInterface> mock_account_store_ =
diff --git a/components/password_manager/core/browser/password_autofill_manager.h b/components/password_manager/core/browser/password_autofill_manager.h
index b51c358..7bfa2b6 100644
--- a/components/password_manager/core/browser/password_autofill_manager.h
+++ b/components/password_manager/core/browser/password_autofill_manager.h
@@ -214,11 +214,11 @@
   gfx::Image page_favicon_;
 
   // The driver that owns |this|.
-  raw_ptr<PasswordManagerDriver> password_manager_driver_;
+  raw_ptr<PasswordManagerDriver, DanglingUntriaged> password_manager_driver_;
 
   raw_ptr<autofill::AutofillClient> autofill_client_;  // weak
 
-  raw_ptr<PasswordManagerClient> password_client_;
+  raw_ptr<PasswordManagerClient, DanglingUntriaged> password_client_;
 
   // If not null then it will be called in destructor.
   base::OnceClosure deletion_callback_;
diff --git a/components/password_manager/core/browser/password_form_manager_unittest.cc b/components/password_manager/core/browser/password_form_manager_unittest.cc
index 51864bf..1dac963 100644
--- a/components/password_manager/core/browser/password_form_manager_unittest.cc
+++ b/components/password_manager/core/browser/password_form_manager_unittest.cc
@@ -3122,7 +3122,8 @@
   }
 
  private:
-  raw_ptr<NiceMock<MockPasswordSaveManager>> mock_password_save_manager_;
+  raw_ptr<NiceMock<MockPasswordSaveManager>, DanglingUntriaged>
+      mock_password_save_manager_;
 };
 
 TEST_F(
diff --git a/components/password_manager/core/browser/password_manager_unittest.cc b/components/password_manager/core/browser/password_manager_unittest.cc
index e900ec817..3f75718 100644
--- a/components/password_manager/core/browser/password_manager_unittest.cc
+++ b/components/password_manager/core/browser/password_manager_unittest.cc
@@ -647,7 +647,7 @@
   testing::NiceMock<MockAffiliationService> mock_affiliation_service_;
   scoped_refptr<TestPasswordStore> store_;
   scoped_refptr<TestPasswordStore> account_store_;
-  raw_ptr<MockAffiliatedMatchHelper> mock_match_helper_;
+  raw_ptr<MockAffiliatedMatchHelper, DanglingUntriaged> mock_match_helper_;
   MockPasswordReuseManager reuse_manager_;
   testing::NiceMock<MockPasswordManagerClient> client_;
   MockPasswordManagerDriver driver_;
diff --git a/components/password_manager/core/browser/password_requirements_service_unittest.cc b/components/password_manager/core/browser/password_requirements_service_unittest.cc
index 29541ab..101c45c 100644
--- a/components/password_manager/core/browser/password_requirements_service_unittest.cc
+++ b/components/password_manager/core/browser/password_requirements_service_unittest.cc
@@ -56,7 +56,7 @@
   autofill::FieldSignature test_field_signature_{22};
 
   // Weak pointer.
-  raw_ptr<MockPasswordRequirementsSpecFetcher> fetcher_ptr_;
+  raw_ptr<MockPasswordRequirementsSpecFetcher, DanglingUntriaged> fetcher_ptr_;
   PasswordRequirementsService service_;
 };
 
diff --git a/components/password_manager/core/browser/password_save_manager_impl_unittest.cc b/components/password_manager/core/browser/password_save_manager_impl_unittest.cc
index d75be44a..4522fbd 100644
--- a/components/password_manager/core/browser/password_save_manager_impl_unittest.cc
+++ b/components/password_manager/core/browser/password_save_manager_impl_unittest.cc
@@ -401,8 +401,10 @@
   // needs to outlive the latter.
   std::unique_ptr<FakeFormFetcher> fetcher_;
   std::unique_ptr<PasswordSaveManagerImpl> password_save_manager_impl_;
-  raw_ptr<NiceMock<MockFormSaver>> mock_account_form_saver_ = nullptr;
-  raw_ptr<NiceMock<MockFormSaver>> mock_profile_form_saver_ = nullptr;
+  raw_ptr<NiceMock<MockFormSaver>, DanglingUntriaged> mock_account_form_saver_ =
+      nullptr;
+  raw_ptr<NiceMock<MockFormSaver>, DanglingUntriaged> mock_profile_form_saver_ =
+      nullptr;
   NiceMock<MockAutofillDownloadManager> mock_autofill_download_manager_;
 };
 
diff --git a/components/password_manager/core/browser/password_store_unittest.cc b/components/password_manager/core/browser/password_store_unittest.cc
index a56f13a..004faaeb 100644
--- a/components/password_manager/core/browser/password_store_unittest.cc
+++ b/components/password_manager/core/browser/password_store_unittest.cc
@@ -1126,7 +1126,8 @@
   }
 
   scoped_refptr<PasswordStore> store_;
-  raw_ptr<MockAffiliatedMatchHelper> mock_affiliated_match_helper_;
+  raw_ptr<MockAffiliatedMatchHelper, DanglingUntriaged>
+      mock_affiliated_match_helper_;
 };
 
 // Retrieve matching passwords for affiliated groups credentials and make sure
diff --git a/components/payments/content/payment_request_web_contents_manager_unittest.cc b/components/payments/content/payment_request_web_contents_manager_unittest.cc
index 8fc3074..ec2e68be 100644
--- a/components/payments/content/payment_request_web_contents_manager_unittest.cc
+++ b/components/payments/content/payment_request_web_contents_manager_unittest.cc
@@ -44,7 +44,7 @@
   }
 
   // The PaymentRequestWebContentsManager under test.
-  raw_ptr<PaymentRequestWebContentsManager> manager_;
+  raw_ptr<PaymentRequestWebContentsManager, DanglingUntriaged> manager_;
 
  private:
   // Necessary supporting members to create the testing environment.
diff --git a/components/payments/core/payments_profile_comparator.h b/components/payments/core/payments_profile_comparator.h
index 5abe8b0..6579e775 100644
--- a/components/payments/core/payments_profile_comparator.h
+++ b/components/payments/core/payments_profile_comparator.h
@@ -126,7 +126,7 @@
       const autofill::AutofillProfile& profile) const;
 
   mutable std::map<std::string, ProfileFields> cache_;
-  const raw_ref<const PaymentOptionsProvider> options_;
+  const raw_ref<const PaymentOptionsProvider, DanglingUntriaged> options_;
 };
 
 }  // namespace payments
diff --git a/components/performance_manager/graph/frame_node_impl_unittest.cc b/components/performance_manager/graph/frame_node_impl_unittest.cc
index 3554696..1efdbfa 100644
--- a/components/performance_manager/graph/frame_node_impl_unittest.cc
+++ b/components/performance_manager/graph/frame_node_impl_unittest.cc
@@ -163,7 +163,7 @@
   const FrameNode* created_frame_node() { return created_frame_node_; }
 
  private:
-  raw_ptr<const FrameNode> created_frame_node_ = nullptr;
+  raw_ptr<const FrameNode, DanglingUntriaged> created_frame_node_ = nullptr;
 };
 
 using MockObserver = ::testing::StrictMock<LenientMockObserver>;
diff --git a/components/performance_manager/graph/page_node_impl_unittest.cc b/components/performance_manager/graph/page_node_impl_unittest.cc
index b4956b4..50eefe1 100644
--- a/components/performance_manager/graph/page_node_impl_unittest.cc
+++ b/components/performance_manager/graph/page_node_impl_unittest.cc
@@ -272,7 +272,7 @@
   }
 
  private:
-  raw_ptr<const PageNode> notified_page_node_ = nullptr;
+  raw_ptr<const PageNode, DanglingUntriaged> notified_page_node_ = nullptr;
 };
 
 using MockObserver = ::testing::StrictMock<LenientMockObserver>;
diff --git a/components/performance_manager/graph/process_node_impl_unittest.cc b/components/performance_manager/graph/process_node_impl_unittest.cc
index 0472f926..ba61310 100644
--- a/components/performance_manager/graph/process_node_impl_unittest.cc
+++ b/components/performance_manager/graph/process_node_impl_unittest.cc
@@ -141,7 +141,8 @@
   }
 
  private:
-  raw_ptr<const ProcessNode> notified_process_node_ = nullptr;
+  raw_ptr<const ProcessNode, DanglingUntriaged> notified_process_node_ =
+      nullptr;
 };
 
 using MockObserver = ::testing::StrictMock<LenientMockObserver>;
diff --git a/components/performance_manager/metrics/metrics_collector_unittest.cc b/components/performance_manager/metrics/metrics_collector_unittest.cc
index fa33be46..5248e46 100644
--- a/components/performance_manager/metrics/metrics_collector_unittest.cc
+++ b/components/performance_manager/metrics/metrics_collector_unittest.cc
@@ -55,7 +55,7 @@
   base::HistogramTester histogram_tester_;
 
  private:
-  raw_ptr<MetricsCollector> metrics_collector_ = nullptr;
+  raw_ptr<MetricsCollector, DanglingUntriaged> metrics_collector_ = nullptr;
 };
 
 TEST_F(MetricsCollectorTest, FromBackgroundedToFirstTitleUpdatedUMA) {
diff --git a/components/performance_manager/public/v8_memory/v8_detailed_memory.h b/components/performance_manager/public/v8_memory/v8_detailed_memory.h
index 34e1bea67..3ab11afc 100644
--- a/components/performance_manager/public/v8_memory/v8_detailed_memory.h
+++ b/components/performance_manager/public/v8_memory/v8_detailed_memory.h
@@ -485,7 +485,8 @@
   void OnOwnerUnregistered();
 
 #if DCHECK_IS_ON()
-  raw_ptr<const ProcessNode> process_ GUARDED_BY_CONTEXT(sequence_checker_);
+  raw_ptr<const ProcessNode, DanglingUntriaged> process_
+      GUARDED_BY_CONTEXT(sequence_checker_);
 #endif
 
   MeasurementCallback callback_ GUARDED_BY_CONTEXT(sequence_checker_);
diff --git a/components/performance_manager/v8_memory/v8_context_tracker_internal_unittest.cc b/components/performance_manager/v8_memory/v8_context_tracker_internal_unittest.cc
index 42b22bf..eda04dd 100644
--- a/components/performance_manager/v8_memory/v8_context_tracker_internal_unittest.cc
+++ b/components/performance_manager/v8_memory/v8_context_tracker_internal_unittest.cc
@@ -387,7 +387,7 @@
 
   raw_ptr<ProcessData> process_data_ = nullptr;
   raw_ptr<ProcessData> other_process_data_ = nullptr;
-  raw_ptr<ExecutionContextData> ec_data_ = nullptr;
+  raw_ptr<ExecutionContextData, DanglingUntriaged> ec_data_ = nullptr;
 };
 
 }  // namespace
diff --git a/components/performance_manager/v8_memory/v8_memory_test_helpers.h b/components/performance_manager/v8_memory/v8_memory_test_helpers.h
index 478d23e..5e5da38 100644
--- a/components/performance_manager/v8_memory/v8_memory_test_helpers.h
+++ b/components/performance_manager/v8_memory/v8_memory_test_helpers.h
@@ -214,8 +214,8 @@
       override;
 
  private:
-  raw_ptr<content::RenderFrameHost> main_frame_ = nullptr;
-  raw_ptr<content::RenderFrameHost> child_frame_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> main_frame_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged> child_frame_ = nullptr;
   RenderProcessHostId main_process_id_;
   RenderProcessHostId child_process_id_;
 };
diff --git a/components/permissions/chooser_controller.h b/components/permissions/chooser_controller.h
index 53ae3bc..fc444c28 100644
--- a/components/permissions/chooser_controller.h
+++ b/components/permissions/chooser_controller.h
@@ -177,7 +177,7 @@
 
  private:
   std::u16string title_;
-  raw_ptr<View> view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> view_ = nullptr;
 };
 
 }  // namespace permissions
diff --git a/components/permissions/contexts/geolocation_permission_context_unittest.cc b/components/permissions/contexts/geolocation_permission_context_unittest.cc
index e17ed3ff..52f151b 100644
--- a/components/permissions/contexts/geolocation_permission_context_unittest.cc
+++ b/components/permissions/contexts/geolocation_permission_context_unittest.cc
@@ -187,10 +187,11 @@
 
   TestPermissionsClient client_;
   // owned by |BrowserContest::GetPermissionControllerDelegate()|
-  raw_ptr<GeolocationPermissionContext> geolocation_permission_context_ =
-      nullptr;
+  raw_ptr<GeolocationPermissionContext, DanglingUntriaged>
+      geolocation_permission_context_ = nullptr;
   // owned by |geolocation_permission_context_|
-  raw_ptr<TestGeolocationPermissionContextDelegate> delegate_ = nullptr;
+  raw_ptr<TestGeolocationPermissionContextDelegate, DanglingUntriaged>
+      delegate_ = nullptr;
   std::vector<std::unique_ptr<content::WebContents>> extra_tabs_;
   std::vector<std::unique_ptr<MockPermissionPromptFactory>>
       mock_permission_prompt_factories_;
diff --git a/components/permissions/object_permission_context_base.h b/components/permissions/object_permission_context_base.h
index 7ca2830..cca52c2 100644
--- a/components/permissions/object_permission_context_base.h
+++ b/components/permissions/object_permission_context_base.h
@@ -194,7 +194,8 @@
   // Never use the `objects_` member directly outside of this function.
   ObjectMap& objects();
 
-  const raw_ptr<HostContentSettingsMap> host_content_settings_map_;
+  const raw_ptr<HostContentSettingsMap, DanglingUntriaged>
+      host_content_settings_map_;
 
   // In-memory cache that holds the granted objects. Lazy-initialized by first
   // call to `objects()`.
diff --git a/components/permissions/permission_auditing_service.h b/components/permissions/permission_auditing_service.h
index cfc3e65a..f0b44aa 100644
--- a/components/permissions/permission_auditing_service.h
+++ b/components/permissions/permission_auditing_service.h
@@ -104,7 +104,7 @@
   // Lives on the |backend_task_runner_|, and must only be accessed on that
   // sequence. It is safe to assume the database is alive as long as |db_| is
   // non-null.
-  raw_ptr<PermissionAuditingDatabase> db_ = nullptr;
+  raw_ptr<PermissionAuditingDatabase, DanglingUntriaged> db_ = nullptr;
 
   base::RepeatingTimer timer_;
 };
diff --git a/components/permissions/permission_request_manager_unittest.cc b/components/permissions/permission_request_manager_unittest.cc
index 08c4320..365813e 100644
--- a/components/permissions/permission_request_manager_unittest.cc
+++ b/components/permissions/permission_request_manager_unittest.cc
@@ -185,7 +185,7 @@
   MockPermissionRequest iframe_request_other_domain_;
   MockPermissionRequest iframe_request_camera_other_domain_;
   MockPermissionRequest iframe_request_mic_other_domain_;
-  raw_ptr<PermissionRequestManager> manager_;
+  raw_ptr<PermissionRequestManager, DanglingUntriaged> manager_;
   std::unique_ptr<MockPermissionPromptFactory> prompt_factory_;
   TestPermissionsClient client_;
   base::test::ScopedFeatureList feature_list_;
diff --git a/components/policy/content/policy_blocklist_navigation_throttle.h b/components/policy/content/policy_blocklist_navigation_throttle.h
index e4f6750..ea32eb922 100644
--- a/components/policy/content/policy_blocklist_navigation_throttle.h
+++ b/components/policy/content/policy_blocklist_navigation_throttle.h
@@ -47,7 +47,7 @@
                                  ThrottleCheckResult cancel_result);
   SafeSitesNavigationThrottle safe_sites_navigation_throttle_;
 
-  raw_ptr<PolicyBlocklistService> blocklist_service_;
+  raw_ptr<PolicyBlocklistService, DanglingUntriaged> blocklist_service_;
 
   raw_ptr<PrefService> prefs_;
 };
diff --git a/components/policy/content/safe_sites_navigation_throttle.h b/components/policy/content/safe_sites_navigation_throttle.h
index f249bdf..e43ec1a 100644
--- a/components/policy/content/safe_sites_navigation_throttle.h
+++ b/components/policy/content/safe_sites_navigation_throttle.h
@@ -62,7 +62,7 @@
   // Creates the result to be returned when navigation is canceled.
   ThrottleCheckResult CreateCancelResult() const;
 
-  raw_ptr<SafeSearchService> safe_seach_service_;
+  raw_ptr<SafeSearchService, DanglingUntriaged> safe_seach_service_;
 
   const DeferredResultCallback deferred_result_callback_;
 
diff --git a/components/policy/core/common/async_policy_provider_unittest.cc b/components/policy/core/common/async_policy_provider_unittest.cc
index 2747508..62d0b3129 100644
--- a/components/policy/core/common/async_policy_provider_unittest.cc
+++ b/components/policy/core/common/async_policy_provider_unittest.cc
@@ -85,7 +85,7 @@
   base::test::SingleThreadTaskEnvironment task_environment_;
   SchemaRegistry schema_registry_;
   PolicyBundle initial_bundle_;
-  raw_ptr<MockPolicyLoader> loader_;
+  raw_ptr<MockPolicyLoader, DanglingUntriaged> loader_;
   std::unique_ptr<AsyncPolicyProvider> provider_;
 };
 
diff --git a/components/policy/core/common/cloud/component_cloud_policy_service_unittest.cc b/components/policy/core/common/cloud/component_cloud_policy_service_unittest.cc
index 478ff5e..4803d1c 100644
--- a/components/policy/core/common/cloud/component_cloud_policy_service_unittest.cc
+++ b/components/policy/core/common/cloud/component_cloud_policy_service_unittest.cc
@@ -228,8 +228,8 @@
   // |cache_| is owned by the |service_| and is invalid once the |service_|
   // is destroyed.
   std::unique_ptr<ResourceCache> owned_cache_;
-  raw_ptr<ResourceCache> cache_;
-  raw_ptr<MockCloudPolicyClient> client_;
+  raw_ptr<ResourceCache, DanglingUntriaged> cache_;
+  raw_ptr<MockCloudPolicyClient, DanglingUntriaged> client_;
   MockCloudPolicyStore store_;
   CloudPolicyCore core_;
   SchemaRegistry registry_;
diff --git a/components/policy/core/common/cloud/component_cloud_policy_store.h b/components/policy/core/common/cloud/component_cloud_policy_store.h
index b21a501e..8ddccb06 100644
--- a/components/policy/core/common/cloud/component_cloud_policy_store.h
+++ b/components/policy/core/common/cloud/component_cloud_policy_store.h
@@ -154,7 +154,7 @@
                    std::string* error);
 
   const raw_ptr<Delegate> delegate_;
-  const raw_ptr<ResourceCache> cache_;
+  const raw_ptr<ResourceCache, DanglingUntriaged> cache_;
 
   // The following fields contain credentials used for validating the policy.
   std::string username_;
diff --git a/components/policy/core/common/cloud/machine_level_user_cloud_policy_manager_unittest.cc b/components/policy/core/common/cloud/machine_level_user_cloud_policy_manager_unittest.cc
index 1552a624..9fa1abe 100644
--- a/components/policy/core/common/cloud/machine_level_user_cloud_policy_manager_unittest.cc
+++ b/components/policy/core/common/cloud/machine_level_user_cloud_policy_manager_unittest.cc
@@ -53,7 +53,8 @@
   }
 
   SchemaRegistry schema_registry_;
-  raw_ptr<MockMachineLevelUserCloudPolicyStore> store_ = nullptr;
+  raw_ptr<MockMachineLevelUserCloudPolicyStore, DanglingUntriaged> store_ =
+      nullptr;
   std::unique_ptr<MachineLevelUserCloudPolicyManager> manager_;
 };
 
diff --git a/components/policy/core/common/cloud/profile_cloud_policy_manager_unittest.cc b/components/policy/core/common/cloud/profile_cloud_policy_manager_unittest.cc
index 6d0c0d0..142d838 100644
--- a/components/policy/core/common/cloud/profile_cloud_policy_manager_unittest.cc
+++ b/components/policy/core/common/cloud/profile_cloud_policy_manager_unittest.cc
@@ -77,7 +77,7 @@
   // Policy infrastructure.
   SchemaRegistry schema_registry_;
   MockConfigurationPolicyObserver observer_;
-  raw_ptr<MockProfileCloudPolicyStore> store_;  // Not owned.
+  raw_ptr<MockProfileCloudPolicyStore, DanglingUntriaged> store_;  // Not owned.
   std::unique_ptr<ProfileCloudPolicyManager> manager_;
 };
 
diff --git a/components/policy/core/common/cloud/user_cloud_policy_manager_unittest.cc b/components/policy/core/common/cloud/user_cloud_policy_manager_unittest.cc
index 375c493..6ef1ec4 100644
--- a/components/policy/core/common/cloud/user_cloud_policy_manager_unittest.cc
+++ b/components/policy/core/common/cloud/user_cloud_policy_manager_unittest.cc
@@ -77,7 +77,7 @@
   // Policy infrastructure.
   SchemaRegistry schema_registry_;
   MockConfigurationPolicyObserver observer_;
-  raw_ptr<MockUserCloudPolicyStore> store_;  // Not owned.
+  raw_ptr<MockUserCloudPolicyStore, DanglingUntriaged> store_;  // Not owned.
   std::unique_ptr<UserCloudPolicyManager> manager_;
 };
 
diff --git a/components/policy/core/common/schema.h b/components/policy/core/common/schema.h
index cb4a82df..3f54325 100644
--- a/components/policy/core/common/schema.h
+++ b/components/policy/core/common/schema.h
@@ -269,7 +269,7 @@
   void MaskSensitiveValuesRecursive(base::Value* value) const;
 
   scoped_refptr<const InternalStorage> storage_;
-  raw_ptr<const internal::SchemaNode> node_;
+  raw_ptr<const internal::SchemaNode, DanglingUntriaged> node_;
 };
 
 }  // namespace policy
diff --git a/components/power_metrics/system_power_monitor_unittest.cc b/components/power_metrics/system_power_monitor_unittest.cc
index 72ab870..3193a3f7 100644
--- a/components/power_metrics/system_power_monitor_unittest.cc
+++ b/components/power_metrics/system_power_monitor_unittest.cc
@@ -94,8 +94,8 @@
 
  private:
   std::unique_ptr<SystemPowerMonitorHelper> helper_;
-  raw_ptr<FakeDelegate> delegate_;
-  raw_ptr<FakeProvider> provider_;
+  raw_ptr<FakeDelegate, DanglingUntriaged> delegate_;
+  raw_ptr<FakeProvider, DanglingUntriaged> provider_;
 };
 
 class SystemPowerMonitorTest : public testing::Test {
diff --git a/components/privacy_sandbox/privacy_sandbox_settings_impl_unittest.cc b/components/privacy_sandbox/privacy_sandbox_settings_impl_unittest.cc
index e799d90e..7529e87c 100644
--- a/components/privacy_sandbox/privacy_sandbox_settings_impl_unittest.cc
+++ b/components/privacy_sandbox/privacy_sandbox_settings_impl_unittest.cc
@@ -206,7 +206,8 @@
 
  private:
   content::BrowserTaskEnvironment browser_task_environment_;
-  raw_ptr<privacy_sandbox_test_util::MockPrivacySandboxSettingsDelegate>
+  raw_ptr<privacy_sandbox_test_util::MockPrivacySandboxSettingsDelegate,
+          DanglingUntriaged>
       mock_delegate_;
   sync_preferences::TestingPrefServiceSyncable prefs_;
   browsing_topics::MockBrowsingTopicsService mock_browsing_topics_service_;
diff --git a/components/proxy_config/pref_proxy_config_tracker_impl_unittest.cc b/components/proxy_config/pref_proxy_config_tracker_impl_unittest.cc
index acd4e71..c087a4d 100644
--- a/components/proxy_config/pref_proxy_config_tracker_impl_unittest.cc
+++ b/components/proxy_config/pref_proxy_config_tracker_impl_unittest.cc
@@ -108,7 +108,7 @@
 
   base::test::SingleThreadTaskEnvironment task_environment_;
   std::unique_ptr<TestingPrefServiceSimple> pref_service_;
-  raw_ptr<TestProxyConfigService> delegate_service_;  // weak
+  raw_ptr<TestProxyConfigService, DanglingUntriaged> delegate_service_;  // weak
   std::unique_ptr<net::ProxyConfigService> proxy_config_service_;
   net::ProxyConfigWithAnnotation fixed_config_;
   std::unique_ptr<PrefProxyConfigTrackerImpl> proxy_config_tracker_;
diff --git a/components/query_tiles/internal/image_prefetcher_unittest.cc b/components/query_tiles/internal/image_prefetcher_unittest.cc
index b5216152..f2884d3 100644
--- a/components/query_tiles/internal/image_prefetcher_unittest.cc
+++ b/components/query_tiles/internal/image_prefetcher_unittest.cc
@@ -102,7 +102,7 @@
 
  private:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockImageLoader> image_loader_;
+  raw_ptr<MockImageLoader, DanglingUntriaged> image_loader_;
   std::unique_ptr<ImagePrefetcher> image_prefetcher_;
 };
 
diff --git a/components/query_tiles/internal/init_aware_tile_service_unittest.cc b/components/query_tiles/internal/init_aware_tile_service_unittest.cc
index 203ec7b..1ba192716 100644
--- a/components/query_tiles/internal/init_aware_tile_service_unittest.cc
+++ b/components/query_tiles/internal/init_aware_tile_service_unittest.cc
@@ -131,7 +131,7 @@
 
  private:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockInitializableTileService> mock_service_;
+  raw_ptr<MockInitializableTileService, DanglingUntriaged> mock_service_;
   std::unique_ptr<InitAwareTileService> init_aware_service_;
 };
 
diff --git a/components/reading_list/core/dual_reading_list_model_unittest.cc b/components/reading_list/core/dual_reading_list_model_unittest.cc
index 95dd565b..6dd89f3 100644
--- a/components/reading_list/core/dual_reading_list_model_unittest.cc
+++ b/components/reading_list/core/dual_reading_list_model_unittest.cc
@@ -255,8 +255,8 @@
       local_or_syncable_model_storage_ptr_;
   base::WeakPtr<FakeReadingListModelStorage> account_model_storage_ptr_;
   // Owned by `dual_model_` and guaranteed to exist while `dual_model_` exists.
-  raw_ptr<ReadingListModelImpl> local_or_syncable_model_ptr_;
-  raw_ptr<ReadingListModelImpl> account_model_ptr_;
+  raw_ptr<ReadingListModelImpl, DanglingUntriaged> local_or_syncable_model_ptr_;
+  raw_ptr<ReadingListModelImpl, DanglingUntriaged> account_model_ptr_;
   std::unique_ptr<reading_list::DualReadingListModel> dual_model_;
 };
 
diff --git a/components/reduce_accept_language/browser/reduce_accept_language_service_test_util.h b/components/reduce_accept_language/browser/reduce_accept_language_service_test_util.h
index b9c3e33d..236137ac 100644
--- a/components/reduce_accept_language/browser/reduce_accept_language_service_test_util.h
+++ b/components/reduce_accept_language/browser/reduce_accept_language_service_test_util.h
@@ -52,9 +52,9 @@
       const std::vector<std::string>& languages) const;
 
  private:
-  raw_ptr<HostContentSettingsMap> settings_map_ = nullptr;
-  raw_ptr<ReduceAcceptLanguageService> service_ = nullptr;
-  raw_ptr<PrefService> prefs_ = nullptr;
+  raw_ptr<HostContentSettingsMap, DanglingUntriaged> settings_map_ = nullptr;
+  raw_ptr<ReduceAcceptLanguageService, DanglingUntriaged> service_ = nullptr;
+  raw_ptr<PrefService, DanglingUntriaged> prefs_ = nullptr;
 };
 
 }  // namespace reduce_accept_language::test
diff --git a/components/reporting/metrics/periodic_event_collector_unittest.cc b/components/reporting/metrics/periodic_event_collector_unittest.cc
index a138d4c..9c741bdf 100644
--- a/components/reporting/metrics/periodic_event_collector_unittest.cc
+++ b/components/reporting/metrics/periodic_event_collector_unittest.cc
@@ -77,7 +77,7 @@
   std::unique_ptr<FakeReportingSettings> settings_;
   std::unique_ptr<FakeSampler> sampler_;
   std::unique_ptr<FakeEventDetector> event_detector_;
-  raw_ptr<FakeEventDetector> event_detector_ptr_;
+  raw_ptr<FakeEventDetector, DanglingUntriaged> event_detector_ptr_;
 };
 
 TEST_F(PeriodicEventCollectorTest, Default) {
diff --git a/components/safe_browsing/content/browser/browser_url_loader_throttle_unittest.cc b/components/safe_browsing/content/browser/browser_url_loader_throttle_unittest.cc
index 7d6ace8..96495a9 100644
--- a/components/safe_browsing/content/browser/browser_url_loader_throttle_unittest.cc
+++ b/components/safe_browsing/content/browser/browser_url_loader_throttle_unittest.cc
@@ -311,7 +311,7 @@
   std::unique_ptr<BrowserURLLoaderThrottle> throttle_;
   // Owned by |throttle_|. May be deleted before the test completes. Prefer
   // setting it up at the start of the test.
-  raw_ptr<MockSafeBrowsingUrlChecker> url_checker_;
+  raw_ptr<MockSafeBrowsingUrlChecker, DanglingUntriaged> url_checker_;
   scoped_refptr<MockUrlCheckerDelegate> url_checker_delegate_;
   std::unique_ptr<MockThrottleDelegate> throttle_delegate_;
 };
diff --git a/components/safe_browsing/content/browser/password_protection/password_protection_request_content.h b/components/safe_browsing/content/browser/password_protection/password_protection_request_content.h
index 5e3b764..ad40dc5 100644
--- a/components/safe_browsing/content/browser/password_protection/password_protection_request_content.h
+++ b/components/safe_browsing/content/browser/password_protection/password_protection_request_content.h
@@ -153,7 +153,7 @@
 #endif  // BUILDFLAG(IS_ANDROID)
 
   // WebContents of the password protection event.
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 
   // Cancels the request when it is no longer valid.
   std::unique_ptr<RequestCanceler> request_canceler_;
diff --git a/components/safe_browsing/content/browser/password_protection/password_protection_service_unittest.cc b/components/safe_browsing/content/browser/password_protection/password_protection_service_unittest.cc
index 14dfa31..bab32cc 100644
--- a/components/safe_browsing/content/browser/password_protection/password_protection_service_unittest.cc
+++ b/components/safe_browsing/content/browser/password_protection/password_protection_service_unittest.cc
@@ -548,8 +548,8 @@
   base::HistogramTester histograms_;
   content::TestBrowserContext browser_context_;
   content::RenderViewHostTestEnabler rvh_test_enabler_;
-  raw_ptr<StrictMock<MockSafeBrowsingTokenFetcher>> raw_token_fetcher_ =
-      nullptr;
+  raw_ptr<StrictMock<MockSafeBrowsingTokenFetcher>, DanglingUntriaged>
+      raw_token_fetcher_ = nullptr;
   base::test::ScopedFeatureList feature_list_;
   signin::IdentityTestEnvironment identity_test_env_;
 };
diff --git a/components/safe_browsing/core/browser/hashprefix_realtime/hash_realtime_service.h b/components/safe_browsing/core/browser/hashprefix_realtime/hash_realtime_service.h
index f6eafd12..d70856b 100644
--- a/components/safe_browsing/core/browser/hashprefix_realtime/hash_realtime_service.h
+++ b/components/safe_browsing/core/browser/hashprefix_realtime/hash_realtime_service.h
@@ -349,7 +349,7 @@
       get_network_context_;
 
   // Unowned object used for getting and storing cache entries.
-  raw_ptr<VerdictCacheManager> cache_manager_;
+  raw_ptr<VerdictCacheManager, DanglingUntriaged> cache_manager_;
 
   // Unowned object used for getting OHTTP key.
   raw_ptr<OhttpKeyService> ohttp_key_service_;
diff --git a/components/safe_browsing/core/browser/realtime/url_lookup_service_base.h b/components/safe_browsing/core/browser/realtime/url_lookup_service_base.h
index c4267b51..0776689 100644
--- a/components/safe_browsing/core/browser/realtime/url_lookup_service_base.h
+++ b/components/safe_browsing/core/browser/realtime/url_lookup_service_base.h
@@ -256,7 +256,7 @@
   scoped_refptr<network::SharedURLLoaderFactory> url_loader_factory_;
 
   // Unowned object used for getting and storing real time url check cache.
-  raw_ptr<VerdictCacheManager> cache_manager_;
+  raw_ptr<VerdictCacheManager, DanglingUntriaged> cache_manager_;
 
   // All requests that are sent but haven't received a response yet.
   PendingRTLookupRequests pending_requests_;
@@ -268,7 +268,7 @@
   base::RepeatingCallback<ChromeUserPopulation()> get_user_population_callback_;
 
   // Unowned object used to retrieve referrer chains.
-  raw_ptr<ReferrerChainProvider> referrer_chain_provider_;
+  raw_ptr<ReferrerChainProvider, DanglingUntriaged> referrer_chain_provider_;
 
   // Helper object that manages backoff state.
   std::unique_ptr<BackoffOperator> backoff_operator_;
diff --git a/components/safe_browsing/core/browser/realtime/url_lookup_service_unittest.cc b/components/safe_browsing/core/browser/realtime/url_lookup_service_unittest.cc
index 6b59b65..1f4c72d 100644
--- a/components/safe_browsing/core/browser/realtime/url_lookup_service_unittest.cc
+++ b/components/safe_browsing/core/browser/realtime/url_lookup_service_unittest.cc
@@ -290,7 +290,8 @@
   std::unique_ptr<VerdictCacheManager> cache_manager_;
   scoped_refptr<HostContentSettingsMap> content_setting_map_;
   bool token_fetches_configured_in_client_ = false;
-  raw_ptr<TestSafeBrowsingTokenFetcher> raw_token_fetcher_ = nullptr;
+  raw_ptr<TestSafeBrowsingTokenFetcher, DanglingUntriaged> raw_token_fetcher_ =
+      nullptr;
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   sync_preferences::TestingPrefServiceSyncable test_pref_service_;
diff --git a/components/safe_browsing/core/browser/verdict_cache_manager_unittest.cc b/components/safe_browsing/core/browser/verdict_cache_manager_unittest.cc
index f0c3c00..05f0c5e 100644
--- a/components/safe_browsing/core/browser/verdict_cache_manager_unittest.cc
+++ b/components/safe_browsing/core/browser/verdict_cache_manager_unittest.cc
@@ -142,7 +142,8 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   sync_preferences::TestingPrefServiceSyncable test_pref_service_;
-  raw_ptr<MockSafeBrowsingSyncObserver> raw_sync_observer_ = nullptr;
+  raw_ptr<MockSafeBrowsingSyncObserver, DanglingUntriaged> raw_sync_observer_ =
+      nullptr;
 };
 
 TEST_F(VerdictCacheManagerTest, TestCanRetrieveCachedVerdict) {
diff --git a/components/safe_search_api/url_checker_unittest.cc b/components/safe_search_api/url_checker_unittest.cc
index 44bc8f1..f8024a1 100644
--- a/components/safe_search_api/url_checker_unittest.cc
+++ b/components/safe_search_api/url_checker_unittest.cc
@@ -88,7 +88,7 @@
   }
 
   size_t next_url_{0};
-  raw_ptr<FakeURLCheckerClient> fake_client_;
+  raw_ptr<FakeURLCheckerClient, DanglingUntriaged> fake_client_;
   std::unique_ptr<URLChecker> checker_;
   base::test::SingleThreadTaskEnvironment task_environment_;
 };
diff --git a/components/search_provider_logos/logo_service_impl_unittest.cc b/components/search_provider_logos/logo_service_impl_unittest.cc
index 1f3b685..b44947b 100644
--- a/components/search_provider_logos/logo_service_impl_unittest.cc
+++ b/components/search_provider_logos/logo_service_impl_unittest.cc
@@ -421,7 +421,7 @@
   base::test::TaskEnvironment task_environment_;
   TemplateURLService template_url_service_;
   base::SimpleTestClock test_clock_;
-  raw_ptr<NiceMock<MockLogoCache>> logo_cache_;
+  raw_ptr<NiceMock<MockLogoCache>, DanglingUntriaged> logo_cache_;
 
   // Used for mocking |logo_service_| URLs.
   network::TestURLLoaderFactory test_url_loader_factory_;
diff --git a/components/security_interstitials/content/ssl_error_handler.h b/components/security_interstitials/content/ssl_error_handler.h
index 9234cef..89aed3b 100644
--- a/components/security_interstitials/content/ssl_error_handler.h
+++ b/components/security_interstitials/content/ssl_error_handler.h
@@ -256,7 +256,8 @@
   // The below field is unused if captive portal detection is not enabled,
   // which causes a compiler error.
 #if BUILDFLAG(ENABLE_CAPTIVE_PORTAL_DETECTION)
-  raw_ptr<captive_portal::CaptivePortalService> captive_portal_service_;
+  raw_ptr<captive_portal::CaptivePortalService, DanglingUntriaged>
+      captive_portal_service_;
 #endif
 
   base::CallbackListSubscription subscription_;
diff --git a/components/security_interstitials/content/ssl_error_handler_unittest.cc b/components/security_interstitials/content/ssl_error_handler_unittest.cc
index 0fcff73..f619f5f 100644
--- a/components/security_interstitials/content/ssl_error_handler_unittest.cc
+++ b/components/security_interstitials/content/ssl_error_handler_unittest.cc
@@ -351,7 +351,7 @@
   TestingPrefServiceSimple pref_service_;
   std::unique_ptr<captive_portal::CaptivePortalService> captive_portal_service_;
   std::unique_ptr<TestSSLErrorHandler> error_handler_;
-  raw_ptr<TestSSLErrorHandlerDelegate> delegate_;
+  raw_ptr<TestSSLErrorHandlerDelegate, DanglingUntriaged> delegate_;
 };
 
 // A class to test name mismatch errors, where the certificate lacks a
@@ -596,7 +596,7 @@
   TestingPrefServiceSimple pref_service_;
   std::unique_ptr<captive_portal::CaptivePortalService> captive_portal_service_;
   std::unique_ptr<TestSSLErrorHandler> error_handler_;
-  raw_ptr<TestSSLErrorHandlerDelegate> delegate_;
+  raw_ptr<TestSSLErrorHandlerDelegate, DanglingUntriaged> delegate_;
 };
 
 class SSLErrorAssistantProtoCaptivePortalEnabledTest
@@ -760,11 +760,11 @@
 
   net::SSLInfo ssl_info_;
   std::unique_ptr<TestSSLErrorHandler> error_handler_;
-  raw_ptr<TestSSLErrorHandlerDelegate> delegate_;
+  raw_ptr<TestSSLErrorHandlerDelegate, DanglingUntriaged> delegate_;
 
   std::unique_ptr<network_time::FieldTrialTest> field_trial_test_;
-  raw_ptr<base::SimpleTestClock> clock_;
-  raw_ptr<base::SimpleTestTickClock> tick_clock_;
+  raw_ptr<base::SimpleTestClock, DanglingUntriaged> clock_;
+  raw_ptr<base::SimpleTestTickClock, DanglingUntriaged> tick_clock_;
   TestingPrefServiceSimple pref_service_;
   scoped_refptr<network::SharedURLLoaderFactory> shared_url_loader_factory_;
   std::unique_ptr<network_time::NetworkTimeTracker> tracker_;
diff --git a/components/segmentation_platform/embedder/input_delegate/tab_session_source.h b/components/segmentation_platform/embedder/input_delegate/tab_session_source.h
index 066f221f..9a16245 100644
--- a/components/segmentation_platform/embedder/input_delegate/tab_session_source.h
+++ b/components/segmentation_platform/embedder/input_delegate/tab_session_source.h
@@ -64,7 +64,7 @@
                    Tensor& inputs);
 
   const raw_ptr<sync_sessions::SessionSyncService> session_sync_service_;
-  const raw_ptr<TabFetcher> tab_fetcher_;
+  const raw_ptr<TabFetcher, DanglingUntriaged> tab_fetcher_;
 };
 
 }  // namespace segmentation_platform::processing
diff --git a/components/segmentation_platform/embedder/tab_fetcher.h b/components/segmentation_platform/embedder/tab_fetcher.h
index fe58533..de259a8c 100644
--- a/components/segmentation_platform/embedder/tab_fetcher.h
+++ b/components/segmentation_platform/embedder/tab_fetcher.h
@@ -42,14 +42,14 @@
     // An ID for local tab derived from web contents or tab pointer. Do not use
     // the webcontents or tab by casting this pointer. Use the FindTab to fetch
     // the pointer, since the tab or webcontents could have been destroyed.
-    raw_ptr<void> web_contents_data;
+    raw_ptr<void, DanglingUntriaged> web_contents_data;
     raw_ptr<void> tab_android_data;
   };
 
   // Represents a local or foreign tab.
   struct Tab {
     // Local tab's webcontents.
-    raw_ptr<content::WebContents> webcontents{};
+    raw_ptr<content::WebContents, DanglingUntriaged> webcontents{};
     // Local tab's pointer, only available on Android.
     raw_ptr<TabAndroid> tab_android{};
     // Foreign tab's session data.
diff --git a/components/segmentation_platform/internal/data_collection/training_data_cache.h b/components/segmentation_platform/internal/data_collection/training_data_cache.h
index 6b1431d..9385059f 100644
--- a/components/segmentation_platform/internal/data_collection/training_data_cache.h
+++ b/components/segmentation_platform/internal/data_collection/training_data_cache.h
@@ -44,7 +44,7 @@
   TrainingRequestId GenerateNextId();
 
  private:
-  const raw_ptr<SegmentInfoDatabase> segment_info_database_;
+  const raw_ptr<SegmentInfoDatabase, DanglingUntriaged> segment_info_database_;
   TrainingRequestId::Generator request_id_generator;
   base::flat_map<proto::SegmentId,
                  base::flat_map<TrainingRequestId, proto::TrainingData>>
diff --git a/components/segmentation_platform/internal/data_collection/training_data_collector_impl.h b/components/segmentation_platform/internal/data_collection/training_data_collector_impl.h
index 9730716..26bd002e 100644
--- a/components/segmentation_platform/internal/data_collection/training_data_collector_impl.h
+++ b/components/segmentation_platform/internal/data_collection/training_data_collector_impl.h
@@ -141,25 +141,26 @@
                         const proto::SegmentInfo& segment_info,
                         proto::TrainingData& training_data);
 
-  const raw_ptr<SegmentInfoDatabase> segment_info_database_;
+  const raw_ptr<SegmentInfoDatabase, DanglingUntriaged> segment_info_database_;
   const raw_ptr<processing::FeatureListQueryProcessor>
       feature_list_query_processor_;
   const raw_ptr<HistogramSignalHandler> histogram_signal_handler_;
   const raw_ptr<UserActionSignalHandler> user_action_signal_handler_;
-  const raw_ptr<SignalStorageConfig> signal_storage_config_;
-  const raw_ptr<const ConfigHolder> config_holder_;
+  const raw_ptr<SignalStorageConfig, DanglingUntriaged> signal_storage_config_;
+  const raw_ptr<const ConfigHolder, DanglingUntriaged> config_holder_;
   const raw_ptr<base::Clock> clock_;
 
   // Helper class to read/write results to the prefs.
   std::unique_ptr<SegmentationResultPrefs> result_prefs_;
 
-  const raw_ptr<CachedResultProvider> cached_result_provider_;
+  const raw_ptr<CachedResultProvider, DanglingUntriaged>
+      cached_result_provider_;
 
   // Cache class to temporarily store training data in the observation period.
   std::unique_ptr<TrainingDataCache> training_cache_;
 
   // Class to get segment info from default models.
-  const raw_ptr<DefaultModelManager> default_model_manager_;
+  const raw_ptr<DefaultModelManager, DanglingUntriaged> default_model_manager_;
 
   // Hash of histograms for immediate training data collection. When any
   // histogram hash contained in the map is recorded, a UKM message is reported
diff --git a/components/segmentation_platform/internal/data_collection/training_data_collector_impl_unittest.cc b/components/segmentation_platform/internal/data_collection/training_data_collector_impl_unittest.cc
index 2daabf00..eeff40d 100644
--- a/components/segmentation_platform/internal/data_collection/training_data_collector_impl_unittest.cc
+++ b/components/segmentation_platform/internal/data_collection/training_data_collector_impl_unittest.cc
@@ -375,8 +375,10 @@
   NiceMock<processing::MockFeatureListQueryProcessor> feature_list_processor_;
   NiceMock<MockHistogramSignalHandler> histogram_signal_handler_;
   NiceMock<MockUserActionSignalHandler> user_action_signal_handler_;
-  raw_ptr<NiceMock<MockSignalStorageConfig>> signal_storage_config_;
-  raw_ptr<test::TestSegmentInfoDatabase> test_segment_info_db_;
+  raw_ptr<NiceMock<MockSignalStorageConfig>, DanglingUntriaged>
+      signal_storage_config_;
+  raw_ptr<test::TestSegmentInfoDatabase, DanglingUntriaged>
+      test_segment_info_db_;
   std::unique_ptr<TrainingDataCollectorImpl> collector_;
   TestingPrefServiceSimple prefs_;
   std::vector<std::unique_ptr<Config>> configs_;
diff --git a/components/segmentation_platform/internal/database/cached_result_writer_unittest.cc b/components/segmentation_platform/internal/database/cached_result_writer_unittest.cc
index a20d8363..5bf896f 100644
--- a/components/segmentation_platform/internal/database/cached_result_writer_unittest.cc
+++ b/components/segmentation_platform/internal/database/cached_result_writer_unittest.cc
@@ -52,7 +52,7 @@
  protected:
   TestingPrefServiceSimple pref_service_;
   std::unique_ptr<ClientResultPrefs> result_prefs_;
-  raw_ptr<ClientResultPrefs> client_result_prefs_ = nullptr;
+  raw_ptr<ClientResultPrefs, DanglingUntriaged> client_result_prefs_ = nullptr;
   std::unique_ptr<CachedResultWriter> cached_result_writer_;
   base::SimpleTestClock clock_;
 };
diff --git a/components/segmentation_platform/internal/database/segment_info_database_unittest.cc b/components/segmentation_platform/internal/database/segment_info_database_unittest.cc
index 777f377..909cb3e 100644
--- a/components/segmentation_platform/internal/database/segment_info_database_unittest.cc
+++ b/components/segmentation_platform/internal/database/segment_info_database_unittest.cc
@@ -171,7 +171,7 @@
   std::map<std::string, proto::SegmentInfo> db_entries_;
   raw_ptr<leveldb_proto::test::FakeDB<proto::SegmentInfo>> db_{nullptr};
   std::unique_ptr<SegmentInfoDatabase> segment_db_;
-  raw_ptr<SegmentInfoCache> segment_info_cache_;
+  raw_ptr<SegmentInfoCache, DanglingUntriaged> segment_info_cache_;
 };
 
 TEST_F(SegmentInfoDatabaseTest, Get) {
diff --git a/components/segmentation_platform/internal/execution/execution_request.h b/components/segmentation_platform/internal/execution/execution_request.h
index 7d09367..65f5a87 100644
--- a/components/segmentation_platform/internal/execution/execution_request.h
+++ b/components/segmentation_platform/internal/execution/execution_request.h
@@ -47,7 +47,7 @@
   ~ExecutionRequest();
 
   // Required: The segment info to use for model execution.
-  raw_ptr<const proto::SegmentInfo> segment_info = nullptr;
+  raw_ptr<const proto::SegmentInfo, DanglingUntriaged> segment_info = nullptr;
 
   // The model provider used to execute the model.
   raw_ptr<ModelProvider> model_provider = nullptr;
diff --git a/components/segmentation_platform/internal/execution/processing/feature_list_query_processor_unittest.cc b/components/segmentation_platform/internal/execution/processing/feature_list_query_processor_unittest.cc
index f78dd68..c8ec58a 100644
--- a/components/segmentation_platform/internal/execution/processing/feature_list_query_processor_unittest.cc
+++ b/components/segmentation_platform/internal/execution/processing/feature_list_query_processor_unittest.cc
@@ -214,7 +214,7 @@
   MockUkmDataManager ukm_data_manager_;
   std::unique_ptr<StorageService> storage_service_;
   raw_ptr<MockSignalDatabase> signal_database_;
-  raw_ptr<MockFeatureAggregator> feature_aggregator_;
+  raw_ptr<MockFeatureAggregator, DanglingUntriaged> feature_aggregator_;
 
   std::unique_ptr<FeatureListQueryProcessor> feature_list_query_processor_;
 };
diff --git a/components/segmentation_platform/internal/segmentation_platform_service_test_base.h b/components/segmentation_platform/internal/segmentation_platform_service_test_base.h
index 584e82f..6acb7d01 100644
--- a/components/segmentation_platform/internal/segmentation_platform_service_test_base.h
+++ b/components/segmentation_platform/internal/segmentation_platform_service_test_base.h
@@ -64,9 +64,12 @@
   std::map<std::string, proto::SignalData> signal_db_entries_;
   std::map<std::string, proto::SignalStorageConfigs>
       segment_storage_config_db_entries_;
-  raw_ptr<leveldb_proto::test::FakeDB<proto::SegmentInfo>> segment_db_;
-  raw_ptr<leveldb_proto::test::FakeDB<proto::SignalData>> signal_db_;
-  raw_ptr<leveldb_proto::test::FakeDB<proto::SignalStorageConfigs>>
+  raw_ptr<leveldb_proto::test::FakeDB<proto::SegmentInfo>, DanglingUntriaged>
+      segment_db_;
+  raw_ptr<leveldb_proto::test::FakeDB<proto::SignalData>, DanglingUntriaged>
+      signal_db_;
+  raw_ptr<leveldb_proto::test::FakeDB<proto::SignalStorageConfigs>,
+          DanglingUntriaged>
       segment_storage_config_db_;
   TestModelProviderFactory::Data model_provider_data_;
   TestingPrefServiceSimple pref_service_;
diff --git a/components/segmentation_platform/internal/selection/request_dispatcher_unittest.cc b/components/segmentation_platform/internal/selection/request_dispatcher_unittest.cc
index 34e94ae..5898a0f 100644
--- a/components/segmentation_platform/internal/selection/request_dispatcher_unittest.cc
+++ b/components/segmentation_platform/internal/selection/request_dispatcher_unittest.cc
@@ -126,8 +126,8 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<ConfigHolder> config_holder_;
-  raw_ptr<MockRequestHandler> request_handler1_ = nullptr;
-  raw_ptr<MockRequestHandler> request_handler2_ = nullptr;
+  raw_ptr<MockRequestHandler, DanglingUntriaged> request_handler1_ = nullptr;
+  raw_ptr<MockRequestHandler, DanglingUntriaged> request_handler2_ = nullptr;
   std::unique_ptr<RequestDispatcher> request_dispatcher_;
 };
 
diff --git a/components/segmentation_platform/internal/selection/request_handler_unittest.cc b/components/segmentation_platform/internal/selection/request_handler_unittest.cc
index c31cfa5..e46fb7d 100644
--- a/components/segmentation_platform/internal/selection/request_handler_unittest.cc
+++ b/components/segmentation_platform/internal/selection/request_handler_unittest.cc
@@ -74,7 +74,7 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<Config> config_;
-  raw_ptr<MockResultProvider> result_provider_ = nullptr;
+  raw_ptr<MockResultProvider, DanglingUntriaged> result_provider_ = nullptr;
   std::unique_ptr<RequestHandler> request_handler_;
   ExecutionService execution_service_;
 };
diff --git a/components/segmentation_platform/internal/selection/result_refresh_manager.h b/components/segmentation_platform/internal/selection/result_refresh_manager.h
index 8dd30396..fdd763b2 100644
--- a/components/segmentation_platform/internal/selection/result_refresh_manager.h
+++ b/components/segmentation_platform/internal/selection/result_refresh_manager.h
@@ -78,7 +78,7 @@
 
   // Delegate to write results for all clients to prefs if previous results are
   // not present or invalid.
-  const raw_ptr<CachedResultWriter> cached_result_writer_;
+  const raw_ptr<CachedResultWriter, DanglingUntriaged> cached_result_writer_;
 
   // Platform options indicating whether to force refresh results or not.
   const PlatformOptions platform_options_;
diff --git a/components/segmentation_platform/internal/selection/segment_result_provider.cc b/components/segmentation_platform/internal/selection/segment_result_provider.cc
index ce388a67..963b7ed 100644
--- a/components/segmentation_platform/internal/selection/segment_result_provider.cc
+++ b/components/segmentation_platform/internal/selection/segment_result_provider.cc
@@ -121,10 +121,10 @@
                    ResultCallbackWithState callback,
                    bool success);
 
-  const raw_ptr<SegmentInfoDatabase> segment_database_;
+  const raw_ptr<SegmentInfoDatabase, DanglingUntriaged> segment_database_;
   const raw_ptr<SignalStorageConfig> signal_storage_config_;
   const raw_ptr<DefaultModelManager> default_model_manager_;
-  const raw_ptr<ExecutionService> execution_service_;
+  const raw_ptr<ExecutionService, DanglingUntriaged> execution_service_;
   const raw_ptr<base::Clock> clock_;
   const bool force_refresh_results_;
   scoped_refptr<base::SequencedTaskRunner> task_runner_;
diff --git a/components/segmentation_platform/internal/selection/segment_result_provider_unittest.cc b/components/segmentation_platform/internal/selection/segment_result_provider_unittest.cc
index ebc223e..70901f3 100644
--- a/components/segmentation_platform/internal/selection/segment_result_provider_unittest.cc
+++ b/components/segmentation_platform/internal/selection/segment_result_provider_unittest.cc
@@ -173,9 +173,9 @@
   TestModelProviderFactory::Data model_providers_;
   TestModelProviderFactory provider_factory_;
   MockSignalDatabase signal_database_;
-  raw_ptr<processing::MockFeatureListQueryProcessor> mock_query_processor_ =
-      nullptr;
-  raw_ptr<MockModelExecutionManager> mock_execution_manager_;
+  raw_ptr<processing::MockFeatureListQueryProcessor, DanglingUntriaged>
+      mock_query_processor_ = nullptr;
+  raw_ptr<MockModelExecutionManager, DanglingUntriaged> mock_execution_manager_;
   SignalHandler signal_handler_;
   std::unique_ptr<DefaultModelManager> default_manager_;
   std::unique_ptr<ExecutionService> execution_service_;
diff --git a/components/segmentation_platform/internal/selection/segment_selector_impl.h b/components/segmentation_platform/internal/selection/segment_selector_impl.h
index c222811..6cb8ab0f 100644
--- a/components/segmentation_platform/internal/selection/segment_selector_impl.h
+++ b/components/segmentation_platform/internal/selection/segment_selector_impl.h
@@ -130,7 +130,7 @@
   const raw_ptr<DefaultModelManager> default_model_manager_;
 
   // The config for providing configuration params.
-  const raw_ptr<const Config> config_;
+  const raw_ptr<const Config, DanglingUntriaged> config_;
 
   // Delegate that records selected segments to metrics.
   const raw_ptr<FieldTrialRegister> field_trial_register_;
diff --git a/components/segmentation_platform/internal/selection/segment_selector_unittest.cc b/components/segmentation_platform/internal/selection/segment_selector_unittest.cc
index c97ef0e..10bee8e 100644
--- a/components/segmentation_platform/internal/selection/segment_selector_unittest.cc
+++ b/components/segmentation_platform/internal/selection/segment_selector_unittest.cc
@@ -197,12 +197,12 @@
   std::unique_ptr<test::TestSegmentInfoDatabase> segment_database_;
   MockSignalStorageConfig signal_storage_config_;
   std::unique_ptr<DefaultModelManager> default_manager_;
-  raw_ptr<TestSegmentationResultPrefs> prefs_;
+  raw_ptr<TestSegmentationResultPrefs, DanglingUntriaged> prefs_;
   std::unique_ptr<SegmentSelectorImpl> segment_selector_;
   MockTrainingDataCollector training_data_collector_;
-  raw_ptr<processing::MockFeatureListQueryProcessor> mock_query_processor_ =
-      nullptr;
-  raw_ptr<MockModelExecutionManager> mock_execution_manager_;
+  raw_ptr<processing::MockFeatureListQueryProcessor, DanglingUntriaged>
+      mock_query_processor_ = nullptr;
+  raw_ptr<MockModelExecutionManager, DanglingUntriaged> mock_execution_manager_;
   std::unique_ptr<ExecutionService> execution_service_;
 };
 
diff --git a/components/segmentation_platform/internal/service_proxy_impl.h b/components/segmentation_platform/internal/service_proxy_impl.h
index 4e312a1..fbf69ed 100644
--- a/components/segmentation_platform/internal/service_proxy_impl.h
+++ b/components/segmentation_platform/internal/service_proxy_impl.h
@@ -79,7 +79,7 @@
   const bool force_refresh_results_ = false;
   bool is_service_initialized_ = false;
   int service_status_flag_ = 0;
-  const raw_ptr<SegmentInfoDatabase> segment_db_;
+  const raw_ptr<SegmentInfoDatabase, DanglingUntriaged> segment_db_;
   const raw_ptr<DefaultModelManager> default_manager_;
   const raw_ptr<SignalStorageConfig> signal_storage_config_;
   const raw_ptr<const std::vector<std::unique_ptr<Config>>> configs_;
diff --git a/components/segmentation_platform/internal/signals/ukm_observer_unittest.cc b/components/segmentation_platform/internal/signals/ukm_observer_unittest.cc
index a83c286..b09925f6 100644
--- a/components/segmentation_platform/internal/signals/ukm_observer_unittest.cc
+++ b/components/segmentation_platform/internal/signals/ukm_observer_unittest.cc
@@ -113,7 +113,7 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<ukm::TestUkmRecorder> ukm_recorder_;
   std::unique_ptr<UkmObserver> ukm_observer_;
-  raw_ptr<MockUkmDatabase> ukm_database_;
+  raw_ptr<MockUkmDatabase, DanglingUntriaged> ukm_database_;
   std::unique_ptr<UkmDataManagerImpl> ukm_data_manager_;
   TestingPrefServiceSimple prefs_;
 };
diff --git a/components/segmentation_platform/internal/ukm_data_manager_impl.h b/components/segmentation_platform/internal/ukm_data_manager_impl.h
index 6c07b10..99a04505 100644
--- a/components/segmentation_platform/internal/ukm_data_manager_impl.h
+++ b/components/segmentation_platform/internal/ukm_data_manager_impl.h
@@ -52,7 +52,7 @@
   void RunCleanupTask();
 
   int ref_count_ = 0;
-  raw_ptr<UkmObserver> ukm_observer_ = nullptr;
+  raw_ptr<UkmObserver, DanglingUntriaged> ukm_observer_ = nullptr;
   std::unique_ptr<UkmDatabase> ukm_database_;
   std::unique_ptr<UrlSignalHandler> url_signal_handler_;
   std::unique_ptr<UkmConfig> pending_ukm_config_;
diff --git a/components/services/storage/dom_storage/storage_area_impl.h b/components/services/storage/dom_storage/storage_area_impl.h
index 9b131bb..e339470 100644
--- a/components/services/storage/dom_storage/storage_area_impl.h
+++ b/components/services/storage/dom_storage/storage_area_impl.h
@@ -321,7 +321,7 @@
   std::vector<uint8_t> prefix_;
   mojo::ReceiverSet<blink::mojom::StorageArea> receivers_;
   mojo::RemoteSet<blink::mojom::StorageAreaObserver> observers_;
-  raw_ptr<Delegate> delegate_;
+  raw_ptr<Delegate, DanglingUntriaged> delegate_;
   raw_ptr<AsyncDomStorageDatabase> database_;
 
   // For commits to work correctly the map loaded state (keys vs keys & values)
diff --git a/components/services/storage/indexed_db/transactional_leveldb/transactional_leveldb_transaction.h b/components/services/storage/indexed_db/transactional_leveldb/transactional_leveldb_transaction.h
index c3929f3..d07809f 100644
--- a/components/services/storage/indexed_db/transactional_leveldb/transactional_leveldb_transaction.h
+++ b/components/services/storage/indexed_db/transactional_leveldb/transactional_leveldb_transaction.h
@@ -108,7 +108,7 @@
 
   void EvictLoadedIterators();
 
-  const raw_ptr<TransactionalLevelDBDatabase> db_;
+  const raw_ptr<TransactionalLevelDBDatabase, DanglingUntriaged> db_;
   // Non-null until the transaction is committed or rolled back.
   std::unique_ptr<LevelDBScope> scope_;
   bool finished_ = false;
diff --git a/components/sessions/content/content_live_tab.h b/components/sessions/content/content_live_tab.h
index b56c1f93..486b579 100644
--- a/components/sessions/content/content_live_tab.h
+++ b/components/sessions/content/content_live_tab.h
@@ -59,7 +59,7 @@
     return web_contents_->GetController();
   }
 
-  raw_ptr<content::WebContents> web_contents_;
+  raw_ptr<content::WebContents, DanglingUntriaged> web_contents_;
 };
 
 }  // namespace sessions
diff --git a/components/signin/core/browser/about_signin_internals.h b/components/signin/core/browser/about_signin_internals.h
index b4ea433..b3cac8e 100644
--- a/components/signin/core/browser/about_signin_internals.h
+++ b/components/signin/core/browser/about_signin_internals.h
@@ -245,7 +245,7 @@
   raw_ptr<SigninErrorController> signin_error_controller_;
 
   // Weak pointer to the AccountReconcilor.
-  raw_ptr<AccountReconcilor> account_reconcilor_;
+  raw_ptr<AccountReconcilor, DanglingUntriaged> account_reconcilor_;
 
   // Encapsulates the actual signin and token related values.
   // Most of the values are mirrored in the prefs for persistence.
diff --git a/components/signin/internal/identity_manager/account_tracker_service_unittest.cc b/components/signin/internal/identity_manager/account_tracker_service_unittest.cc
index bab31fe..abbde13 100644
--- a/components/signin/internal/identity_manager/account_tracker_service_unittest.cc
+++ b/components/signin/internal/identity_manager/account_tracker_service_unittest.cc
@@ -422,7 +422,7 @@
   FakeProfileOAuth2TokenService fake_oauth2_token_service_;
   std::unique_ptr<AccountFetcherService> account_fetcher_;
   std::unique_ptr<AccountTrackerService> account_tracker_;
-  raw_ptr<FakeAccountCapabilitiesFetcherFactory>
+  raw_ptr<FakeAccountCapabilitiesFetcherFactory, DanglingUntriaged>
       fake_account_capabilities_fetcher_factory_ = nullptr;
   std::vector<TrackingEvent> account_tracker_events_;
 };
diff --git a/components/signin/internal/identity_manager/mutable_profile_oauth2_token_service_delegate.h b/components/signin/internal/identity_manager/mutable_profile_oauth2_token_service_delegate.h
index 52473f9..947a7e6 100644
--- a/components/signin/internal/identity_manager/mutable_profile_oauth2_token_service_delegate.h
+++ b/components/signin/internal/identity_manager/mutable_profile_oauth2_token_service_delegate.h
@@ -196,7 +196,7 @@
   THREAD_CHECKER(thread_checker_);
 
   raw_ptr<SigninClient> client_;
-  raw_ptr<AccountTrackerService> account_tracker_service_;
+  raw_ptr<AccountTrackerService, DanglingUntriaged> account_tracker_service_;
   raw_ptr<network::NetworkConnectionTracker> network_connection_tracker_;
   scoped_refptr<TokenWebData> token_web_data_;
   signin::AccountConsistencyMethod account_consistency_;
diff --git a/components/signin/internal/identity_manager/profile_oauth2_token_service_unittest.cc b/components/signin/internal/identity_manager/profile_oauth2_token_service_unittest.cc
index 110dfa07..ab596c4 100644
--- a/components/signin/internal/identity_manager/profile_oauth2_token_service_unittest.cc
+++ b/components/signin/internal/identity_manager/profile_oauth2_token_service_unittest.cc
@@ -121,9 +121,10 @@
       base::test::SingleThreadTaskEnvironment::MainThreadType::
           IO};  // net:: stuff needs IO
                 // message loop.
-  raw_ptr<network::TestURLLoaderFactory> test_url_loader_factory_ = nullptr;
-  raw_ptr<FakeProfileOAuth2TokenServiceDelegate> delegate_ptr_ =
-      nullptr;  // Not owned.
+  raw_ptr<network::TestURLLoaderFactory, DanglingUntriaged>
+      test_url_loader_factory_ = nullptr;
+  raw_ptr<FakeProfileOAuth2TokenServiceDelegate, DanglingUntriaged>
+      delegate_ptr_ = nullptr;  // Not owned.
   std::unique_ptr<ProfileOAuth2TokenService> oauth2_service_;
   CoreAccountId account_id_;
   TestingOAuth2AccessTokenManagerConsumer consumer_;
diff --git a/components/signin/public/identity_manager/access_token_fetcher.h b/components/signin/public/identity_manager/access_token_fetcher.h
index 19224aa..6bcdefe 100644
--- a/components/signin/public/identity_manager/access_token_fetcher.h
+++ b/components/signin/public/identity_manager/access_token_fetcher.h
@@ -221,10 +221,11 @@
                               AccessTokenInfo access_token_info);
 
   const CoreAccountId account_id_;
-  raw_ptr<ProfileOAuth2TokenService> token_service_;
+  raw_ptr<ProfileOAuth2TokenService, DanglingUntriaged> token_service_;
   // Suppress unused typedef warnings in some compiler builds when DCHECK is
   // disabled.
-  [[maybe_unused]] raw_ptr<PrimaryAccountManager> primary_account_manager_;
+  [[maybe_unused]] raw_ptr<PrimaryAccountManager, DanglingUntriaged>
+      primary_account_manager_;
   scoped_refptr<network::SharedURLLoaderFactory> url_loader_factory_;
   const ScopeSet scopes_;
   const Mode mode_;
diff --git a/components/signin/public/identity_manager/primary_account_access_token_fetcher.h b/components/signin/public/identity_manager/primary_account_access_token_fetcher.h
index ed6dd4b..f35a397 100644
--- a/components/signin/public/identity_manager/primary_account_access_token_fetcher.h
+++ b/components/signin/public/identity_manager/primary_account_access_token_fetcher.h
@@ -242,7 +242,7 @@
                                   AccessTokenInfo access_token_info);
 
   std::string oauth_consumer_name_;
-  raw_ptr<IdentityManager> identity_manager_;
+  raw_ptr<IdentityManager, DanglingUntriaged> identity_manager_;
   ScopeSet scopes_;
 
   // Per the contract of this class, it is allowed for clients to delete this
diff --git a/components/site_engagement/content/site_engagement_service.h b/components/site_engagement/content/site_engagement_service.h
index 689ee11..b765461 100644
--- a/components/site_engagement/content/site_engagement_service.h
+++ b/components/site_engagement/content/site_engagement_service.h
@@ -302,7 +302,7 @@
   void AddObserver(SiteEngagementObserver* observer);
   void RemoveObserver(SiteEngagementObserver* observer);
 
-  raw_ptr<content::BrowserContext> browser_context_;
+  raw_ptr<content::BrowserContext, DanglingUntriaged> browser_context_;
 
   // The clock used to vend times.
   raw_ptr<base::Clock> clock_;
diff --git a/components/storage_monitor/media_storage_util_unittest.cc b/components/storage_monitor/media_storage_util_unittest.cc
index 6efe8110..6da4d6f 100644
--- a/components/storage_monitor/media_storage_util_unittest.cc
+++ b/components/storage_monitor/media_storage_util_unittest.cc
@@ -72,7 +72,7 @@
 
  private:
   content::BrowserTaskEnvironment task_environment_;
-  raw_ptr<TestStorageMonitor> monitor_;
+  raw_ptr<TestStorageMonitor, DanglingUntriaged> monitor_;
   base::ScopedTempDir scoped_temp_dir_;
 };
 
diff --git a/components/subresource_filter/content/browser/activation_state_computing_navigation_throttle_unittest.cc b/components/subresource_filter/content/browser/activation_state_computing_navigation_throttle_unittest.cc
index 52fbae93..78f65e4 100644
--- a/components/subresource_filter/content/browser/activation_state_computing_navigation_throttle_unittest.cc
+++ b/components/subresource_filter/content/browser/activation_state_computing_navigation_throttle_unittest.cc
@@ -248,7 +248,8 @@
   absl::optional<mojom::ActivationState> parent_activation_state_;
 
   // Needed for potential cross process navigations which swap hosts.
-  raw_ptr<content::RenderFrameHost> last_committed_frame_host_ = nullptr;
+  raw_ptr<content::RenderFrameHost, DanglingUntriaged>
+      last_committed_frame_host_ = nullptr;
 
   bool dryrun_speculation_;
 };
diff --git a/components/subresource_filter/content/browser/child_frame_navigation_filtering_throttle.h b/components/subresource_filter/content/browser/child_frame_navigation_filtering_throttle.h
index 33741b9..4295e1184 100644
--- a/components/subresource_filter/content/browser/child_frame_navigation_filtering_throttle.h
+++ b/components/subresource_filter/content/browser/child_frame_navigation_filtering_throttle.h
@@ -94,7 +94,8 @@
   void ResumeNavigation();
 
   // Must outlive this class.
-  raw_ptr<AsyncDocumentSubresourceFilter> parent_frame_filter_;
+  raw_ptr<AsyncDocumentSubresourceFilter, DanglingUntriaged>
+      parent_frame_filter_;
 
   int pending_load_policy_calculations_ = 0;
   DeferStage defer_stage_ = DeferStage::kNotDeferring;
diff --git a/components/subresource_filter/content/browser/content_subresource_filter_throttle_manager.h b/components/subresource_filter/content/browser/content_subresource_filter_throttle_manager.h
index 45dc9db..b1d932f 100644
--- a/components/subresource_filter/content/browser/content_subresource_filter_throttle_manager.h
+++ b/components/subresource_filter/content/browser/content_subresource_filter_throttle_manager.h
@@ -405,7 +405,7 @@
   bool current_committed_load_has_notified_disallowed_load_ = false;
 
   // This member outlives this class.
-  raw_ptr<VerifiedRulesetDealer::Handle> dealer_handle_;
+  raw_ptr<VerifiedRulesetDealer::Handle, DanglingUntriaged> dealer_handle_;
 
   scoped_refptr<safe_browsing::SafeBrowsingDatabaseManager> database_manager_;
 
diff --git a/components/subresource_filter/content/browser/content_subresource_filter_web_contents_helper.h b/components/subresource_filter/content/browser/content_subresource_filter_web_contents_helper.h
index 6ccdfd77..7ba1f1c 100644
--- a/components/subresource_filter/content/browser/content_subresource_filter_web_contents_helper.h
+++ b/components/subresource_filter/content/browser/content_subresource_filter_web_contents_helper.h
@@ -173,10 +173,10 @@
 
  private:
   DebugCrashWebContentsObserver debug_crash_observer_;
-  raw_ptr<SubresourceFilterProfileContext> profile_context_;
+  raw_ptr<SubresourceFilterProfileContext, DanglingUntriaged> profile_context_;
 
   scoped_refptr<safe_browsing::SafeBrowsingDatabaseManager> database_manager_;
-  raw_ptr<VerifiedRulesetDealer::Handle> dealer_handle_;
+  raw_ptr<VerifiedRulesetDealer::Handle, DanglingUntriaged> dealer_handle_;
 
   // Set of frames across all pages in this WebContents that have had at least
   // one committed or aborted navigation. Keyed by FrameTreeNode ID.
diff --git a/components/subresource_filter/content/browser/profile_interaction_manager.h b/components/subresource_filter/content/browser/profile_interaction_manager.h
index b59166e..32257602a 100644
--- a/components/subresource_filter/content/browser/profile_interaction_manager.h
+++ b/components/subresource_filter/content/browser/profile_interaction_manager.h
@@ -78,7 +78,8 @@
   raw_ptr<content::Page> page_ = nullptr;
 
   // Unowned and must outlive this object.
-  raw_ptr<SubresourceFilterProfileContext> profile_context_ = nullptr;
+  raw_ptr<SubresourceFilterProfileContext, DanglingUntriaged> profile_context_ =
+      nullptr;
 
   bool ads_violation_triggered_for_last_committed_navigation_ = false;
 
diff --git a/components/sync/engine/cycle/sync_cycle.h b/components/sync/engine/cycle/sync_cycle.h
index 2c70c38..9a63d39 100644
--- a/components/sync/engine/cycle/sync_cycle.h
+++ b/components/sync/engine/cycle/sync_cycle.h
@@ -118,7 +118,7 @@
 
  private:
   // The context for this cycle, guaranteed to outlive |this|.
-  const raw_ptr<SyncCycleContext> context_;
+  const raw_ptr<SyncCycleContext, DanglingUntriaged> context_;
 
   // The delegate for this cycle, must never be null.
   const raw_ptr<Delegate> delegate_;
diff --git a/components/sync/engine/cycle/sync_cycle_context.h b/components/sync/engine/cycle/sync_cycle_context.h
index 2f3cb00..ee70ceb 100644
--- a/components/sync/engine/cycle/sync_cycle_context.h
+++ b/components/sync/engine/cycle/sync_cycle_context.h
@@ -134,7 +134,7 @@
  private:
   base::ObserverList<SyncEngineEventListener>::Unchecked listeners_;
 
-  const raw_ptr<ServerConnectionManager> connection_manager_;
+  const raw_ptr<ServerConnectionManager, DanglingUntriaged> connection_manager_;
 
   // We use this to stuff extensions activity into CommitMessages so the server
   // can correlate commit traffic with extension-related bookmark mutations.
@@ -158,7 +158,7 @@
 
   // We use this to get debug info to send to the server for debugging
   // client behavior on server side.
-  const raw_ptr<DebugInfoGetter> debug_info_getter_;
+  const raw_ptr<DebugInfoGetter, DanglingUntriaged> debug_info_getter_;
 
   raw_ptr<ModelTypeRegistry> model_type_registry_;
 
diff --git a/components/sync/engine/model_type_worker_unittest.cc b/components/sync/engine/model_type_worker_unittest.cc
index 532e8e3..28eaba0 100644
--- a/components/sync/engine/model_type_worker_unittest.cc
+++ b/components/sync/engine/model_type_worker_unittest.cc
@@ -506,7 +506,8 @@
 
   // Non-owned, possibly null pointer. This object belongs to the
   // ModelTypeWorker under test.
-  raw_ptr<MockModelTypeProcessor> mock_type_processor_ = nullptr;
+  raw_ptr<MockModelTypeProcessor, DanglingUntriaged> mock_type_processor_ =
+      nullptr;
 
   // A mock that emulates enough of the sync server that it can be used
   // a single UpdateHandler and CommitContributor pair. In this test
diff --git a/components/sync/engine/sync_manager_impl_unittest.cc b/components/sync/engine/sync_manager_impl_unittest.cc
index 0fad75a..ae53e06b 100644
--- a/components/sync/engine/sync_manager_impl_unittest.cc
+++ b/components/sync/engine/sync_manager_impl_unittest.cc
@@ -223,7 +223,7 @@
   // Owned by |sync_manager_|.
   raw_ptr<StrictMock<SyncEncryptionHandlerObserverMock>> encryption_observer_ =
       nullptr;
-  raw_ptr<MockSyncScheduler> scheduler_ = nullptr;
+  raw_ptr<MockSyncScheduler, DanglingUntriaged> scheduler_ = nullptr;
 };
 
 // Test that the configuration params are properly created and sent to
diff --git a/components/sync/engine/sync_scheduler_impl_unittest.cc b/components/sync/engine/sync_scheduler_impl_unittest.cc
index 1e86540..2c90db0f 100644
--- a/components/sync/engine/sync_scheduler_impl_unittest.cc
+++ b/components/sync/engine/sync_scheduler_impl_unittest.cc
@@ -457,8 +457,8 @@
   std::unique_ptr<SyncCycleContext> context_;
   std::unique_ptr<SyncSchedulerImpl> scheduler_;
   MockNudgeHandler mock_nudge_handler_;
-  raw_ptr<MockSyncer> syncer_ = nullptr;
-  raw_ptr<MockDelayProvider> delay_ = nullptr;
+  raw_ptr<MockSyncer, DanglingUntriaged> syncer_ = nullptr;
+  raw_ptr<MockDelayProvider, DanglingUntriaged> delay_ = nullptr;
   scoped_refptr<ExtensionsActivity> extensions_activity_;
   base::WeakPtrFactory<SyncSchedulerImplTest> weak_ptr_factory_{this};
 };
diff --git a/components/sync/engine/syncer_unittest.cc b/components/sync/engine/syncer_unittest.cc
index c131176..c4fe5f6 100644
--- a/components/sync/engine/syncer_unittest.cc
+++ b/components/sync/engine/syncer_unittest.cc
@@ -252,7 +252,7 @@
   CancelationSignal cancelation_signal_;
   std::map<ModelType, MockModelTypeProcessor> mock_model_type_processors_;
 
-  raw_ptr<Syncer> syncer_ = nullptr;
+  raw_ptr<Syncer, DanglingUntriaged> syncer_ = nullptr;
 
   std::unique_ptr<SyncCycle> cycle_;
   MockNudgeHandler mock_nudge_handler_;
diff --git a/components/sync/model/client_tag_based_model_type_processor.h b/components/sync/model/client_tag_based_model_type_processor.h
index 999eae5..26a3f9d 100644
--- a/components/sync/model/client_tag_based_model_type_processor.h
+++ b/components/sync/model/client_tag_based_model_type_processor.h
@@ -257,7 +257,7 @@
 
   // ModelTypeSyncBridge linked to this processor. The bridge owns this
   // processor instance so the pointer should never become invalid.
-  raw_ptr<ModelTypeSyncBridge> bridge_;
+  raw_ptr<ModelTypeSyncBridge, DanglingUntriaged> bridge_;
 
   // Function to capture and upload a stack trace when an error occurs.
   const base::RepeatingClosure dump_stack_;
diff --git a/components/sync/model/syncable_service_based_bridge.cc b/components/sync/model/syncable_service_based_bridge.cc
index 865585e..e9a473e 100644
--- a/components/sync/model/syncable_service_based_bridge.cc
+++ b/components/sync/model/syncable_service_based_bridge.cc
@@ -204,9 +204,10 @@
   const ModelType type_;
   const base::RepeatingCallback<void(const absl::optional<ModelError>&)>
       error_callback_;
-  const raw_ptr<ModelTypeStore> store_;
-  const raw_ptr<SyncableServiceBasedBridge::InMemoryStore> in_memory_store_;
-  const raw_ptr<ModelTypeChangeProcessor> other_;
+  const raw_ptr<ModelTypeStore, DanglingUntriaged> store_;
+  const raw_ptr<SyncableServiceBasedBridge::InMemoryStore, DanglingUntriaged>
+      in_memory_store_;
+  const raw_ptr<ModelTypeChangeProcessor, DanglingUntriaged> other_;
   SEQUENCE_CHECKER(sequence_checker_);
 };
 
diff --git a/components/sync/nigori/nigori_model_type_processor_unittest.cc b/components/sync/nigori/nigori_model_type_processor_unittest.cc
index 241c920..7716ea0 100644
--- a/components/sync/nigori/nigori_model_type_processor_unittest.cc
+++ b/components/sync/nigori/nigori_model_type_processor_unittest.cc
@@ -167,7 +167,7 @@
  private:
   testing::NiceMock<MockNigoriSyncBridge> mock_nigori_sync_bridge_;
   std::unique_ptr<testing::NiceMock<MockCommitQueue>> mock_commit_queue_;
-  raw_ptr<MockCommitQueue> mock_commit_queue_ptr_;
+  raw_ptr<MockCommitQueue, DanglingUntriaged> mock_commit_queue_ptr_;
   NigoriModelTypeProcessor processor_;
 };
 
diff --git a/components/sync/service/sync_service_impl_unittest.cc b/components/sync/service/sync_service_impl_unittest.cc
index fbcb2d9..7480f5c 100644
--- a/components/sync/service/sync_service_impl_unittest.cc
+++ b/components/sync/service/sync_service_impl_unittest.cc
@@ -256,7 +256,8 @@
   base::test::SingleThreadTaskEnvironment task_environment_;
   SyncServiceImplBundle sync_service_impl_bundle_;
   std::unique_ptr<SyncServiceImpl> service_;
-  raw_ptr<SyncClientMock> sync_client_;  // Owned by |service_|.
+  raw_ptr<SyncClientMock, DanglingUntriaged>
+      sync_client_;  // Owned by |service_|.
   // The controllers are owned by |service_|.
   std::map<ModelType, FakeDataTypeController*> controller_map_;
 };
diff --git a/components/sync/test/mock_model_type_worker.h b/components/sync/test/mock_model_type_worker.h
index 569c6cd8..03117df8 100644
--- a/components/sync/test/mock_model_type_worker.h
+++ b/components/sync/test/mock_model_type_worker.h
@@ -176,7 +176,7 @@
   sync_pb::ModelTypeState model_type_state_;
 
   // A pointer to the processor for this mock worker.
-  raw_ptr<ModelTypeProcessor> processor_;
+  raw_ptr<ModelTypeProcessor, DanglingUntriaged> processor_;
 
   // A record of past commits requests.
   base::circular_deque<CommitRequestDataList> pending_commits_;
diff --git a/components/sync_preferences/pref_service_syncable_unittest.cc b/components/sync_preferences/pref_service_syncable_unittest.cc
index c8795aeb..87bed6e4 100644
--- a/components/sync_preferences/pref_service_syncable_unittest.cc
+++ b/components/sync_preferences/pref_service_syncable_unittest.cc
@@ -512,7 +512,8 @@
   scoped_refptr<user_prefs::PrefRegistrySyncable> pref_registry_ =
       base::MakeRefCounted<user_prefs::PrefRegistrySyncable>();
   // Owned by prefs_;
-  const raw_ptr<PrefNotifierImpl> pref_notifier_ = new PrefNotifierImpl;
+  const raw_ptr<PrefNotifierImpl, DanglingUntriaged> pref_notifier_ =
+      new PrefNotifierImpl;
   scoped_refptr<TestingPrefStore> managed_prefs_ =
       base::MakeRefCounted<TestingPrefStore>();
   scoped_refptr<TestingPrefStore> user_prefs_ =
diff --git a/components/sync_sessions/test_synced_window_delegates_getter.h b/components/sync_sessions/test_synced_window_delegates_getter.h
index 3000ac2..1c045f8 100644
--- a/components/sync_sessions/test_synced_window_delegates_getter.h
+++ b/components/sync_sessions/test_synced_window_delegates_getter.h
@@ -201,7 +201,7 @@
     void NotifySessionRestoreComplete();
 
    private:
-    raw_ptr<LocalSessionEventHandler> handler_ = nullptr;
+    raw_ptr<LocalSessionEventHandler, DanglingUntriaged> handler_ = nullptr;
   };
 
   SyncedWindowDelegateMap delegates_;
diff --git a/components/system_media_controls/linux/system_media_controls_linux.h b/components/system_media_controls/linux/system_media_controls_linux.h
index 983f404..99f537b8 100644
--- a/components/system_media_controls/linux/system_media_controls_linux.h
+++ b/components/system_media_controls/linux/system_media_controls_linux.h
@@ -136,7 +136,7 @@
   std::unique_ptr<DbusProperties> properties_;
 
   scoped_refptr<dbus::Bus> bus_;
-  raw_ptr<dbus::ExportedObject> exported_object_;
+  raw_ptr<dbus::ExportedObject, DanglingUntriaged> exported_object_;
 
   // The generated service name given to |bus_| when requesting ownership.
   const std::string service_name_;
diff --git a/components/translate/content/browser/partial_translate_manager_unittest.cc b/components/translate/content/browser/partial_translate_manager_unittest.cc
index ed52932..3e08d0e 100644
--- a/components/translate/content/browser/partial_translate_manager_unittest.cc
+++ b/components/translate/content/browser/partial_translate_manager_unittest.cc
@@ -55,7 +55,7 @@
 
  protected:
   // Owned by manager_.
-  raw_ptr<FakeContextualSearchDelegate> delegate_;
+  raw_ptr<FakeContextualSearchDelegate, DanglingUntriaged> delegate_;
   std::unique_ptr<PartialTranslateManager> manager_;
 };
 
diff --git a/components/trusted_vault/standalone_trusted_vault_backend_unittest.cc b/components/trusted_vault/standalone_trusted_vault_backend_unittest.cc
index 2b9ab45..a737725 100644
--- a/components/trusted_vault/standalone_trusted_vault_backend_unittest.cc
+++ b/components/trusted_vault/standalone_trusted_vault_backend_unittest.cc
@@ -287,8 +287,9 @@
   base::ScopedTempDir temp_dir_;
   const base::FilePath file_path_;
   const base::FilePath deprecated_file_path_;
-  raw_ptr<testing::NiceMock<MockDelegate>> delegate_;
-  raw_ptr<testing::NiceMock<MockTrustedVaultConnection>> connection_;
+  raw_ptr<testing::NiceMock<MockDelegate>, DanglingUntriaged> delegate_;
+  raw_ptr<testing::NiceMock<MockTrustedVaultConnection>, DanglingUntriaged>
+      connection_;
   base::SimpleTestClock clock_;
   scoped_refptr<StandaloneTrustedVaultBackend> backend_;
 };
diff --git a/components/undo/bookmark_undo_service_test.cc b/components/undo/bookmark_undo_service_test.cc
index 4b7b092..0f9bf8d 100644
--- a/components/undo/bookmark_undo_service_test.cc
+++ b/components/undo/bookmark_undo_service_test.cc
@@ -40,7 +40,7 @@
   }
 
  private:
-  const raw_ptr<BookmarkUndoService> undo_service_;
+  const raw_ptr<BookmarkUndoService, DanglingUntriaged> undo_service_;
 };
 
 class BookmarkUndoServiceTest : public testing::Test {
diff --git a/components/unexportable_keys/unexportable_key_service_impl.h b/components/unexportable_keys/unexportable_key_service_impl.h
index 848d028..c4b6462 100644
--- a/components/unexportable_keys/unexportable_key_service_impl.h
+++ b/components/unexportable_keys/unexportable_key_service_impl.h
@@ -96,7 +96,7 @@
       ServiceErrorOr<scoped_refptr<RefCountedUnexportableSigningKey>>
           key_or_error);
 
-  const raw_ref<UnexportableKeyTaskManager> task_manager_;
+  const raw_ref<UnexportableKeyTaskManager, DanglingUntriaged> task_manager_;
 
   // Helps mapping multiple `FromWrappedSigningKeySlowlyAsync()` requests with
   // the same wrapped key into the same key ID.
diff --git a/components/unified_consent/unified_consent_service_unittest.cc b/components/unified_consent/unified_consent_service_unittest.cc
index 7dd84d8..1a7ff8a 100644
--- a/components/unified_consent/unified_consent_service_unittest.cc
+++ b/components/unified_consent/unified_consent_service_unittest.cc
@@ -42,7 +42,7 @@
   }
 
  private:
-  raw_ptr<syncer::SyncServiceObserver> observer_ = nullptr;
+  raw_ptr<syncer::SyncServiceObserver, DanglingUntriaged> observer_ = nullptr;
 };
 
 }  // namespace
diff --git a/components/update_client/persisted_data.h b/components/update_client/persisted_data.h
index 3286383..c12b1a8 100644
--- a/components/update_client/persisted_data.h
+++ b/components/update_client/persisted_data.h
@@ -148,7 +148,7 @@
 
   SEQUENCE_CHECKER(sequence_checker_);
   raw_ptr<PrefService, DanglingUntriaged> pref_service_;
-  raw_ptr<ActivityDataService> activity_data_service_;
+  raw_ptr<ActivityDataService, DanglingUntriaged> activity_data_service_;
 };
 
 }  // namespace update_client
diff --git a/components/url_formatter/spoof_checks/idn_spoof_checker.h b/components/url_formatter/spoof_checks/idn_spoof_checker.h
index 4d98fa9..036578e 100644
--- a/components/url_formatter/spoof_checks/idn_spoof_checker.h
+++ b/components/url_formatter/spoof_checks/idn_spoof_checker.h
@@ -218,7 +218,7 @@
   // characters that look like digits (but not exclusively actual digits).
   bool IsDigitLookalike(const icu::UnicodeString& label);
 
-  raw_ptr<USpoofChecker> checker_;
+  raw_ptr<USpoofChecker, DanglingUntriaged> checker_;
   icu::UnicodeSet deviation_characters_;
   icu::UnicodeSet non_ascii_latin_letters_;
   icu::UnicodeSet kana_letters_exceptions_;
diff --git a/components/url_formatter/spoof_checks/skeleton_generator.h b/components/url_formatter/spoof_checks/skeleton_generator.h
index 3a8b554d..16e6d1a5 100644
--- a/components/url_formatter/spoof_checks/skeleton_generator.h
+++ b/components/url_formatter/spoof_checks/skeleton_generator.h
@@ -110,7 +110,7 @@
   // hostname without removing its diacritics.
   base::flat_set<char16_t> characters_with_multiple_skeletons_with_diacritics_;
 
-  raw_ptr<const USpoofChecker> checker_;
+  raw_ptr<const USpoofChecker, DanglingUntriaged> checker_;
 };
 
 #endif  // COMPONENTS_URL_FORMATTER_SPOOF_CHECKS_SKELETON_GENERATOR_H_
diff --git a/components/user_education/views/help_bubble_factory_views_unittest.cc b/components/user_education/views/help_bubble_factory_views_unittest.cc
index b74c0e6..1abbc93e 100644
--- a/components/user_education/views/help_bubble_factory_views_unittest.cc
+++ b/components/user_education/views/help_bubble_factory_views_unittest.cc
@@ -76,8 +76,8 @@
 
   test::TestHelpBubbleDelegate test_delegate_;
   HelpBubbleFactoryViews factory_{&test_delegate_};
-  raw_ptr<views::View> contents_view_;
-  raw_ptr<views::View> anchor_view_;
+  raw_ptr<views::View, DanglingUntriaged> contents_view_;
+  raw_ptr<views::View, DanglingUntriaged> anchor_view_;
   std::unique_ptr<views::Widget> widget_;
 };
 
diff --git a/components/user_education/views/help_bubble_view_unittest.cc b/components/user_education/views/help_bubble_view_unittest.cc
index 5f6728b..780e58a 100644
--- a/components/user_education/views/help_bubble_view_unittest.cc
+++ b/components/user_education/views/help_bubble_view_unittest.cc
@@ -103,7 +103,7 @@
   }
 
   test::TestHelpBubbleDelegate test_delegate_;
-  raw_ptr<views::View> view_;
+  raw_ptr<views::View, DanglingUntriaged> view_;
   std::unique_ptr<views::Widget> widget_;
 };
 
@@ -161,9 +161,9 @@
   button3.is_default = false;
   params.buttons.push_back(std::move(button3));
 
-  auto* bubble = new HelpBubbleView(&test_delegate_,
-                                    internal::HelpBubbleAnchorParams{view_},
-                                    std::move(params));
+  auto* bubble = new HelpBubbleView(
+      &test_delegate_, internal::HelpBubbleAnchorParams{view_.get()},
+      std::move(params));
   EXPECT_EQ(kButton1Text, bubble->GetNonDefaultButtonForTesting(0)->GetText());
   EXPECT_EQ(kButton2Text, bubble->GetDefaultButtonForTesting()->GetText());
   EXPECT_EQ(kButton3Text, bubble->GetNonDefaultButtonForTesting(1)->GetText());
diff --git a/components/user_education/views/new_badge_label_unittest.cc b/components/user_education/views/new_badge_label_unittest.cc
index 7217faea..7d98012 100644
--- a/components/user_education/views/new_badge_label_unittest.cc
+++ b/components/user_education/views/new_badge_label_unittest.cc
@@ -56,9 +56,9 @@
 
  private:
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<views::View> contents_ = nullptr;
-  raw_ptr<views::Label> control_label_ = nullptr;
-  raw_ptr<NewBadgeLabel> new_badge_label_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> contents_ = nullptr;
+  raw_ptr<views::Label, DanglingUntriaged> control_label_ = nullptr;
+  raw_ptr<NewBadgeLabel, DanglingUntriaged> new_badge_label_ = nullptr;
 };
 
 TEST_F(NewBadgeLabelTest, NoBadgeReportsSameSizes) {
diff --git a/components/user_education/webui/help_bubble_handler_unittest.cc b/components/user_education/webui/help_bubble_handler_unittest.cc
index 7a6e79dc0..f917ea78 100644
--- a/components/user_education/webui/help_bubble_handler_unittest.cc
+++ b/components/user_education/webui/help_bubble_handler_unittest.cc
@@ -172,8 +172,8 @@
     return test_handler_.get();
   }
 
-  raw_ptr<TestHelpBubbleHandler::MockVisibilityProvider> visibility_provider_ =
-      nullptr;
+  raw_ptr<TestHelpBubbleHandler::MockVisibilityProvider, DanglingUntriaged>
+      visibility_provider_ = nullptr;
   std::unique_ptr<TestHelpBubbleHandler> test_handler_;
   HelpBubbleFactoryRegistry help_bubble_factory_registry_;
 };
diff --git a/components/visitedlink/test/visitedlink_unittest.cc b/components/visitedlink/test/visitedlink_unittest.cc
index 10061132..e00784c 100644
--- a/components/visitedlink/test/visitedlink_unittest.cc
+++ b/components/visitedlink/test/visitedlink_unittest.cc
@@ -734,8 +734,8 @@
   void DeleteRenderProcessHosts() { processes_.clear(); }
 
  private:
-  raw_ptr<content::RenderProcessHostCreationObserver> creation_observer_ =
-      nullptr;
+  raw_ptr<content::RenderProcessHostCreationObserver, DanglingUntriaged>
+      creation_observer_ = nullptr;
 
   std::list<std::unique_ptr<VisitRelayingRenderProcessHost>> processes_;
   std::unique_ptr<VisitCountingContext> context_;
diff --git a/components/viz/service/display/display.h b/components/viz/service/display/display.h
index 32b7ec9a..2ae6aa7 100644
--- a/components/viz/service/display/display.h
+++ b/components/viz/service/display/display.h
@@ -265,7 +265,7 @@
   // Points to the viz-global singleton.
   const raw_ptr<const DebugRendererSettings> debug_settings_;
 
-  raw_ptr<DisplayClient> client_ = nullptr;
+  raw_ptr<DisplayClient, DanglingUntriaged> client_ = nullptr;
   base::ObserverList<DisplayObserver>::Unchecked observers_;
   raw_ptr<SurfaceManager> surface_manager_ = nullptr;
   const FrameSinkId frame_sink_id_;
diff --git a/components/viz/service/display/renderer_pixeltest.cc b/components/viz/service/display/renderer_pixeltest.cc
index 7db0254..70927543 100644
--- a/components/viz/service/display/renderer_pixeltest.cc
+++ b/components/viz/service/display/renderer_pixeltest.cc
@@ -1727,8 +1727,8 @@
 
   std::unique_ptr<AggregatedRenderPass> render_pass_;
   gfx::Rect viewport_rect_;
-  raw_ptr<SharedQuadState> front_quad_state_;
-  raw_ptr<SharedQuadState> back_quad_state_;
+  raw_ptr<SharedQuadState, DanglingUntriaged> front_quad_state_;
+  raw_ptr<SharedQuadState, DanglingUntriaged> back_quad_state_;
   gfx::Rect quad_rect_;
   AggregatedRenderPassList pass_list_;
 };
diff --git a/components/viz/service/frame_sinks/frame_sink_manager_impl.h b/components/viz/service/frame_sinks/frame_sink_manager_impl.h
index e7b3da1..0dc87a58 100644
--- a/components/viz/service/frame_sinks/frame_sink_manager_impl.h
+++ b/components/viz/service/frame_sinks/frame_sink_manager_impl.h
@@ -455,7 +455,7 @@
   //     remote client and |ui_task_runner_| will be nullptr, and calls to
   //     OnFrameTokenChanged() will be directly called (without PostTask) on
   //     |client_|. Used for some unit tests.
-  raw_ptr<mojom::FrameSinkManagerClient> client_ = nullptr;
+  raw_ptr<mojom::FrameSinkManagerClient, DanglingUntriaged> client_ = nullptr;
   mojo::Receiver<mojom::FrameSinkManager> receiver_{this};
 
   base::ObserverList<FrameSinkObserver>::Unchecked observer_list_;
diff --git a/components/viz/test/fake_external_begin_frame_source.h b/components/viz/test/fake_external_begin_frame_source.h
index 55480b2f..9f3442dd 100644
--- a/components/viz/test/fake_external_begin_frame_source.h
+++ b/components/viz/test/fake_external_begin_frame_source.h
@@ -65,7 +65,7 @@
 
   const bool tick_automatically_;
   const double milliseconds_per_frame_;
-  raw_ptr<Client> client_ = nullptr;
+  raw_ptr<Client, DanglingUntriaged> client_ = nullptr;
   bool paused_ = false;
   BeginFrameArgs current_args_;
   uint64_t next_begin_frame_number_ = BeginFrameArgs::kStartingFrameNumber;
diff --git a/components/web_modal/web_contents_modal_dialog_manager_unittest.cc b/components/web_modal/web_contents_modal_dialog_manager_unittest.cc
index cf978966..976d6d3 100644
--- a/components/web_modal/web_contents_modal_dialog_manager_unittest.cc
+++ b/components/web_modal/web_contents_modal_dialog_manager_unittest.cc
@@ -127,7 +127,7 @@
 
   int next_dialog_id;
   std::unique_ptr<TestWebContentsModalDialogManagerDelegate> delegate;
-  raw_ptr<WebContentsModalDialogManager> manager;
+  raw_ptr<WebContentsModalDialogManager, DanglingUntriaged> manager;
   std::unique_ptr<WebContentsModalDialogManager::TestApi> test_api;
 };
 
diff --git a/components/webrtc_logging/common/partial_circular_buffer.h b/components/webrtc_logging/common/partial_circular_buffer.h
index af09d544..9da196d 100644
--- a/components/webrtc_logging/common/partial_circular_buffer.h
+++ b/components/webrtc_logging/common/partial_circular_buffer.h
@@ -58,7 +58,7 @@
   void DoWrite(const uint8_t* input, uint32_t input_size);
 
   // Used for reading and writing.
-  raw_ptr<BufferData> buffer_data_;
+  raw_ptr<BufferData, DanglingUntriaged> buffer_data_;
   uint32_t memory_buffer_size_;
   uint32_t data_size_;
   uint32_t position_;
diff --git a/content/browser/background_fetch/background_fetch_scheduler.h b/content/browser/background_fetch/background_fetch_scheduler.h
index d9a76f4..aa07e80 100644
--- a/content/browser/background_fetch/background_fetch_scheduler.h
+++ b/content/browser/background_fetch/background_fetch_scheduler.h
@@ -164,9 +164,9 @@
       std::map<std::string, std::string> metadata = {});
 
   // Owned by BackgroundFetchContext.
-  raw_ptr<BackgroundFetchDataManager> data_manager_;
+  raw_ptr<BackgroundFetchDataManager, DanglingUntriaged> data_manager_;
   raw_ptr<BackgroundFetchRegistrationNotifier> registration_notifier_;
-  raw_ptr<BackgroundFetchDelegateProxy> delegate_proxy_;
+  raw_ptr<BackgroundFetchDelegateProxy, DanglingUntriaged> delegate_proxy_;
   raw_ptr<DevToolsBackgroundServicesContextImpl> devtools_context_;
 
   BackgroundFetchEventDispatcher event_dispatcher_;
diff --git a/content/browser/background_fetch/storage/get_initialization_data_task.cc b/content/browser/background_fetch/storage/get_initialization_data_task.cc
index f12d0abf..7cd2eea2 100644
--- a/content/browser/background_fetch/storage/get_initialization_data_task.cc
+++ b/content/browser/background_fetch/storage/get_initialization_data_task.cc
@@ -47,7 +47,8 @@
     std::string unique_id;
 
     // The results to report.
-    raw_ptr<BackgroundFetchInitializationData> initialization_data;
+    raw_ptr<BackgroundFetchInitializationData, DanglingUntriaged>
+        initialization_data;
   };
 
   InitializationSubTask(DatabaseTaskHost* host,
diff --git a/content/browser/background_sync/one_shot_background_sync_service_impl_unittest.cc b/content/browser/background_sync/one_shot_background_sync_service_impl_unittest.cc
index b5bb115..9c1a38f 100644
--- a/content/browser/background_sync/one_shot_background_sync_service_impl_unittest.cc
+++ b/content/browser/background_sync/one_shot_background_sync_service_impl_unittest.cc
@@ -66,7 +66,8 @@
       one_shot_sync_service_remote_;
 
   // Owned by |background_sync_context_|
-  raw_ptr<OneShotBackgroundSyncServiceImpl> one_shot_sync_service_impl_;
+  raw_ptr<OneShotBackgroundSyncServiceImpl, DanglingUntriaged>
+      one_shot_sync_service_impl_;
 };
 
 // Tests
diff --git a/content/browser/background_sync/periodic_background_sync_service_impl_unittest.cc b/content/browser/background_sync/periodic_background_sync_service_impl_unittest.cc
index 3ce9325..04b5642 100644
--- a/content/browser/background_sync/periodic_background_sync_service_impl_unittest.cc
+++ b/content/browser/background_sync/periodic_background_sync_service_impl_unittest.cc
@@ -74,7 +74,8 @@
       periodic_sync_service_remote_;
 
   // Owned by |background_sync_context_|
-  raw_ptr<PeriodicBackgroundSyncServiceImpl> periodic_sync_service_impl_;
+  raw_ptr<PeriodicBackgroundSyncServiceImpl, DanglingUntriaged>
+      periodic_sync_service_impl_;
 };
 
 // Tests
diff --git a/content/browser/bluetooth/frame_connected_bluetooth_devices_unittest.cc b/content/browser/bluetooth/frame_connected_bluetooth_devices_unittest.cc
index b833f5a..f13aa6e 100644
--- a/content/browser/bluetooth/frame_connected_bluetooth_devices_unittest.cc
+++ b/content/browser/bluetooth/frame_connected_bluetooth_devices_unittest.cc
@@ -124,15 +124,15 @@
   }
 
  protected:
-  raw_ptr<FrameConnectedBluetoothDevices> map_ptr0_;
-  raw_ptr<FrameConnectedBluetoothDevices> map_ptr1_;
+  raw_ptr<FrameConnectedBluetoothDevices, DanglingUntriaged> map_ptr0_;
+  raw_ptr<FrameConnectedBluetoothDevices, DanglingUntriaged> map_ptr1_;
 
  private:
   mojo::Remote<blink::mojom::WebBluetoothService> service0_;
-  raw_ptr<WebBluetoothServiceImpl> service_ptr0_;
+  raw_ptr<WebBluetoothServiceImpl, DanglingUntriaged> service_ptr0_;
 
   mojo::Remote<blink::mojom::WebBluetoothService> service1_;
-  raw_ptr<WebBluetoothServiceImpl> service_ptr1_;
+  raw_ptr<WebBluetoothServiceImpl, DanglingUntriaged> service_ptr1_;
 
   scoped_refptr<NiceMockBluetoothAdapter> adapter_;
   NiceMockBluetoothDevice device0_;
diff --git a/content/browser/bluetooth/web_bluetooth_service_impl_unittest.cc b/content/browser/bluetooth/web_bluetooth_service_impl_unittest.cc
index c762e7261..fdd99e2 100644
--- a/content/browser/bluetooth/web_bluetooth_service_impl_unittest.cc
+++ b/content/browser/bluetooth/web_bluetooth_service_impl_unittest.cc
@@ -369,7 +369,7 @@
       FramePermissionObserver* observer) override {}
 
  private:
-  raw_ptr<FakeBluetoothScanningPrompt> prompt_ = nullptr;
+  raw_ptr<FakeBluetoothScanningPrompt, DanglingUntriaged> prompt_ = nullptr;
 };
 
 class TestContentBrowserClient : public ContentBrowserClient {
@@ -649,7 +649,7 @@
   }
 
   scoped_refptr<FakeBluetoothAdapter> adapter_;
-  raw_ptr<WebBluetoothServiceImpl> service_ptr_;
+  raw_ptr<WebBluetoothServiceImpl, DanglingUntriaged> service_ptr_;
   mojo::Remote<blink::mojom::WebBluetoothService> service_;
   TestContentBrowserClient browser_client_;
   raw_ptr<ContentBrowserClient> old_browser_client_ = nullptr;
diff --git a/content/browser/browsing_data/browsing_data_remover_impl_unittest.cc b/content/browser/browsing_data/browsing_data_remover_impl_unittest.cc
index 3307a05..eb3502c 100644
--- a/content/browser/browsing_data/browsing_data_remover_impl_unittest.cc
+++ b/content/browser/browsing_data/browsing_data_remover_impl_unittest.cc
@@ -489,7 +489,7 @@
 
  private:
   // Cached pointer to BrowsingDataRemoverImpl for access to testing methods.
-  raw_ptr<BrowsingDataRemoverImpl> remover_;
+  raw_ptr<BrowsingDataRemoverImpl, DanglingUntriaged> remover_;
 
   BrowserTaskEnvironment task_environment_;
   std::unique_ptr<BrowserContext> browser_context_;
diff --git a/content/browser/byte_stream.cc b/content/browser/byte_stream.cc
index 810638d..2fd09954 100644
--- a/content/browser/byte_stream.cc
+++ b/content/browser/byte_stream.cc
@@ -103,7 +103,7 @@
 
   // Only valid to access on peer_task_runner_ if
   // |*peer_lifetime_flag_ == true|
-  raw_ptr<ByteStreamReaderImpl> peer_;
+  raw_ptr<ByteStreamReaderImpl, DanglingUntriaged> peer_;
 };
 
 class ByteStreamReaderImpl : public ByteStreamReader {
@@ -176,7 +176,7 @@
 
   // Only valid to access on peer_task_runner_ if
   // |*peer_lifetime_flag_ == true|
-  raw_ptr<ByteStreamWriterImpl> peer_;
+  raw_ptr<ByteStreamWriterImpl, DanglingUntriaged> peer_;
 };
 
 ByteStreamWriterImpl::ByteStreamWriterImpl(
diff --git a/content/browser/code_cache/generated_code_cache_unittest.cc b/content/browser/code_cache/generated_code_cache_unittest.cc
index 92b852a..f69ffd2 100644
--- a/content/browser/code_cache/generated_code_cache_unittest.cc
+++ b/content/browser/code_cache/generated_code_cache_unittest.cc
@@ -140,7 +140,7 @@
   bool received_;
   bool received_null_;
   base::FilePath cache_path_;
-  raw_ptr<disk_cache::Backend> backend_;
+  raw_ptr<disk_cache::Backend, DanglingUntriaged> backend_;
 };
 
 constexpr char GeneratedCodeCacheTest::kInitialUrl[];
diff --git a/content/browser/compute_pressure/compute_pressure_unittest.cc b/content/browser/compute_pressure/compute_pressure_unittest.cc
index 1788b01..0b159e6 100644
--- a/content/browser/compute_pressure/compute_pressure_unittest.cc
+++ b/content/browser/compute_pressure/compute_pressure_unittest.cc
@@ -56,7 +56,7 @@
   // The reference is immutable, so accessing it is thread-safe. The referenced
   // device::mojom::PressureManager implementation is called synchronously,
   // so it's acceptable to rely on its own thread-safety checks.
-  const raw_ref<device::mojom::PressureManager> manager_;
+  const raw_ref<device::mojom::PressureManager, DanglingUntriaged> manager_;
 };
 
 // Test double for PressureClient that records all updates.
diff --git a/content/browser/fenced_frame/fenced_frame_reporter.h b/content/browser/fenced_frame/fenced_frame_reporter.h
index fc33189..733825a4 100644
--- a/content/browser/fenced_frame/fenced_frame_reporter.h
+++ b/content/browser/fenced_frame/fenced_frame_reporter.h
@@ -283,7 +283,7 @@
 
   // Bound to the lifetime of the browser context. Could be null in Incognito
   // mode or in test.
-  const raw_ptr<AttributionManager> attribution_manager_;
+  const raw_ptr<AttributionManager, DanglingUntriaged> attribution_manager_;
 
   base::flat_map<blink::FencedFrame::ReportingDestination,
                  ReportingDestinationInfo>
diff --git a/content/browser/file_system_access/file_system_access_handle_base.h b/content/browser/file_system_access/file_system_access_handle_base.h
index c790468..2775d5b 100644
--- a/content/browser/file_system_access/file_system_access_handle_base.h
+++ b/content/browser/file_system_access/file_system_access_handle_base.h
@@ -165,7 +165,7 @@
   }
 
   // The FileSystemAccessManagerImpl that owns this instance.
-  const raw_ptr<FileSystemAccessManagerImpl> manager_;
+  const raw_ptr<FileSystemAccessManagerImpl, DanglingUntriaged> manager_;
   base::WeakPtr<WebContents> web_contents_
       GUARDED_BY_CONTEXT(sequence_checker_);
   const BindingContext context_;
diff --git a/content/browser/geolocation/geolocation_service_impl.h b/content/browser/geolocation/geolocation_service_impl.h
index 854c4f7..ca526884 100644
--- a/content/browser/geolocation/geolocation_service_impl.h
+++ b/content/browser/geolocation/geolocation_service_impl.h
@@ -76,9 +76,10 @@
       CreateGeolocationCallback callback,
       blink::mojom::PermissionStatus permission_status);
 
-  raw_ptr<device::mojom::GeolocationContext> geolocation_context_;
+  raw_ptr<device::mojom::GeolocationContext, DanglingUntriaged>
+      geolocation_context_;
   // Note: |render_frame_host_| owns |this| instance.
-  const raw_ptr<RenderFrameHost> render_frame_host_;
+  const raw_ptr<RenderFrameHost, DanglingUntriaged> render_frame_host_;
 
   // Along with each GeolocationService, we store a
   // GeolocationServiceImplContext which primarily exists to manage a
diff --git a/content/browser/idle/idle_manager_unittest.cc b/content/browser/idle/idle_manager_unittest.cc
index 58363864..14a0149 100644
--- a/content/browser/idle/idle_manager_unittest.cc
+++ b/content/browser/idle/idle_manager_unittest.cc
@@ -171,8 +171,8 @@
 
  private:
   std::unique_ptr<IdleManagerImpl> idle_manager_;
-  raw_ptr<MockPermissionManager> permission_manager_;
-  raw_ptr<MockIdleTimeProvider> idle_time_provider_;
+  raw_ptr<MockPermissionManager, DanglingUntriaged> permission_manager_;
+  raw_ptr<MockIdleTimeProvider, DanglingUntriaged> idle_time_provider_;
   std::unique_ptr<ui::test::ScopedIdleProviderForTest>
       scoped_idle_time_provider_;
   NiceMock<MockIdleMonitor> idle_monitor_;
diff --git a/content/browser/indexed_db/indexed_db_backing_store_unittest.cc b/content/browser/indexed_db/indexed_db_backing_store_unittest.cc
index 97fe141e..9bbff6d 100644
--- a/content/browser/indexed_db/indexed_db_backing_store_unittest.cc
+++ b/content/browser/indexed_db/indexed_db_backing_store_unittest.cc
@@ -465,10 +465,11 @@
   scoped_refptr<storage::MockQuotaManagerProxy> quota_manager_proxy_;
   scoped_refptr<IndexedDBContextImpl> idb_context_;
   std::unique_ptr<TestIDBFactory> idb_factory_;
-  raw_ptr<PartitionedLockManager> lock_manager_;
+  raw_ptr<PartitionedLockManager, DanglingUntriaged> lock_manager_;
 
   IndexedDBBucketStateHandle bucket_state_handle_;
-  raw_ptr<TestableIndexedDBBackingStore> backing_store_ = nullptr;
+  raw_ptr<TestableIndexedDBBackingStore, DanglingUntriaged> backing_store_ =
+      nullptr;
   IndexedDBDataLossInfo data_loss_info_;
 
   // Sample keys and values that are consistent.
diff --git a/content/browser/indexed_db/indexed_db_database.h b/content/browser/indexed_db/indexed_db_database.h
index e6fd1faa..385c698 100644
--- a/content/browser/indexed_db/indexed_db_database.h
+++ b/content/browser/indexed_db/indexed_db_database.h
@@ -396,7 +396,7 @@
 
   const Identifier identifier_;
   // TODO(dmurph): Remove the need for this to be here (and then remove it).
-  raw_ptr<IndexedDBFactory> factory_;
+  raw_ptr<IndexedDBFactory, DanglingUntriaged> factory_;
   const raw_ptr<IndexedDBClassFactory> class_factory_;
   std::unique_ptr<IndexedDBMetadataCoding> metadata_coding_;
 
diff --git a/content/browser/indexed_db/indexed_db_database_unittest.cc b/content/browser/indexed_db/indexed_db_database_unittest.cc
index 350844d0..144804aa 100644
--- a/content/browser/indexed_db/indexed_db_database_unittest.cc
+++ b/content/browser/indexed_db/indexed_db_database_unittest.cc
@@ -129,7 +129,8 @@
   scoped_refptr<storage::MockQuotaManager> quota_manager_;
   std::unique_ptr<IndexedDBFakeBackingStore> backing_store_;
   std::unique_ptr<IndexedDBDatabase> db_;
-  raw_ptr<FakeIndexedDBMetadataCoding> metadata_coding_ = nullptr;
+  raw_ptr<FakeIndexedDBMetadataCoding, DanglingUntriaged> metadata_coding_ =
+      nullptr;
   bool error_called_ = false;
 
  private:
@@ -606,7 +607,7 @@
   scoped_refptr<MockIndexedDBDatabaseCallbacks> callbacks_;
   scoped_refptr<IndexedDBContextImpl> indexed_db_context_;
   scoped_refptr<storage::MockQuotaManager> quota_manager_;
-  raw_ptr<IndexedDBTransaction> transaction_ = nullptr;
+  raw_ptr<IndexedDBTransaction, DanglingUntriaged> transaction_ = nullptr;
   PartitionedLockManager lock_manager_;
   bool error_called_ = false;
 
diff --git a/content/browser/indexed_db/indexed_db_tombstone_sweeper.h b/content/browser/indexed_db/indexed_db_tombstone_sweeper.h
index 393165f0..356a983 100644
--- a/content/browser/indexed_db/indexed_db_tombstone_sweeper.h
+++ b/content/browser/indexed_db/indexed_db_tombstone_sweeper.h
@@ -63,7 +63,7 @@
   bool valid_ = false;
   size_t iterations_done_ = 0;
   typename T::const_iterator inner_;
-  raw_ptr<const T> container_ = nullptr;
+  raw_ptr<const T, DanglingUntriaged> container_ = nullptr;
 };
 
 // Sweeps the IndexedDB leveldb database looking for index tombstones. These
diff --git a/content/browser/indexed_db/indexed_db_unittest.cc b/content/browser/indexed_db/indexed_db_unittest.cc
index ae95398a..b7533b912 100644
--- a/content/browser/indexed_db/indexed_db_unittest.cc
+++ b/content/browser/indexed_db/indexed_db_unittest.cc
@@ -70,7 +70,7 @@
 
  private:
   raw_ptr<leveldb::Env> env_ = nullptr;
-  raw_ptr<leveldb::FileLock> lock_ = nullptr;
+  raw_ptr<leveldb::FileLock, DanglingUntriaged> lock_ = nullptr;
 };
 
 std::unique_ptr<LevelDBLock> LockForTesting(const base::FilePath& file_name) {
diff --git a/content/browser/interest_group/ad_auction_service_impl_unittest.cc b/content/browser/interest_group/ad_auction_service_impl_unittest.cc
index d84e0e1..92d858bd 100644
--- a/content/browser/interest_group/ad_auction_service_impl_unittest.cc
+++ b/content/browser/interest_group/ad_auction_service_impl_unittest.cc
@@ -961,7 +961,7 @@
   AllowInterestGroupContentBrowserClient content_browser_client_;
   TestKAnonymityServiceDelegate k_anon_delegate_;
   raw_ptr<ContentBrowserClient> old_content_browser_client_ = nullptr;
-  raw_ptr<InterestGroupManagerImpl> manager_;
+  raw_ptr<InterestGroupManagerImpl, DanglingUntriaged> manager_;
   data_decoder::test::InProcessDataDecoder in_process_data_decoder_;
 
   // Must be destroyed before RenderViewHostTestHarness::TearDown().
diff --git a/content/browser/interest_group/auction_runner_unittest.cc b/content/browser/interest_group/auction_runner_unittest.cc
index 30cbecc..ba3e92b 100644
--- a/content/browser/interest_group/auction_runner_unittest.cc
+++ b/content/browser/interest_group/auction_runner_unittest.cc
@@ -2739,12 +2739,13 @@
   // Set by UseMockWorkletService(). Non-owning reference to the
   // AuctionProcessManager that will be / has been passed to the
   // InterestGroupManager.
-  raw_ptr<MockAuctionProcessManager> mock_auction_process_manager_ = nullptr;
+  raw_ptr<MockAuctionProcessManager, DanglingUntriaged>
+      mock_auction_process_manager_ = nullptr;
 
   // If StartAuction() created a SameProcessAuctionProcessManager for
   // `auction_process_manager_`, this alises it.
   // Reset by other things that set `auction_process_manager_`.
-  raw_ptr<SameProcessAuctionProcessManager>
+  raw_ptr<SameProcessAuctionProcessManager, DanglingUntriaged>
       same_process_auction_process_manager_ = nullptr;
 
   // The TestInterestGroupManager is recreated and repopulated for each auction.
diff --git a/content/browser/interest_group/auction_worklet_manager.h b/content/browser/interest_group/auction_worklet_manager.h
index c701ce38..e25e45f 100644
--- a/content/browser/interest_group/auction_worklet_manager.h
+++ b/content/browser/interest_group/auction_worklet_manager.h
@@ -287,7 +287,8 @@
   const url::Origin& frame_origin() const { return frame_origin_; }
   Delegate* delegate() { return delegate_; }
 
-  const raw_ptr<AuctionProcessManager> auction_process_manager_;
+  const raw_ptr<AuctionProcessManager, DanglingUntriaged>
+      auction_process_manager_;
   const url::Origin top_window_origin_;
   const url::Origin frame_origin_;
   raw_ptr<Delegate> const delegate_;
diff --git a/content/browser/interest_group/interest_group_auction.h b/content/browser/interest_group/interest_group_auction.h
index d64082e3..a10e7fc5 100644
--- a/content/browser/interest_group/interest_group_auction.h
+++ b/content/browser/interest_group/interest_group_auction.h
@@ -358,10 +358,10 @@
 
     // InterestGroup that made the bid. Owned by the BidState of that
     // InterestGroup.
-    const raw_ptr<const blink::InterestGroup> interest_group;
+    const raw_ptr<const blink::InterestGroup, DanglingUntriaged> interest_group;
 
     // Points to the InterestGroupAd within `interest_group`.
-    const raw_ptr<const blink::InterestGroup::Ad> bid_ad;
+    const raw_ptr<const blink::InterestGroup::Ad, DanglingUntriaged> bid_ad;
 
     // `bid_state` of the InterestGroup that made the bid. This should not be
     // written to, except for adding seller debug reporting URLs.
@@ -941,7 +941,7 @@
   const raw_ptr<AuctionMetricsRecorder> auction_metrics_recorder_;
 
   // Configuration of this auction.
-  raw_ptr<const blink::AuctionConfig> config_;
+  raw_ptr<const blink::AuctionConfig, DanglingUntriaged> config_;
 
   // True once all promises in this and component auction's configuration have
   // been resolved. (Note that if `this` is a component auction, it only looks
diff --git a/content/browser/loader/merkle_integrity_source_stream_unittest.cc b/content/browser/loader/merkle_integrity_source_stream_unittest.cc
index cc42c6b..9de767ce 100644
--- a/content/browser/loader/merkle_integrity_source_stream_unittest.cc
+++ b/content/browser/loader/merkle_integrity_source_stream_unittest.cc
@@ -122,7 +122,7 @@
   scoped_refptr<net::IOBuffer> output_buffer_;
   int output_buffer_size_;
 
-  raw_ptr<net::MockSourceStream> source_;
+  raw_ptr<net::MockSourceStream, DanglingUntriaged> source_;
   std::unique_ptr<MerkleIntegritySourceStream> stream_;
 };
 
diff --git a/content/browser/loader/navigation_early_hints_manager.h b/content/browser/loader/navigation_early_hints_manager.h
index 34e8e1a..88869ed 100644
--- a/content/browser/loader/navigation_early_hints_manager.h
+++ b/content/browser/loader/navigation_early_hints_manager.h
@@ -195,8 +195,8 @@
   base::OnceCallback<void(PreloadedResources)>
       preloads_completion_callback_for_testing_;
 
-  raw_ptr<network::mojom::NetworkContext> network_context_for_testing_ =
-      nullptr;
+  raw_ptr<network::mojom::NetworkContext, DanglingUntriaged>
+      network_context_for_testing_ = nullptr;
 };
 
 }  // namespace content
diff --git a/content/browser/loader/prefetch_url_loader_service_context.h b/content/browser/loader/prefetch_url_loader_service_context.h
index 2c2f93a..0aaad5d 100644
--- a/content/browser/loader/prefetch_url_loader_service_context.h
+++ b/content/browser/loader/prefetch_url_loader_service_context.h
@@ -87,7 +87,7 @@
     return loader_factory_receivers_->current_context();
   }
 
-  raw_ptr<BrowserContext> browser_context_ = nullptr;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_ = nullptr;
 
   raw_ref<mojo::ReceiverSet<network::mojom::URLLoaderFactory,
                             std::unique_ptr<BindContext>>>
diff --git a/content/browser/media/audio_stream_monitor_unittest.cc b/content/browser/media/audio_stream_monitor_unittest.cc
index d8e656c..3a33d70d 100644
--- a/content/browser/media/audio_stream_monitor_unittest.cc
+++ b/content/browser/media/audio_stream_monitor_unittest.cc
@@ -163,7 +163,7 @@
   WebContents* web_contents() { return monitor_->web_contents_; }
 
  protected:
-  raw_ptr<AudioStreamMonitor> monitor_;
+  raw_ptr<AudioStreamMonitor, DanglingUntriaged> monitor_;
 
  private:
   void ExpectWasRecentlyAudible() const {
diff --git a/content/browser/media/capture/web_contents_frame_tracker_unittest.cc b/content/browser/media/capture/web_contents_frame_tracker_unittest.cc
index 9c93012..38ae41d3 100644
--- a/content/browser/media/capture/web_contents_frame_tracker_unittest.cc
+++ b/content/browser/media/capture/web_contents_frame_tracker_unittest.cc
@@ -203,7 +203,7 @@
   std::unique_ptr<WebContentsFrameTracker> tracker_;
 
   // Save because the pointed-to location should not change during testing.
-  raw_ptr<SimpleContext> raw_context_;
+  raw_ptr<SimpleContext, DanglingUntriaged> raw_context_;
 };
 
 TEST_F(WebContentsFrameTrackerTest, CalculatesPreferredSizeClampsToView) {
diff --git a/content/browser/media/flinging_renderer_unittest.cc b/content/browser/media/flinging_renderer_unittest.cc
index f022c5b3..1e18090 100644
--- a/content/browser/media/flinging_renderer_unittest.cc
+++ b/content/browser/media/flinging_renderer_unittest.cc
@@ -66,7 +66,8 @@
  protected:
   NiceMock<media::MockRendererClient> renderer_client_;
   std::unique_ptr<MockMediaController> media_controller_;
-  raw_ptr<StrictMock<MockFlingingController>> flinging_controller_;
+  raw_ptr<StrictMock<MockFlingingController>, DanglingUntriaged>
+      flinging_controller_;
   std::unique_ptr<FlingingRenderer> renderer_;
 };
 
diff --git a/content/browser/media/forwarding_audio_stream_factory_unittest.cc b/content/browser/media/forwarding_audio_stream_factory_unittest.cc
index 17df023..8f00b18b 100644
--- a/content/browser/media/forwarding_audio_stream_factory_unittest.cc
+++ b/content/browser/media/forwarding_audio_stream_factory_unittest.cc
@@ -258,7 +258,7 @@
   static const uint32_t kSharedMemoryCount;
   static const bool kEnableAgc;
   MockStreamFactory stream_factory_;
-  raw_ptr<RenderFrameHost> other_rfh_;
+  raw_ptr<RenderFrameHost, DanglingUntriaged> other_rfh_;
   std::unique_ptr<MockBrokerFactory> broker_factory_;
 };
 
diff --git a/content/browser/media/session/media_session_controller_unittest.cc b/content/browser/media/session/media_session_controller_unittest.cc
index 7fdb22a6..f334ce9 100644
--- a/content/browser/media/session/media_session_controller_unittest.cc
+++ b/content/browser/media/session/media_session_controller_unittest.cc
@@ -300,7 +300,8 @@
   MediaPlayerId id_ = MediaPlayerId::CreateMediaPlayerIdForTests();
   std::unique_ptr<MediaSessionController> controller_;
   std::unique_ptr<TestMediaPlayer> media_player_;
-  raw_ptr<FakeAudioFocusDelegate> audio_focus_delegate_ = nullptr;
+  raw_ptr<FakeAudioFocusDelegate, DanglingUntriaged> audio_focus_delegate_ =
+      nullptr;
 };
 
 TEST_F(MediaSessionControllerTest, NoAudioNoSession) {
diff --git a/content/browser/media/session/media_session_impl_service_routing_unittest.cc b/content/browser/media/session/media_session_impl_service_routing_unittest.cc
index e8e18ec3..69df302 100644
--- a/content/browser/media/session/media_session_impl_service_routing_unittest.cc
+++ b/content/browser/media/session/media_session_impl_service_routing_unittest.cc
@@ -226,8 +226,8 @@
     return empty_metadata_.source_title;
   }
 
-  raw_ptr<TestRenderFrameHost> main_frame_;
-  raw_ptr<TestRenderFrameHost> sub_frame_;
+  raw_ptr<TestRenderFrameHost, DanglingUntriaged> main_frame_;
+  raw_ptr<TestRenderFrameHost, DanglingUntriaged> sub_frame_;
 
   using ServiceMap = std::map<TestRenderFrameHost*,
                               std::unique_ptr<MockMediaSessionServiceImpl>>;
@@ -1243,8 +1243,8 @@
   }
 
  protected:
-  raw_ptr<TestRenderFrameHost> fenced_frame_;
-  raw_ptr<TestRenderFrameHost> inner_fenced_frame_;
+  raw_ptr<TestRenderFrameHost, DanglingUntriaged> fenced_frame_;
+  raw_ptr<TestRenderFrameHost, DanglingUntriaged> inner_fenced_frame_;
 
  private:
   base::test::ScopedFeatureList scoped_feature_list_;
diff --git a/content/browser/media/webaudio/audio_context_manager_impl_unittest.cc b/content/browser/media/webaudio/audio_context_manager_impl_unittest.cc
index d9d32568..19b3824 100644
--- a/content/browser/media/webaudio/audio_context_manager_impl_unittest.cc
+++ b/content/browser/media/webaudio/audio_context_manager_impl_unittest.cc
@@ -41,7 +41,8 @@
   base::SimpleTestTickClock& clock() { return clock_; }
 
  private:
-  raw_ptr<AudioContextManagerImpl> audio_context_manager_ = nullptr;
+  raw_ptr<AudioContextManagerImpl, DanglingUntriaged> audio_context_manager_ =
+      nullptr;
   ukm::TestAutoSetUkmRecorder test_ukm_recorder_;
   base::SimpleTestTickClock clock_;
 };
diff --git a/content/browser/notifications/blink_notification_service_impl.h b/content/browser/notifications/blink_notification_service_impl.h
index 1c1a959..e7cc73f 100644
--- a/content/browser/notifications/blink_notification_service_impl.h
+++ b/content/browser/notifications/blink_notification_service_impl.h
@@ -110,7 +110,8 @@
   bool IsValidForNonPersistentNotification();
 
   // The notification context that owns this service instance.
-  raw_ptr<PlatformNotificationContextImpl> notification_context_;
+  raw_ptr<PlatformNotificationContextImpl, DanglingUntriaged>
+      notification_context_;
 
   raw_ptr<BrowserContext> browser_context_;
 
diff --git a/content/browser/notifications/notification_event_dispatcher_impl_unittest.cc b/content/browser/notifications/notification_event_dispatcher_impl_unittest.cc
index 8edf2e9..d0b4aeb 100644
--- a/content/browser/notifications/notification_event_dispatcher_impl_unittest.cc
+++ b/content/browser/notifications/notification_event_dispatcher_impl_unittest.cc
@@ -104,7 +104,7 @@
   };
   // Using a raw pointer because NotificationEventDispatcherImpl is a singleton
   // with private constructor and destructor, so unique_ptr is not an option.
-  raw_ptr<NotificationEventDispatcherImpl> dispatcher_;
+  raw_ptr<NotificationEventDispatcherImpl, DanglingUntriaged> dispatcher_;
 };
 
 TEST_F(NotificationEventDispatcherImplTest,
diff --git a/content/browser/permissions/permission_controller_impl.h b/content/browser/permissions/permission_controller_impl.h
index 409e2b7..dfb09476 100644
--- a/content/browser/permissions/permission_controller_impl.h
+++ b/content/browser/permissions/permission_controller_impl.h
@@ -187,7 +187,7 @@
   SubscriptionsMap subscriptions_;
   SubscriptionId::Generator subscription_id_generator_;
 
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 };
 
 }  // namespace content
diff --git a/content/browser/permissions/permission_service_context_unittest.cc b/content/browser/permissions/permission_service_context_unittest.cc
index 53cb7ec..61a2c60 100644
--- a/content/browser/permissions/permission_service_context_unittest.cc
+++ b/content/browser/permissions/permission_service_context_unittest.cc
@@ -113,9 +113,10 @@
 
  private:
   url::Origin origin_;
-  raw_ptr<PermissionControllerImpl> permission_controller_;
-  raw_ptr<RenderFrameHostImpl> render_frame_host_impl_;
-  raw_ptr<PermissionServiceContext> permission_service_context_;
+  raw_ptr<PermissionControllerImpl, DanglingUntriaged> permission_controller_;
+  raw_ptr<RenderFrameHostImpl, DanglingUntriaged> render_frame_host_impl_;
+  raw_ptr<PermissionServiceContext, DanglingUntriaged>
+      permission_service_context_;
 };
 
 TEST_F(PermissionServiceContextTest, DispatchPermissionChangeEvent) {
diff --git a/content/browser/picture_in_picture/picture_in_picture_service_impl_unittest.cc b/content/browser/picture_in_picture/picture_in_picture_service_impl_unittest.cc
index 268c4ab1..e69a614 100644
--- a/content/browser/picture_in_picture/picture_in_picture_service_impl_unittest.cc
+++ b/content/browser/picture_in_picture/picture_in_picture_service_impl_unittest.cc
@@ -181,7 +181,7 @@
   PictureInPictureTestBrowserClient browser_client_;
   PictureInPictureDelegate delegate_;
   // Will be deleted when the frame is destroyed.
-  raw_ptr<PictureInPictureServiceImpl> service_impl_;
+  raw_ptr<PictureInPictureServiceImpl, DanglingUntriaged> service_impl_;
   // Required to pass a valid PendingRemote to StartSession() in the tests.
   PictureInPictureMediaPlayerReceiver media_player_receiver_;
 };
diff --git a/content/browser/plugin_list_unittest.cc b/content/browser/plugin_list_unittest.cc
index 041a506..b71504f 100644
--- a/content/browser/plugin_list_unittest.cc
+++ b/content/browser/plugin_list_unittest.cc
@@ -68,7 +68,7 @@
 
   // Owns the PluginList but cannot be a std::unique_ptr due to private
   // ctor/dtor.
-  raw_ptr<PluginList> plugin_list_;
+  raw_ptr<PluginList, DanglingUntriaged> plugin_list_;
   WebPluginInfo foo_plugin_;
   WebPluginInfo bar_plugin_;
 };
diff --git a/content/browser/preloading/preconnector_unittest.cc b/content/browser/preloading/preconnector_unittest.cc
index ba61c34..7de5a37f 100644
--- a/content/browser/preloading/preconnector_unittest.cc
+++ b/content/browser/preloading/preconnector_unittest.cc
@@ -49,7 +49,7 @@
 
  private:
   raw_ptr<ContentBrowserClient> old_browser_client_;
-  raw_ptr<MockAnchorElementPreconnector> delegate_;
+  raw_ptr<MockAnchorElementPreconnector, DanglingUntriaged> delegate_;
 };
 
 class PreconnectorTest : public RenderViewHostTestHarness {
diff --git a/content/browser/preloading/prefetch/prefetch_origin_prober.h b/content/browser/preloading/prefetch/prefetch_origin_prober.h
index efb706f7..d500a5b 100644
--- a/content/browser/preloading/prefetch/prefetch_origin_prober.h
+++ b/content/browser/preloading/prefetch/prefetch_origin_prober.h
@@ -72,7 +72,7 @@
                                     const net::AddressList& addresses);
 
   // The current browser context, not owned.
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 
   // The TLS canary url checker.
   std::unique_ptr<PrefetchCanaryChecker> tls_canary_checker_;
diff --git a/content/browser/preloading/prefetch/prefetch_service.h b/content/browser/preloading/prefetch/prefetch_service.h
index 763d248b..25787c7 100644
--- a/content/browser/preloading/prefetch/prefetch_service.h
+++ b/content/browser/preloading/prefetch/prefetch_service.h
@@ -298,7 +298,7 @@
 
   void DumpPrefetchesForDebug() const;
 
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 
   // Delegate provided by embedder that controls specific behavior of |this|.
   // May be nullptr if embedder doesn't provide a delegate.
diff --git a/content/browser/preloading/prefetcher_unittest.cc b/content/browser/preloading/prefetcher_unittest.cc
index 04caf6fb..16896a7b 100644
--- a/content/browser/preloading/prefetcher_unittest.cc
+++ b/content/browser/preloading/prefetcher_unittest.cc
@@ -99,7 +99,7 @@
 
  private:
   raw_ptr<ContentBrowserClient> old_browser_client_;
-  raw_ptr<MockSpeculationHostDelegate> delegate_;
+  raw_ptr<MockSpeculationHostDelegate, DanglingUntriaged> delegate_;
 };
 
 class PrefetcherTest : public RenderViewHostTestHarness {
diff --git a/content/browser/preloading/preloading_decider_unittest.cc b/content/browser/preloading/preloading_decider_unittest.cc
index 347d1e5f..f5ee0af9 100644
--- a/content/browser/preloading/preloading_decider_unittest.cc
+++ b/content/browser/preloading/preloading_decider_unittest.cc
@@ -108,7 +108,7 @@
 
  private:
   raw_ptr<PreloadingDecider> preloading_decider_;
-  raw_ptr<MockPrerenderer> prerenderer_;
+  raw_ptr<MockPrerenderer, DanglingUntriaged> prerenderer_;
   std::unique_ptr<Prerenderer> old_prerenderer_;
 };
 
diff --git a/content/browser/private_aggregation/private_aggregation_manager_impl_unittest.cc b/content/browser/private_aggregation/private_aggregation_manager_impl_unittest.cc
index 0388714..50426ac 100644
--- a/content/browser/private_aggregation/private_aggregation_manager_impl_unittest.cc
+++ b/content/browser/private_aggregation/private_aggregation_manager_impl_unittest.cc
@@ -90,9 +90,9 @@
   BrowserTaskEnvironment task_environment_;
 
   // Keep pointers around for EXPECT_CALL.
-  raw_ptr<MockPrivateAggregationBudgeter> budgeter_;
-  raw_ptr<MockPrivateAggregationHost> host_;
-  raw_ptr<MockAggregationService> aggregation_service_;
+  raw_ptr<MockPrivateAggregationBudgeter, DanglingUntriaged> budgeter_;
+  raw_ptr<MockPrivateAggregationHost, DanglingUntriaged> host_;
+  raw_ptr<MockAggregationService, DanglingUntriaged> aggregation_service_;
 
   testing::StrictMock<PrivateAggregationManagerImplUnderTest> manager_;
 };
diff --git a/content/browser/push_messaging/push_messaging_context.h b/content/browser/push_messaging/push_messaging_context.h
index ad9bfa1..27a8a0d1 100644
--- a/content/browser/push_messaging/push_messaging_context.h
+++ b/content/browser/push_messaging/push_messaging_context.h
@@ -41,7 +41,7 @@
   void OnStorageWiped() override;
 
  private:
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 
   scoped_refptr<ServiceWorkerContextWrapper> service_worker_context_;
 };
diff --git a/content/browser/renderer_host/clipboard_host_impl_unittest.cc b/content/browser/renderer_host/clipboard_host_impl_unittest.cc
index b765c73..fad313f 100644
--- a/content/browser/renderer_host/clipboard_host_impl_unittest.cc
+++ b/content/browser/renderer_host/clipboard_host_impl_unittest.cc
@@ -143,7 +143,7 @@
   ui::Clipboard* system_clipboard() { return clipboard_; }
 
  private:
-  raw_ptr<ui::Clipboard> clipboard_;
+  raw_ptr<ui::Clipboard, DanglingUntriaged> clipboard_;
   mojo::Remote<blink::mojom::ClipboardHost> remote_;
 };
 
@@ -323,10 +323,10 @@
 
  private:
   mojo::Remote<blink::mojom::ClipboardHost> remote_;
-  const raw_ptr<ui::Clipboard> clipboard_;
+  const raw_ptr<ui::Clipboard, DanglingUntriaged> clipboard_;
   // `FakeClipboardHostImpl` is a `DocumentService` and manages its own
   // lifetime.
-  raw_ptr<FakeClipboardHostImpl> fake_clipboard_host_impl_;
+  raw_ptr<FakeClipboardHostImpl, DanglingUntriaged> fake_clipboard_host_impl_;
 };
 
 TEST_F(ClipboardHostImplScanTest,
diff --git a/content/browser/renderer_host/cursor_manager_unittest.cc b/content/browser/renderer_host/cursor_manager_unittest.cc
index b79d2a3..29accba 100644
--- a/content/browser/renderer_host/cursor_manager_unittest.cc
+++ b/content/browser/renderer_host/cursor_manager_unittest.cc
@@ -98,7 +98,7 @@
 
   // Tests should set this to nullptr if they've already triggered its
   // destruction.
-  raw_ptr<MockRenderWidgetHostViewForCursors> top_view_;
+  raw_ptr<MockRenderWidgetHostViewForCursors, DanglingUntriaged> top_view_;
 
   MockRenderWidgetHostDelegate delegate_;
 };
diff --git a/content/browser/renderer_host/document_service_unittest.cc b/content/browser/renderer_host/document_service_unittest.cc
index 23491eb4..417a3fd 100644
--- a/content/browser/renderer_host/document_service_unittest.cc
+++ b/content/browser/renderer_host/document_service_unittest.cc
@@ -81,7 +81,7 @@
     base::RunLoop().RunUntilIdle();
   }
 
-  raw_ptr<RenderFrameHost> main_rfh_ = nullptr;
+  raw_ptr<RenderFrameHost, DanglingUntriaged> main_rfh_ = nullptr;
   mojo::Remote<mojom::Echo> echo_remote_;
   bool is_echo_impl_alive_ = false;
 };
diff --git a/content/browser/renderer_host/input/fling_controller.h b/content/browser/renderer_host/input/fling_controller.h
index 4f1f026..c6cb67d8 100644
--- a/content/browser/renderer_host/input/fling_controller.h
+++ b/content/browser/renderer_host/input/fling_controller.h
@@ -165,7 +165,7 @@
   raw_ptr<FlingControllerEventSenderClient, DanglingUntriaged>
       event_sender_client_;
 
-  raw_ptr<FlingControllerSchedulerClient> scheduler_client_;
+  raw_ptr<FlingControllerSchedulerClient, DanglingUntriaged> scheduler_client_;
 
   // An object tracking the state of touchpad on the delivery of mouse events to
   // the renderer to filter mouse immediately after a touchpad fling canceling
diff --git a/content/browser/renderer_host/input/fling_scheduler.h b/content/browser/renderer_host/input/fling_scheduler.h
index cb39a69..f14d0659 100644
--- a/content/browser/renderer_host/input/fling_scheduler.h
+++ b/content/browser/renderer_host/input/fling_scheduler.h
@@ -41,7 +41,7 @@
 
  protected:
   virtual ui::Compositor* GetCompositor();
-  raw_ptr<RenderWidgetHostImpl> host_;
+  raw_ptr<RenderWidgetHostImpl, DanglingUntriaged> host_;
   base::WeakPtr<FlingController> fling_controller_;
   raw_ptr<ui::Compositor> observed_compositor_ = nullptr;
 
diff --git a/content/browser/renderer_host/input/input_router_impl_unittest.cc b/content/browser/renderer_host/input/input_router_impl_unittest.cc
index 149fdc0..13312f3 100644
--- a/content/browser/renderer_host/input/input_router_impl_unittest.cc
+++ b/content/browser/renderer_host/input/input_router_impl_unittest.cc
@@ -600,7 +600,8 @@
   std::unique_ptr<MockInputRouterImplClient> client_;
   std::unique_ptr<InputRouterImpl> input_router_;
   std::unique_ptr<MockInputDispositionHandler> disposition_handler_;
-  raw_ptr<MockRenderWidgetHostViewForStylusWriting> mock_view_;
+  raw_ptr<MockRenderWidgetHostViewForStylusWriting, DanglingUntriaged>
+      mock_view_;
 
  private:
   content::BrowserTaskEnvironment task_environment_;
diff --git a/content/browser/renderer_host/input/mock_input_disposition_handler.h b/content/browser/renderer_host/input/mock_input_disposition_handler.h
index 2ccc5f7..1f01f342 100644
--- a/content/browser/renderer_host/input/mock_input_disposition_handler.h
+++ b/content/browser/renderer_host/input/mock_input_disposition_handler.h
@@ -89,7 +89,7 @@
                        blink::mojom::InputEventResultSource ack_source,
                        blink::mojom::InputEventResultState ack_result);
 
-  raw_ptr<InputRouter> input_router_;
+  raw_ptr<InputRouter, DanglingUntriaged> input_router_;
 
   size_t ack_count_;
   blink::WebInputEvent::Type ack_event_type_;
diff --git a/content/browser/renderer_host/input/mock_input_router_client.h b/content/browser/renderer_host/input/mock_input_router_client.h
index 3e59c71..d9419b4 100644
--- a/content/browser/renderer_host/input/mock_input_router_client.h
+++ b/content/browser/renderer_host/input/mock_input_router_client.h
@@ -86,7 +86,7 @@
   bool NeedsBeginFrameForFlingProgress() override;
 
  private:
-  raw_ptr<InputRouter> input_router_;
+  raw_ptr<InputRouter, DanglingUntriaged> input_router_;
   int in_flight_event_count_;
 
   blink::mojom::InputEventResultState filter_state_;
diff --git a/content/browser/renderer_host/input/render_widget_host_latency_tracker.h b/content/browser/renderer_host/input/render_widget_host_latency_tracker.h
index c1cca70..e5d497d 100644
--- a/content/browser/renderer_host/input/render_widget_host_latency_tracker.h
+++ b/content/browser/renderer_host/input/render_widget_host_latency_tracker.h
@@ -62,7 +62,8 @@
   // default action prevented. Only valid for single finger gestures.
   bool touch_start_default_prevented_;
 
-  raw_ptr<RenderWidgetHostDelegate> render_widget_host_delegate_;
+  raw_ptr<RenderWidgetHostDelegate, DanglingUntriaged>
+      render_widget_host_delegate_;
 };
 
 }  // namespace content
diff --git a/content/browser/renderer_host/input/synthetic_gesture_controller_unittest.cc b/content/browser/renderer_host/input/synthetic_gesture_controller_unittest.cc
index dce0428..a02c276 100644
--- a/content/browser/renderer_host/input/synthetic_gesture_controller_unittest.cc
+++ b/content/browser/renderer_host/input/synthetic_gesture_controller_unittest.cc
@@ -849,7 +849,7 @@
   base::TimeDelta GetTotalTime() const { return time_ - start_time_; }
 
   content::BrowserTaskEnvironment env_;
-  raw_ptr<MockSyntheticGestureTarget> target_;
+  raw_ptr<MockSyntheticGestureTarget, DanglingUntriaged> target_;
   DummySyntheticGestureControllerDelegate delegate_;
   std::unique_ptr<SyntheticGestureController> controller_;
   base::TimeTicks start_time_;
diff --git a/content/browser/renderer_host/media/audio_input_device_manager.h b/content/browser/renderer_host/media/audio_input_device_manager.h
index 06bc725..810862505 100644
--- a/content/browser/renderer_host/media/audio_input_device_manager.h
+++ b/content/browser/renderer_host/media/audio_input_device_manager.h
@@ -76,7 +76,7 @@
   base::ObserverList<MediaStreamProviderListener>::Unchecked listeners_;
   blink::MediaStreamDevices devices_;
 
-  const raw_ptr<media::AudioSystem> audio_system_;
+  const raw_ptr<media::AudioSystem, DanglingUntriaged> audio_system_;
 };
 
 }  // namespace content
diff --git a/content/browser/renderer_host/media/media_devices_manager.h b/content/browser/renderer_host/media/media_devices_manager.h
index 892cde22..5625908 100644
--- a/content/browser/renderer_host/media/media_devices_manager.h
+++ b/content/browser/renderer_host/media/media_devices_manager.h
@@ -323,7 +323,8 @@
 #endif
 
   bool use_fake_devices_;
-  const raw_ptr<media::AudioSystem> audio_system_;  // not owned
+  const raw_ptr<media::AudioSystem, DanglingUntriaged>
+      audio_system_;  // not owned
   scoped_refptr<VideoCaptureManager> video_capture_manager_;
   StopRemovedInputDeviceCallback stop_removed_input_device_cb_;
   UIInputDeviceChangeCallback ui_input_device_change_cb_;
diff --git a/content/browser/renderer_host/media/media_devices_manager_unittest.cc b/content/browser/renderer_host/media/media_devices_manager_unittest.cc
index 885eee9..efea739 100644
--- a/content/browser/renderer_host/media/media_devices_manager_unittest.cc
+++ b/content/browser/renderer_host/media/media_devices_manager_unittest.cc
@@ -419,7 +419,8 @@
 
   std::unique_ptr<MediaDevicesManager> media_devices_manager_;
   scoped_refptr<VideoCaptureManager> video_capture_manager_;
-  raw_ptr<MockVideoCaptureDeviceFactory> video_capture_device_factory_;
+  raw_ptr<MockVideoCaptureDeviceFactory, DanglingUntriaged>
+      video_capture_device_factory_;
   std::unique_ptr<MockAudioManager> audio_manager_;
   std::unique_ptr<media::AudioSystem> audio_system_;
   testing::StrictMock<MockMediaDevicesManagerClient>
diff --git a/content/browser/renderer_host/media/media_stream_manager.h b/content/browser/renderer_host/media/media_stream_manager.h
index cb03bf5..7674645a 100644
--- a/content/browser/renderer_host/media/media_stream_manager.h
+++ b/content/browser/renderer_host/media/media_stream_manager.h
@@ -764,7 +764,8 @@
   const base::TimeDelta conditional_focus_window_;
 #endif
 
-  const raw_ptr<media::AudioSystem> audio_system_;  // not owned
+  const raw_ptr<media::AudioSystem, DanglingUntriaged>
+      audio_system_;  // not owned
   scoped_refptr<AudioInputDeviceManager> audio_input_device_manager_;
   scoped_refptr<VideoCaptureManager> video_capture_manager_;
 
diff --git a/content/browser/renderer_host/media/media_stream_manager_unittest.cc b/content/browser/renderer_host/media/media_stream_manager_unittest.cc
index 5a54bd88..cad8c1ad 100644
--- a/content/browser/renderer_host/media/media_stream_manager_unittest.cc
+++ b/content/browser/renderer_host/media/media_stream_manager_unittest.cc
@@ -670,7 +670,7 @@
 #endif  // BUILDFLAG(IS_CHROMEOS_LACROS)
   std::unique_ptr<MockAudioManager> audio_manager_;
   std::unique_ptr<media::AudioSystem> audio_system_;
-  raw_ptr<MockVideoCaptureProvider> video_capture_provider_;
+  raw_ptr<MockVideoCaptureProvider, DanglingUntriaged> video_capture_provider_;
   std::unique_ptr<MediaStreamProviderListenerMock> stream_provider_listener_;
   size_t screen_count_ = 0;
   base::RunLoop run_loop_;
diff --git a/content/browser/renderer_host/media/video_capture_controller_unittest.cc b/content/browser/renderer_host/media/video_capture_controller_unittest.cc
index f46c196..b6e3b26 100644
--- a/content/browser/renderer_host/media/video_capture_controller_unittest.cc
+++ b/content/browser/renderer_host/media/video_capture_controller_unittest.cc
@@ -158,7 +158,7 @@
                                   base::Unretained(controller_), id, this));
   }
 
-  raw_ptr<VideoCaptureController> controller_;
+  raw_ptr<VideoCaptureController, DanglingUntriaged> controller_;
   media::VideoPixelFormat expected_pixel_format_ = media::PIXEL_FORMAT_I420;
   gfx::ColorSpace expected_color_space_ = gfx::ColorSpace::CreateREC709();
   media::VideoCaptureFeedback feedback_;
diff --git a/content/browser/renderer_host/media/video_capture_manager_unittest.cc b/content/browser/renderer_host/media/video_capture_manager_unittest.cc
index 3d3690c9..922ddaf 100644
--- a/content/browser/renderer_host/media/video_capture_manager_unittest.cc
+++ b/content/browser/renderer_host/media/video_capture_manager_unittest.cc
@@ -361,7 +361,8 @@
 #endif
 
   BrowserTaskEnvironment task_environment_;
-  raw_ptr<ScreenlockMonitorTestSource> screenlock_monitor_source_;
+  raw_ptr<ScreenlockMonitorTestSource, DanglingUntriaged>
+      screenlock_monitor_source_;
   std::unique_ptr<ScreenlockMonitor> screenlock_monitor_;
   std::map<VideoCaptureControllerID, VideoCaptureController*> controllers_;
   scoped_refptr<VideoCaptureManager> vcm_;
diff --git a/content/browser/renderer_host/render_widget_host_input_event_router_unittest.cc b/content/browser/renderer_host/render_widget_host_input_event_router_unittest.cc
index 7bdf175..0f46c031 100644
--- a/content/browser/renderer_host/render_widget_host_input_event_router_unittest.cc
+++ b/content/browser/renderer_host/render_widget_host_input_event_router_unittest.cc
@@ -99,7 +99,7 @@
   }
 
  private:
-  raw_ptr<const RenderWidgetHostViewBase> hittest_result_;
+  raw_ptr<const RenderWidgetHostViewBase, DanglingUntriaged> hittest_result_;
   const bool query_renderer_;
 };
 
diff --git a/content/browser/renderer_host/render_widget_host_unittest.cc b/content/browser/renderer_host/render_widget_host_unittest.cc
index 0b46066b..f0f498c98 100644
--- a/content/browser/renderer_host/render_widget_host_unittest.cc
+++ b/content/browser/renderer_host/render_widget_host_unittest.cc
@@ -826,7 +826,7 @@
   bool handle_mouse_event_ = false;
   base::TimeTicks last_simulated_event_time_;
   base::TimeDelta simulated_event_time_delta_;
-  raw_ptr<IPC::TestSink> sink_;
+  raw_ptr<IPC::TestSink, DanglingUntriaged> sink_;
   std::unique_ptr<FakeRenderFrameMetadataObserver>
       renderer_render_frame_metadata_observer_;
   MockWidget widget_;
diff --git a/content/browser/renderer_host/render_widget_host_view_aura_unittest.cc b/content/browser/renderer_host/render_widget_host_view_aura_unittest.cc
index 1779f0b..55b881c 100644
--- a/content/browser/renderer_host/render_widget_host_view_aura_unittest.cc
+++ b/content/browser/renderer_host/render_widget_host_view_aura_unittest.cc
@@ -718,13 +718,13 @@
 
   // Tests should set these to nullptr if they've already triggered their
   // destruction.
-  raw_ptr<RenderWidgetHostImpl> parent_host_;
-  raw_ptr<RenderWidgetHostViewAura> parent_view_;
+  raw_ptr<RenderWidgetHostImpl, DanglingUntriaged> parent_host_;
+  raw_ptr<RenderWidgetHostViewAura, DanglingUntriaged> parent_view_;
 
   // Tests should set these to nullptr if they've already triggered their
   // destruction.
-  raw_ptr<MockRenderWidgetHostImpl> widget_host_;
-  raw_ptr<FakeRenderWidgetHostViewAura> view_;
+  raw_ptr<MockRenderWidgetHostImpl, DanglingUntriaged> widget_host_;
+  raw_ptr<FakeRenderWidgetHostViewAura, DanglingUntriaged> view_;
 
   raw_ptr<IPC::TestSink> sink_ = nullptr;
   base::test::ScopedFeatureList mojo_feature_list_;
@@ -5841,7 +5841,7 @@
   }
 
  private:
-  raw_ptr<RenderWidgetHostViewAura> view_;
+  raw_ptr<RenderWidgetHostViewAura, DanglingUntriaged> view_;
 };
 
 // Provides a mock implementation of the WebContentsViewDelegate class.
@@ -6073,16 +6073,17 @@
     view_->Show();
   }
 
-  raw_ptr<MockRenderWidgetHostImpl> widget_host_for_first_process_;
-  raw_ptr<TestRenderWidgetHostView> view_for_first_process_;
+  raw_ptr<MockRenderWidgetHostImpl, DanglingUntriaged>
+      widget_host_for_first_process_;
+  raw_ptr<TestRenderWidgetHostView, DanglingUntriaged> view_for_first_process_;
   std::unique_ptr<MockRenderProcessHost> second_process_host_;
   scoped_refptr<SiteInstanceGroup> second_site_instance_group_;
   raw_ptr<MockRenderWidgetHostImpl> widget_host_for_second_process_;
-  raw_ptr<TestRenderWidgetHostView> view_for_second_process_;
+  raw_ptr<TestRenderWidgetHostView, DanglingUntriaged> view_for_second_process_;
   std::unique_ptr<MockRenderProcessHost> third_process_host_;
   scoped_refptr<SiteInstanceGroup> third_site_instance_group_;
   raw_ptr<MockRenderWidgetHostImpl> widget_host_for_third_process_;
-  raw_ptr<TestRenderWidgetHostView> view_for_third_process_;
+  raw_ptr<TestRenderWidgetHostView, DanglingUntriaged> view_for_third_process_;
 };
 
 // A group of tests which verify that the IME method results are routed to the
@@ -6640,8 +6641,8 @@
 
  protected:
   // Not owned.
-  raw_ptr<ui::MockInputMethod> input_method_ = nullptr;
-  raw_ptr<const ui::TextInputClient> text_input_client_;
+  raw_ptr<ui::MockInputMethod, DanglingUntriaged> input_method_ = nullptr;
+  raw_ptr<const ui::TextInputClient, DanglingUntriaged> text_input_client_;
 };
 
 // This test is for notifying InputMethod for surrounding text changes.
diff --git a/content/browser/renderer_host/render_widget_host_view_child_frame_unittest.cc b/content/browser/renderer_host/render_widget_host_view_child_frame_unittest.cc
index 8c8fbbc6..dafd88e9 100644
--- a/content/browser/renderer_host/render_widget_host_view_child_frame_unittest.cc
+++ b/content/browser/renderer_host/render_widget_host_view_child_frame_unittest.cc
@@ -186,8 +186,8 @@
   // Tests should set these to NULL if they've already triggered their
   // destruction.
   std::unique_ptr<RenderWidgetHostImpl> widget_host_;
-  raw_ptr<RenderWidgetHostViewChildFrame> view_;
-  raw_ptr<MockFrameConnector> test_frame_connector_;
+  raw_ptr<RenderWidgetHostViewChildFrame, DanglingUntriaged> view_;
+  raw_ptr<MockFrameConnector, DanglingUntriaged> test_frame_connector_;
 };
 
 TEST_F(RenderWidgetHostViewChildFrameTest, VisibilityTest) {
diff --git a/content/browser/screen_orientation/screen_orientation_provider_unittest.cc b/content/browser/screen_orientation/screen_orientation_provider_unittest.cc
index 08d3f801..0d036641 100644
--- a/content/browser/screen_orientation/screen_orientation_provider_unittest.cc
+++ b/content/browser/screen_orientation/screen_orientation_provider_unittest.cc
@@ -85,7 +85,7 @@
   }
 
  private:
-  raw_ptr<WebContents> fullscreened_contents_ = nullptr;
+  raw_ptr<WebContents, DanglingUntriaged> fullscreened_contents_ = nullptr;
 };
 
 void LockResultCallback(absl::optional<ScreenOrientationLockResult>* out_result,
diff --git a/content/browser/screenlock_monitor/screenlock_monitor_unittest.cc b/content/browser/screenlock_monitor/screenlock_monitor_unittest.cc
index f9f3832..156a83c 100644
--- a/content/browser/screenlock_monitor/screenlock_monitor_unittest.cc
+++ b/content/browser/screenlock_monitor/screenlock_monitor_unittest.cc
@@ -62,7 +62,8 @@
   ~ScreenlockMonitorTest() override = default;
 
  protected:
-  raw_ptr<ScreenlockMonitorTestSource> screenlock_monitor_source_;
+  raw_ptr<ScreenlockMonitorTestSource, DanglingUntriaged>
+      screenlock_monitor_source_;
   std::unique_ptr<ScreenlockMonitor> screenlock_monitor_;
 
   base::test::SingleThreadTaskEnvironment task_environment_{
diff --git a/content/browser/service_worker/service_worker_container_host_unittest.cc b/content/browser/service_worker/service_worker_container_host_unittest.cc
index 0f76c03..820361d 100644
--- a/content/browser/service_worker/service_worker_container_host_unittest.cc
+++ b/content/browser/service_worker/service_worker_container_host_unittest.cc
@@ -332,7 +332,7 @@
   BrowserTaskEnvironment task_environment_;
 
   std::unique_ptr<EmbeddedWorkerTestHelper> helper_;
-  raw_ptr<ServiceWorkerContextCore> context_;
+  raw_ptr<ServiceWorkerContextCore, DanglingUntriaged> context_;
   scoped_refptr<ServiceWorkerRegistration> registration1_;
   scoped_refptr<ServiceWorkerRegistration> registration2_;
   scoped_refptr<ServiceWorkerRegistration> registration3_;
diff --git a/content/browser/service_worker/service_worker_context_wrapper.h b/content/browser/service_worker/service_worker_context_wrapper.h
index 62b5325..708cbb1 100644
--- a/content/browser/service_worker/service_worker_context_wrapper.h
+++ b/content/browser/service_worker/service_worker_context_wrapper.h
@@ -533,7 +533,7 @@
   bool is_deleting_and_starting_over_ = false;
 
   // Raw pointer to the StoragePartitionImpl owning |this|.
-  raw_ptr<StoragePartitionImpl> storage_partition_ = nullptr;
+  raw_ptr<StoragePartitionImpl, DanglingUntriaged> storage_partition_ = nullptr;
 
   // Map that contains all service workers that are considered "running". Used
   // to dispatch OnVersionStartedRunning()/OnVersionStoppedRunning() events.
diff --git a/content/browser/service_worker/service_worker_job_unittest.cc b/content/browser/service_worker/service_worker_job_unittest.cc
index 2661766..7934f5c 100644
--- a/content/browser/service_worker/service_worker_job_unittest.cc
+++ b/content/browser/service_worker/service_worker_job_unittest.cc
@@ -1572,7 +1572,8 @@
     }
 
    private:
-    raw_ptr<ScriptFailureEmbeddedWorkerInstanceClient> client_;
+    raw_ptr<ScriptFailureEmbeddedWorkerInstanceClient, DanglingUntriaged>
+        client_;
   };
 
   ServiceWorkerJobCoordinator* job_coordinator() {
@@ -1682,7 +1683,7 @@
     update_found_ = true;
   }
 
-  raw_ptr<FakeEmbeddedWorkerInstanceClient>
+  raw_ptr<FakeEmbeddedWorkerInstanceClient, DanglingUntriaged>
       initial_embedded_worker_instance_client_ = nullptr;
   scoped_refptr<ServiceWorkerRegistration> observed_registration_;
   std::vector<AttributeChangeLogEntry> attribute_change_log_;
@@ -1724,7 +1725,7 @@
 
  protected:
   std::unique_ptr<StoragePartitionImpl> storage_partition_impl_;
-  raw_ptr<UpdateJobTestHelper> update_helper_;
+  raw_ptr<UpdateJobTestHelper, DanglingUntriaged> update_helper_;
 };
 
 // Make sure that the same registration is used and the update_via_cache value
diff --git a/content/browser/service_worker/service_worker_process_manager.h b/content/browser/service_worker/service_worker_process_manager.h
index bdcfc023..7dd31ca 100644
--- a/content/browser/service_worker/service_worker_process_manager.h
+++ b/content/browser/service_worker/service_worker_process_manager.h
@@ -125,7 +125,7 @@
   // Guarded by |browser_context_lock_|.
   // Written only on the UI thread, so the UI thread doesn't need to acquire the
   // lock when reading. Can be read from other threads with the lock.
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 
   // Protects |browser_context_|.
   base::Lock browser_context_lock_;
@@ -134,7 +134,7 @@
   // All fields below are only accessed on the UI thread.
 
   // May be null during initialization and in unit tests.
-  raw_ptr<StoragePartitionImpl> storage_partition_;
+  raw_ptr<StoragePartitionImpl, DanglingUntriaged> storage_partition_;
 
   // Maps the ID of a running EmbeddedWorkerInstance to the SiteInstance whose
   // renderer process it's running inside. Since the embedded workers themselves
diff --git a/content/browser/service_worker/service_worker_process_manager_unittest.cc b/content/browser/service_worker/service_worker_process_manager_unittest.cc
index 5e1f729..e0a781cb 100644
--- a/content/browser/service_worker/service_worker_process_manager_unittest.cc
+++ b/content/browser/service_worker/service_worker_process_manager_unittest.cc
@@ -62,7 +62,7 @@
 
  private:
   mutable std::vector<std::unique_ptr<MockRenderProcessHost>> processes_;
-  mutable raw_ptr<SiteInstance> last_site_instance_used_;
+  mutable raw_ptr<SiteInstance, DanglingUntriaged> last_site_instance_used_;
 };
 
 }  // namespace
diff --git a/content/browser/service_worker/service_worker_registration_unittest.cc b/content/browser/service_worker/service_worker_registration_unittest.cc
index 5aea4a37..a2639eb 100644
--- a/content/browser/service_worker/service_worker_registration_unittest.cc
+++ b/content/browser/service_worker/service_worker_registration_unittest.cc
@@ -561,8 +561,10 @@
 
   // Mojo implementation fakes for the renderer-side service workers. Their
   // lifetime is bound to the Mojo connection.
-  raw_ptr<FakeEmbeddedWorkerInstanceClient> version_1_client_ = nullptr;
-  raw_ptr<FakeServiceWorker> version_1_service_worker_ = nullptr;
+  raw_ptr<FakeEmbeddedWorkerInstanceClient, DanglingUntriaged>
+      version_1_client_ = nullptr;
+  raw_ptr<FakeServiceWorker, DanglingUntriaged> version_1_service_worker_ =
+      nullptr;
   raw_ptr<FakeEmbeddedWorkerInstanceClient> version_2_client_ = nullptr;
   raw_ptr<FakeServiceWorker> version_2_service_worker_ = nullptr;
 
diff --git a/content/browser/sms/webotp_service_unittest.cc b/content/browser/sms/webotp_service_unittest.cc
index 25c29602..835d664 100644
--- a/content/browser/sms/webotp_service_unittest.cc
+++ b/content/browser/sms/webotp_service_unittest.cc
@@ -141,7 +141,7 @@
   SmsFetcherImpl fetcher_;
   std::unique_ptr<UserConsentHandler> consent_handler_;
   mojo::Remote<blink::mojom::WebOTPService> service_remote_;
-  raw_ptr<WebOTPService> service_;
+  raw_ptr<WebOTPService, DanglingUntriaged> service_;
 };
 
 class WebOTPServiceTest : public RenderViewHostTestHarness {
diff --git a/content/browser/speech/speech_recognizer_impl.h b/content/browser/speech/speech_recognizer_impl.h
index 103ca3f..e28e79a 100644
--- a/content/browser/speech/speech_recognizer_impl.h
+++ b/content/browser/speech/speech_recognizer_impl.h
@@ -170,7 +170,7 @@
   static media::AudioSystem* audio_system_for_tests_;
   static media::AudioCapturerSource* audio_capturer_source_for_tests_;
 
-  raw_ptr<media::AudioSystem> audio_system_;
+  raw_ptr<media::AudioSystem, DanglingUntriaged> audio_system_;
   std::unique_ptr<SpeechRecognitionEngine> recognition_engine_;
   Endpointer endpointer_;
   scoped_refptr<media::AudioCapturerSource> audio_capturer_source_;
diff --git a/content/browser/speech/tts_controller_unittest.cc b/content/browser/speech/tts_controller_unittest.cc
index 1dc7976..e824a58 100644
--- a/content/browser/speech/tts_controller_unittest.cc
+++ b/content/browser/speech/tts_controller_unittest.cc
@@ -104,7 +104,7 @@
   }
 
  private:
-  const raw_ptr<TtsController> controller_;
+  const raw_ptr<TtsController, DanglingUntriaged> controller_;
   bool platform_supported_ = true;
   bool platform_initialized_ = true;
   std::vector<VoiceData> voices_;
diff --git a/content/browser/storage_partition_impl.h b/content/browser/storage_partition_impl.h
index 18fd29a..772d125d 100644
--- a/content/browser/storage_partition_impl.h
+++ b/content/browser/storage_partition_impl.h
@@ -607,7 +607,7 @@
   // Raw pointer that should always be valid. The BrowserContext owns the
   // StoragePartitionImplMap which then owns StoragePartitionImpl. When the
   // BrowserContext is destroyed, `this` will be destroyed too.
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
 
   const base::FilePath partition_path_;
 
diff --git a/content/browser/web_package/signed_exchange_handler_unittest.cc b/content/browser/web_package/signed_exchange_handler_unittest.cc
index a8f2c36d..47bcaa3b 100644
--- a/content/browser/web_package/signed_exchange_handler_unittest.cc
+++ b/content/browser/web_package/signed_exchange_handler_unittest.cc
@@ -394,11 +394,12 @@
 
  protected:
   const base::HistogramTester histogram_tester_;
-  raw_ptr<MockSignedExchangeCertFetcherFactory> mock_cert_fetcher_factory_;
+  raw_ptr<MockSignedExchangeCertFetcherFactory, DanglingUntriaged>
+      mock_cert_fetcher_factory_;
   std::unique_ptr<net::CertVerifier> cert_verifier_;
   std::unique_ptr<MockCTPolicyEnforcer> mock_ct_policy_enforcer_;
   std::unique_ptr<MockSCTAuditingDelegate> mock_sct_auditing_delegate_;
-  raw_ptr<net::MockSourceStream> source_;
+  raw_ptr<net::MockSourceStream, DanglingUntriaged> source_;
   std::unique_ptr<SignedExchangeHandler> handler_;
 
  private:
diff --git a/content/browser/webauth/authenticator_impl_unittest.cc b/content/browser/webauth/authenticator_impl_unittest.cc
index 4e2e722..5f6dadd 100644
--- a/content/browser/webauth/authenticator_impl_unittest.cc
+++ b/content/browser/webauth/authenticator_impl_unittest.cc
@@ -621,7 +621,8 @@
     mojo_error_handler_ = callback;
   }
 
-  raw_ptr<device::test::VirtualFidoDeviceFactory> virtual_device_factory_;
+  raw_ptr<device::test::VirtualFidoDeviceFactory, DanglingUntriaged>
+      virtual_device_factory_;
 #if BUILDFLAG(IS_WIN)
   device::FakeWinWebAuthnApi fake_win_webauthn_api_;
 #endif
@@ -6930,7 +6931,8 @@
 
  private:
   TestWebAuthenticationDelegate web_authentication_delegate_;
-  raw_ptr<BlockingAuthenticatorRequestDelegate> delegate_ = nullptr;
+  raw_ptr<BlockingAuthenticatorRequestDelegate, DanglingUntriaged> delegate_ =
+      nullptr;
 };
 
 class BlockingDelegateAuthenticatorImplTest : public AuthenticatorImplTest {
diff --git a/content/browser/webid/federated_auth_request_impl_logout_unittest.cc b/content/browser/webid/federated_auth_request_impl_logout_unittest.cc
index d9de7fc..f036a74 100644
--- a/content/browser/webid/federated_auth_request_impl_logout_unittest.cc
+++ b/content/browser/webid/federated_auth_request_impl_logout_unittest.cc
@@ -179,7 +179,8 @@
   base::test::ScopedFeatureList feature_list_;
 
   mojo::Remote<blink::mojom::FederatedAuthRequest> request_remote_;
-  raw_ptr<FederatedAuthRequestImpl> federated_auth_request_impl_;
+  raw_ptr<FederatedAuthRequestImpl, DanglingUntriaged>
+      federated_auth_request_impl_;
 
   std::unique_ptr<TestLogoutIdpNetworkRequestManager> network_request_manager_;
 
diff --git a/content/browser/webid/federated_auth_request_impl_registry_unittest.cc b/content/browser/webid/federated_auth_request_impl_registry_unittest.cc
index d685571..6600fed 100644
--- a/content/browser/webid/federated_auth_request_impl_registry_unittest.cc
+++ b/content/browser/webid/federated_auth_request_impl_registry_unittest.cc
@@ -100,7 +100,8 @@
   base::test::ScopedFeatureList feature_list_;
 
   mojo::Remote<blink::mojom::FederatedAuthRequest> request_remote_;
-  raw_ptr<FederatedAuthRequestImpl> federated_auth_request_impl_;
+  raw_ptr<FederatedAuthRequestImpl, DanglingUntriaged>
+      federated_auth_request_impl_;
 
   std::unique_ptr<TestApiPermissionDelegate> test_api_permission_delegate_;
   std::unique_ptr<StrictMock<MockPermissionDelegate>> mock_permission_delegate_;
diff --git a/content/browser/webid/federated_auth_request_impl_unittest.cc b/content/browser/webid/federated_auth_request_impl_unittest.cc
index 631cedb..f73fda3 100644
--- a/content/browser/webid/federated_auth_request_impl_unittest.cc
+++ b/content/browser/webid/federated_auth_request_impl_unittest.cc
@@ -1201,7 +1201,8 @@
 
  protected:
   mojo::Remote<blink::mojom::FederatedAuthRequest> request_remote_;
-  raw_ptr<FederatedAuthRequestImpl> federated_auth_request_impl_;
+  raw_ptr<FederatedAuthRequestImpl, DanglingUntriaged>
+      federated_auth_request_impl_;
 
   std::unique_ptr<TestIdpNetworkRequestManager> test_network_request_manager_;
 
diff --git a/content/browser/webid/federated_auth_user_info_request_unittest.cc b/content/browser/webid/federated_auth_user_info_request_unittest.cc
index aef1dd1..d9bb6df 100644
--- a/content/browser/webid/federated_auth_user_info_request_unittest.cc
+++ b/content/browser/webid/federated_auth_user_info_request_unittest.cc
@@ -314,7 +314,7 @@
   bool DidFetchAnyEndpoint() { return network_manager_->DidFetchAnyEndpoint(); }
 
  protected:
-  raw_ptr<RenderFrameHost> iframe_render_frame_host_;
+  raw_ptr<RenderFrameHost, DanglingUntriaged> iframe_render_frame_host_;
   raw_ptr<TestIdpNetworkRequestManager> network_manager_;
   std::unique_ptr<TestApiPermissionDelegate> api_permission_delegate_;
   std::unique_ptr<TestPermissionDelegate> permission_delegate_;
diff --git a/content/browser/webid/identity_registry_unittest.cc b/content/browser/webid/identity_registry_unittest.cc
index 6b0bd99..6dbaad1 100644
--- a/content/browser/webid/identity_registry_unittest.cc
+++ b/content/browser/webid/identity_registry_unittest.cc
@@ -51,7 +51,7 @@
   }
 
   std::unique_ptr<TestFederatedIdentityModalDialogViewDelegate> test_delegate_;
-  raw_ptr<IdentityRegistry> identity_registry_;
+  raw_ptr<IdentityRegistry, DanglingUntriaged> identity_registry_;
 };
 
 // If notifier origin and registry origin are same-origin, modal dialog should
diff --git a/content/browser/webid/test/delegated_idp_network_request_manager.h b/content/browser/webid/test/delegated_idp_network_request_manager.h
index 09c4b5f..a6ce1c27 100644
--- a/content/browser/webid/test/delegated_idp_network_request_manager.h
+++ b/content/browser/webid/test/delegated_idp_network_request_manager.h
@@ -53,7 +53,7 @@
   void SendLogout(const GURL& logout_url, LogoutCallback callback) override;
 
  private:
-  raw_ptr<IdpNetworkRequestManager> delegate_;
+  raw_ptr<IdpNetworkRequestManager, DanglingUntriaged> delegate_;
 };
 
 }  // namespace content
diff --git a/content/browser/xr/service/xr_runtime_manager_unittest.cc b/content/browser/xr/service/xr_runtime_manager_unittest.cc
index 1db8e11..2fafc83 100644
--- a/content/browser/xr/service/xr_runtime_manager_unittest.cc
+++ b/content/browser/xr/service/xr_runtime_manager_unittest.cc
@@ -85,7 +85,7 @@
   void DropRuntimeManagerRef() { xr_runtime_manager_ = nullptr; }
 
  private:
-  raw_ptr<device::FakeVRDeviceProvider> provider_ = nullptr;
+  raw_ptr<device::FakeVRDeviceProvider, DanglingUntriaged> provider_ = nullptr;
   scoped_refptr<XRRuntimeManagerImpl> xr_runtime_manager_;
 };
 
diff --git a/content/public/browser/file_system_access_write_item.h b/content/public/browser/file_system_access_write_item.h
index a1a3657..34329702 100644
--- a/content/public/browser/file_system_access_write_item.h
+++ b/content/public/browser/file_system_access_write_item.h
@@ -54,7 +54,7 @@
   // FileSystemAccessPermissionContext::PerformAfterWriteChecks(), in which
   // case they will be filled by that method.
   raw_ptr<WebContents> web_contents = nullptr;
-  raw_ptr<BrowserContext> browser_context = nullptr;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context = nullptr;
 };
 
 }  // namespace content
diff --git a/content/public/browser/web_contents_user_data.h b/content/public/browser/web_contents_user_data.h
index 7fe76c3..5ef33a2 100644
--- a/content/public/browser/web_contents_user_data.h
+++ b/content/public/browser/web_contents_user_data.h
@@ -88,7 +88,8 @@
  private:
   // This is a pointer (rather than a reference) to ensure that go/miracleptr
   // can cover this field (see also //base/memory/raw_ptr.md).
-  const raw_ptr<content::WebContents> web_contents_ = nullptr;
+  const raw_ptr<content::WebContents, DanglingUntriaged> web_contents_ =
+      nullptr;
 };
 
 // This macro declares a static variable inside the class that inherits from
diff --git a/content/public/test/mock_navigation_handle.h b/content/public/test/mock_navigation_handle.h
index dfcca51f..ceb536b58 100644
--- a/content/public/test/mock_navigation_handle.h
+++ b/content/public/test/mock_navigation_handle.h
@@ -322,13 +322,13 @@
   GURL url_;
   GURL previous_primary_main_frame_url_;
   raw_ptr<SiteInstance> starting_site_instance_ = nullptr;
-  raw_ptr<SiteInstance> source_site_instance_ = nullptr;
-  raw_ptr<WebContents> web_contents_ = nullptr;
+  raw_ptr<SiteInstance, DanglingUntriaged> source_site_instance_ = nullptr;
+  raw_ptr<WebContents, DanglingUntriaged> web_contents_ = nullptr;
   GURL base_url_for_data_url_;
   blink::mojom::Referrer referrer_;
   ui::PageTransition page_transition_ = ui::PAGE_TRANSITION_LINK;
   net::Error net_error_code_ = net::OK;
-  raw_ptr<RenderFrameHost> render_frame_host_ = nullptr;
+  raw_ptr<RenderFrameHost, DanglingUntriaged> render_frame_host_ = nullptr;
   bool is_same_document_ = false;
   bool is_served_from_bfcache_ = false;
   bool is_prerendered_page_activation_ = false;
diff --git a/content/public/test/mock_render_process_host.h b/content/public/test/mock_render_process_host.h
index d135c1e..6c895230 100644
--- a/content/public/test/mock_render_process_host.h
+++ b/content/public/test/mock_render_process_host.h
@@ -336,7 +336,7 @@
   int bad_msg_count_;
   int id_;
   bool has_connection_;
-  raw_ptr<BrowserContext> browser_context_;
+  raw_ptr<BrowserContext, DanglingUntriaged> browser_context_;
   base::ObserverList<RenderProcessHostObserver> observers_;
 
   StoragePartitionConfig storage_partition_config_;
diff --git a/content/public/test/test_storage_partition.h b/content/public/test/test_storage_partition.h
index edcedfa..cc41f85 100644
--- a/content/public/test/test_storage_partition.h
+++ b/content/public/test/test_storage_partition.h
@@ -239,7 +239,8 @@
   StoragePartitionConfig config_;
   base::FilePath file_path_;
   mojo::Remote<network::mojom::NetworkContext> network_context_remote_;
-  raw_ptr<network::mojom::NetworkContext> network_context_ = nullptr;
+  raw_ptr<network::mojom::NetworkContext, DanglingUntriaged> network_context_ =
+      nullptr;
   raw_ptr<network::mojom::CookieManager> cookie_manager_for_browser_process_ =
       nullptr;
   raw_ptr<storage::QuotaManager> quota_manager_ = nullptr;
diff --git a/content/services/auction_worklet/auction_v8_devtools_session.cc b/content/services/auction_worklet/auction_v8_devtools_session.cc
index 3fe57f3..2fe5e1ba 100644
--- a/content/services/auction_worklet/auction_v8_devtools_session.cc
+++ b/content/services/auction_worklet/auction_v8_devtools_session.cc
@@ -145,7 +145,7 @@
                                 std::move(io_session_receiver));
   }
 
-  const raw_ptr<DebugCommandQueue> debug_command_queue_;
+  const raw_ptr<DebugCommandQueue, DanglingUntriaged> debug_command_queue_;
   RunDispatch v8_thread_dispatch_;
 
   SEQUENCE_CHECKER(io_session_receiver_sequence_checker_);
diff --git a/content/services/auction_worklet/set_bid_bindings.h b/content/services/auction_worklet/set_bid_bindings.h
index 9ab3928..11f7a47 100644
--- a/content/services/auction_worklet/set_bid_bindings.h
+++ b/content/services/auction_worklet/set_bid_bindings.h
@@ -64,7 +64,7 @@
   bool has_top_level_seller_origin_ = false;
   mojom::RejectReason reject_reason_ = mojom::RejectReason::kNotAvailable;
 
-  raw_ptr<const mojom::BidderWorkletNonSharedParams>
+  raw_ptr<const mojom::BidderWorkletNonSharedParams, DanglingUntriaged>
       bidder_worklet_non_shared_params_ = nullptr;
 
   absl::optional<blink::AdCurrency> per_buyer_currency_;
diff --git a/content/services/auction_worklet/trusted_signals_request_manager.h b/content/services/auction_worklet/trusted_signals_request_manager.h
index ba77fdc..1b0a33f 100644
--- a/content/services/auction_worklet/trusted_signals_request_manager.h
+++ b/content/services/auction_worklet/trusted_signals_request_manager.h
@@ -168,7 +168,8 @@
 
     // If this request is currently assigned to a batched request, points to
     // that request. nullptr otherwise.
-    raw_ptr<BatchedTrustedSignalsRequest> batched_request_ = nullptr;
+    raw_ptr<BatchedTrustedSignalsRequest, DanglingUntriaged> batched_request_ =
+        nullptr;
   };
 
   // Manages a single TrustedSignals object, which is associated with one or
diff --git a/content/test/mock_render_widget_host_delegate.h b/content/test/mock_render_widget_host_delegate.h
index 84b0e87a..fe29b25 100644
--- a/content/test/mock_render_widget_host_delegate.h
+++ b/content/test/mock_render_widget_host_delegate.h
@@ -70,11 +70,11 @@
 
  private:
   std::unique_ptr<NativeWebKeyboardEvent> last_event_;
-  raw_ptr<RenderWidgetHostImpl> rwh_ = nullptr;
+  raw_ptr<RenderWidgetHostImpl, DanglingUntriaged> rwh_ = nullptr;
   std::unique_ptr<RenderWidgetHostInputEventRouter> rwh_input_event_router_;
   bool is_fullscreen_ = false;
   TextInputManager text_input_manager_;
-  raw_ptr<RenderWidgetHostImpl> focused_widget_ = nullptr;
+  raw_ptr<RenderWidgetHostImpl, DanglingUntriaged> focused_widget_ = nullptr;
   KeyboardEventProcessingResult pre_handle_keyboard_event_result_ =
       KeyboardEventProcessingResult::NOT_HANDLED;
   StubRenderViewHostDelegateView rvh_delegate_view_;
diff --git a/content/test/navigation_simulator_impl.h b/content/test/navigation_simulator_impl.h
index 1b7507f..f0bc8182 100644
--- a/content/test/navigation_simulator_impl.h
+++ b/content/test/navigation_simulator_impl.h
@@ -344,13 +344,13 @@
   // IMPORTANT: Because NavigationSimulator is used outside content/ where we
   // sometimes use WebContentsImpl and not TestWebContents, this cannot be
   // assumed to cast properly to TestWebContents.
-  raw_ptr<WebContentsImpl> web_contents_;
+  raw_ptr<WebContentsImpl, DanglingUntriaged> web_contents_;
 
   // The renderer associated with this navigation.
   // Note: this can initially be null for browser-initiated navigations.
-  raw_ptr<TestRenderFrameHost> render_frame_host_;
+  raw_ptr<TestRenderFrameHost, DanglingUntriaged> render_frame_host_;
 
-  raw_ptr<FrameTreeNode> frame_tree_node_;
+  raw_ptr<FrameTreeNode, DanglingUntriaged> frame_tree_node_;
 
   // The NavigationRequest associated with this navigation.
   raw_ptr<NavigationRequest> request_;
diff --git a/content/test/navigation_simulator_unittest.cc b/content/test/navigation_simulator_unittest.cc
index fb687c3..c63e6e6 100644
--- a/content/test/navigation_simulator_unittest.cc
+++ b/content/test/navigation_simulator_unittest.cc
@@ -146,7 +146,7 @@
     }
   }
 
-  raw_ptr<const net::HttpResponseHeaders> response_headers_;
+  raw_ptr<const net::HttpResponseHeaders, DanglingUntriaged> response_headers_;
 };
 
 TEST_F(NavigationSimulatorTest, AutoAdvanceOff) {
diff --git a/content/test/test_render_view_host.h b/content/test/test_render_view_host.h
index 47401f7..4dc07ee2 100644
--- a/content/test/test_render_view_host.h
+++ b/content/test/test_render_view_host.h
@@ -190,7 +190,7 @@
 
   absl::optional<DisplayFeature> display_feature_;
 
-  raw_ptr<ui::Compositor> compositor_ = nullptr;
+  raw_ptr<ui::Compositor, DanglingUntriaged> compositor_ = nullptr;
 
   CursorManager cursor_manager_;
 };
diff --git a/courgette/adjustment_method_2.cc b/courgette/adjustment_method_2.cc
index c30e54a5..6e50a7a 100644
--- a/courgette/adjustment_method_2.cc
+++ b/courgette/adjustment_method_2.cc
@@ -190,13 +190,13 @@
 
   int refs_;                 // Number of times this Label is referenced.
 
-  raw_ptr<LabelInfo>
+  raw_ptr<LabelInfo, DanglingUntriaged>
       assignment_;  // Label from other program corresponding to this.
 
   std::vector<uint32_t> positions_;  // Offsets into the trace of references.
 
  private:
-  raw_ptr<AssignmentCandidates> candidates_;
+  raw_ptr<AssignmentCandidates, DanglingUntriaged> candidates_;
 
   void operator=(const LabelInfo*);  // Disallow assignment only.
   // Public compiler generated copy constructor is needed to constuct
@@ -427,7 +427,7 @@
   size_t exemplar_position_;       // At this position (and other positions).
   std::vector<uint32_t> positions_;  // Includes exemplar_position_.
 
-  raw_ptr<ShinglePattern>
+  raw_ptr<ShinglePattern, DanglingUntriaged>
       pattern_;  // Pattern changes as LabelInfos are assigned.
 
   friend std::string ToString(const Shingle* instance);
diff --git a/courgette/ensemble.h b/courgette/ensemble.h
index 6485fdb0..4a47885 100644
--- a/courgette/ensemble.h
+++ b/courgette/ensemble.h
@@ -246,7 +246,7 @@
  protected:
   raw_ptr<Element> old_element_;
   raw_ptr<Element> new_element_;
-  raw_ptr<TransformationPatcher> patcher_;
+  raw_ptr<TransformationPatcher, DanglingUntriaged> patcher_;
 };
 
 }  // namespace
diff --git a/dbus/end_to_end_async_unittest.cc b/dbus/end_to_end_async_unittest.cc
index 30f3f07..09d4417 100644
--- a/dbus/end_to_end_async_unittest.cc
+++ b/dbus/end_to_end_async_unittest.cc
@@ -258,8 +258,8 @@
   std::vector<std::string> error_names_;
   std::unique_ptr<base::Thread> dbus_thread_;
   scoped_refptr<Bus> bus_;
-  raw_ptr<ObjectProxy> object_proxy_;
-  raw_ptr<ObjectProxy> root_object_proxy_;
+  raw_ptr<ObjectProxy, DanglingUntriaged> object_proxy_;
+  raw_ptr<ObjectProxy, DanglingUntriaged> root_object_proxy_;
   std::unique_ptr<TestService> test_service_;
   // Text message from "Test" signal.
   std::string test_signal_string_;
diff --git a/dbus/end_to_end_sync_unittest.cc b/dbus/end_to_end_sync_unittest.cc
index 53b4d4d..8312a65 100644
--- a/dbus/end_to_end_sync_unittest.cc
+++ b/dbus/end_to_end_sync_unittest.cc
@@ -54,7 +54,7 @@
       base::test::SingleThreadTaskEnvironment::MainThreadType::IO};
   std::unique_ptr<TestService> test_service_;
   scoped_refptr<Bus> client_bus_;
-  raw_ptr<ObjectProxy> object_proxy_;
+  raw_ptr<ObjectProxy, DanglingUntriaged> object_proxy_;
 };
 
 TEST_F(EndToEndSyncTest, Echo) {
diff --git a/dbus/property_unittest.cc b/dbus/property_unittest.cc
index f08e5f7..670588a 100644
--- a/dbus/property_unittest.cc
+++ b/dbus/property_unittest.cc
@@ -160,7 +160,7 @@
   std::unique_ptr<base::RunLoop> run_loop_;
   std::unique_ptr<base::Thread> dbus_thread_;
   scoped_refptr<Bus> bus_;
-  raw_ptr<ObjectProxy> object_proxy_;
+  raw_ptr<ObjectProxy, DanglingUntriaged> object_proxy_;
   std::unique_ptr<Properties> properties_;
   std::unique_ptr<TestService> test_service_;
   // Properties updated.
diff --git a/dbus/signal_sender_verification_unittest.cc b/dbus/signal_sender_verification_unittest.cc
index 18036b58..45aa81c 100644
--- a/dbus/signal_sender_verification_unittest.cc
+++ b/dbus/signal_sender_verification_unittest.cc
@@ -164,7 +164,7 @@
   std::unique_ptr<base::RunLoop> run_loop_;
   std::unique_ptr<base::Thread> dbus_thread_;
   scoped_refptr<Bus> bus_;
-  raw_ptr<ObjectProxy> object_proxy_;
+  raw_ptr<ObjectProxy, DanglingUntriaged> object_proxy_;
   std::unique_ptr<TestService> test_service_;
   std::unique_ptr<TestService> test_service2_;
   // Text message from "Test" signal.
diff --git a/dbus/test_service.h b/dbus/test_service.h
index cc74ec5e..86eadcf 100644
--- a/dbus/test_service.h
+++ b/dbus/test_service.h
@@ -224,8 +224,8 @@
   bool has_ownership_;
 
   scoped_refptr<Bus> bus_;
-  raw_ptr<ExportedObject> exported_object_;
-  raw_ptr<ExportedObject> exported_object_manager_;
+  raw_ptr<ExportedObject, DanglingUntriaged> exported_object_;
+  raw_ptr<ExportedObject, DanglingUntriaged> exported_object_manager_;
 };
 
 }  // namespace dbus
diff --git a/device/bluetooth/bluetooth_gatt_connection.h b/device/bluetooth/bluetooth_gatt_connection.h
index df2bb6a7..1227f501 100644
--- a/device/bluetooth/bluetooth_gatt_connection.h
+++ b/device/bluetooth/bluetooth_gatt_connection.h
@@ -64,7 +64,7 @@
 
   // Bluetooth address of the underlying device.
   std::string device_address_;
-  raw_ptr<BluetoothDevice> device_ = nullptr;
+  raw_ptr<BluetoothDevice, DanglingUntriaged> device_ = nullptr;
 
  private:
   bool owns_reference_for_connection_ = false;
diff --git a/device/bluetooth/bluetooth_local_gatt_characteristic_unittest.cc b/device/bluetooth/bluetooth_local_gatt_characteristic_unittest.cc
index 6c26676..26579f4a 100644
--- a/device/bluetooth/bluetooth_local_gatt_characteristic_unittest.cc
+++ b/device/bluetooth/bluetooth_local_gatt_characteristic_unittest.cc
@@ -54,7 +54,7 @@
   base::WeakPtr<BluetoothLocalGattCharacteristic> write_characteristic_;
   base::WeakPtr<BluetoothLocalGattCharacteristic> notify_characteristic_;
   base::WeakPtr<BluetoothLocalGattCharacteristic> indicate_characteristic_;
-  raw_ptr<BluetoothDevice> device_;
+  raw_ptr<BluetoothDevice, DanglingUntriaged> device_;
 };
 
 #if BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_LINUX)
diff --git a/device/bluetooth/bluetooth_local_gatt_descriptor_unittest.cc b/device/bluetooth/bluetooth_local_gatt_descriptor_unittest.cc
index d55bfc0..51829f7 100644
--- a/device/bluetooth/bluetooth_local_gatt_descriptor_unittest.cc
+++ b/device/bluetooth/bluetooth_local_gatt_descriptor_unittest.cc
@@ -46,7 +46,7 @@
   base::WeakPtr<BluetoothLocalGattCharacteristic> characteristic_;
   base::WeakPtr<BluetoothLocalGattDescriptor> read_descriptor_;
   base::WeakPtr<BluetoothLocalGattDescriptor> write_descriptor_;
-  raw_ptr<BluetoothDevice> device_;
+  raw_ptr<BluetoothDevice, DanglingUntriaged> device_;
 };
 
 #if BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_LINUX)
diff --git a/device/bluetooth/bluez/bluetooth_adapter_profile_bluez.h b/device/bluetooth/bluez/bluetooth_adapter_profile_bluez.h
index aa5ed16..fa17f901 100644
--- a/device/bluetooth/bluez/bluetooth_adapter_profile_bluez.h
+++ b/device/bluetooth/bluez/bluetooth_adapter_profile_bluez.h
@@ -99,7 +99,7 @@
       delegates_;
 
   // The UUID that this profile represents.
-  const raw_ref<const device::BluetoothUUID> uuid_;
+  const raw_ref<const device::BluetoothUUID, DanglingUntriaged> uuid_;
 
   // Registered dbus object path for this profile.
   dbus::ObjectPath object_path_;
diff --git a/device/bluetooth/bluez/bluetooth_adapter_profile_bluez_unittest.cc b/device/bluetooth/bluez/bluetooth_adapter_profile_bluez_unittest.cc
index d72794e..dfc4aae 100644
--- a/device/bluetooth/bluez/bluetooth_adapter_profile_bluez_unittest.cc
+++ b/device/bluetooth/bluez/bluetooth_adapter_profile_bluez_unittest.cc
@@ -167,7 +167,7 @@
 
   // unowned pointer as expected to be used by clients of
   // BluetoothAdapterBlueZ::UseProfile like BluetoothSocketBlueZ
-  raw_ptr<BluetoothAdapterProfileBlueZ> profile_user_ptr_;
+  raw_ptr<BluetoothAdapterProfileBlueZ, DanglingUntriaged> profile_user_ptr_;
 };
 
 TEST_F(BluetoothAdapterProfileBlueZTest, DelegateCount) {
diff --git a/device/bluetooth/bluez/bluetooth_bluez_unittest.cc b/device/bluetooth/bluez/bluetooth_bluez_unittest.cc
index d700d331..bb3bce8 100644
--- a/device/bluetooth/bluez/bluetooth_bluez_unittest.cc
+++ b/device/bluetooth/bluez/bluetooth_bluez_unittest.cc
@@ -504,11 +504,14 @@
 
  protected:
   base::test::SingleThreadTaskEnvironment task_environment_;
-  raw_ptr<bluez::FakeBluetoothAdapterClient> fake_bluetooth_adapter_client_;
-  raw_ptr<bluez::FakeBluetoothAdminPolicyClient>
+  raw_ptr<bluez::FakeBluetoothAdapterClient, DanglingUntriaged>
+      fake_bluetooth_adapter_client_;
+  raw_ptr<bluez::FakeBluetoothAdminPolicyClient, DanglingUntriaged>
       fake_bluetooth_admin_policy_client_;
-  raw_ptr<bluez::FakeBluetoothBatteryClient> fake_bluetooth_battery_client_;
-  raw_ptr<bluez::FakeBluetoothDeviceClient> fake_bluetooth_device_client_;
+  raw_ptr<bluez::FakeBluetoothBatteryClient, DanglingUntriaged>
+      fake_bluetooth_battery_client_;
+  raw_ptr<bluez::FakeBluetoothDeviceClient, DanglingUntriaged>
+      fake_bluetooth_device_client_;
   scoped_refptr<BluetoothAdapter> adapter_;
 
   int callback_count_;
diff --git a/device/bluetooth/bluez/bluetooth_gatt_bluez_unittest.cc b/device/bluetooth/bluez/bluetooth_gatt_bluez_unittest.cc
index b28b148..7d624906 100644
--- a/device/bluetooth/bluez/bluetooth_gatt_bluez_unittest.cc
+++ b/device/bluetooth/bluez/bluetooth_gatt_bluez_unittest.cc
@@ -321,12 +321,13 @@
 
   base::test::SingleThreadTaskEnvironment task_environment_;
 
-  raw_ptr<bluez::FakeBluetoothDeviceClient> fake_bluetooth_device_client_;
-  raw_ptr<bluez::FakeBluetoothGattServiceClient>
+  raw_ptr<bluez::FakeBluetoothDeviceClient, DanglingUntriaged>
+      fake_bluetooth_device_client_;
+  raw_ptr<bluez::FakeBluetoothGattServiceClient, DanglingUntriaged>
       fake_bluetooth_gatt_service_client_;
-  raw_ptr<bluez::FakeBluetoothGattCharacteristicClient>
+  raw_ptr<bluez::FakeBluetoothGattCharacteristicClient, DanglingUntriaged>
       fake_bluetooth_gatt_characteristic_client_;
-  raw_ptr<bluez::FakeBluetoothGattDescriptorClient>
+  raw_ptr<bluez::FakeBluetoothGattDescriptorClient, DanglingUntriaged>
       fake_bluetooth_gatt_descriptor_client_;
   std::unique_ptr<device::BluetoothGattConnection> gatt_conn_;
   std::vector<std::unique_ptr<BluetoothGattNotifySession>> update_sessions_;
diff --git a/device/bluetooth/bluez/bluetooth_local_gatt_service_bluez.h b/device/bluetooth/bluez/bluetooth_local_gatt_service_bluez.h
index 1b44a02..25a2761 100644
--- a/device/bluetooth/bluez/bluetooth_local_gatt_service_bluez.h
+++ b/device/bluetooth/bluez/bluetooth_local_gatt_service_bluez.h
@@ -85,7 +85,8 @@
 
   // Delegate to receive read/write requests for attribute  values contained
   // in this service.
-  raw_ptr<device::BluetoothLocalGattService::Delegate> delegate_;
+  raw_ptr<device::BluetoothLocalGattService::Delegate, DanglingUntriaged>
+      delegate_;
 
   // Characteristics contained by this service.
   std::map<dbus::ObjectPath,
diff --git a/device/bluetooth/bluez/bluetooth_service_record_bluez_unittest.cc b/device/bluetooth/bluez/bluetooth_service_record_bluez_unittest.cc
index 6cd62a6b..1a72da40 100644
--- a/device/bluetooth/bluez/bluetooth_service_record_bluez_unittest.cc
+++ b/device/bluetooth/bluez/bluetooth_service_record_bluez_unittest.cc
@@ -142,7 +142,7 @@
     return record;
   }
 
-  raw_ptr<BluetoothAdapterBlueZ> adapter_bluez_;
+  raw_ptr<BluetoothAdapterBlueZ, DanglingUntriaged> adapter_bluez_;
   size_t success_callbacks_;
   size_t error_callbacks_;
 
diff --git a/device/bluetooth/bluez/bluetooth_socket_bluez_unittest.cc b/device/bluetooth/bluez/bluetooth_socket_bluez_unittest.cc
index 89811ec9..849b9b6 100644
--- a/device/bluetooth/bluez/bluetooth_socket_bluez_unittest.cc
+++ b/device/bluetooth/bluez/bluetooth_socket_bluez_unittest.cc
@@ -205,7 +205,7 @@
   int last_bytes_received_;
   scoped_refptr<net::IOBuffer> last_io_buffer_;
   BluetoothSocket::ErrorReason last_reason_;
-  raw_ptr<const BluetoothDevice> last_device_;
+  raw_ptr<const BluetoothDevice, DanglingUntriaged> last_device_;
 };
 
 TEST_F(BluetoothSocketBlueZTest, Connect) {
diff --git a/device/bluetooth/test/test_bluetooth_local_gatt_service_delegate.h b/device/bluetooth/test/test_bluetooth_local_gatt_service_delegate.h
index a5e1984..4143b8dc 100644
--- a/device/bluetooth/test/test_bluetooth_local_gatt_service_delegate.h
+++ b/device/bluetooth/test/test_bluetooth_local_gatt_service_delegate.h
@@ -91,8 +91,9 @@
 
  private:
   raw_ptr<BluetoothLocalGattService> expected_service_;
-  raw_ptr<BluetoothLocalGattCharacteristic> expected_characteristic_;
-  raw_ptr<BluetoothLocalGattDescriptor> expected_descriptor_;
+  raw_ptr<BluetoothLocalGattCharacteristic, DanglingUntriaged>
+      expected_characteristic_;
+  raw_ptr<BluetoothLocalGattDescriptor, DanglingUntriaged> expected_descriptor_;
 
   std::map<std::string, bool> notifications_started_for_characteristic_;
 };
diff --git a/device/fido/cable/fido_ble_connection_unittest.cc b/device/fido/cable/fido_ble_connection_unittest.cc
index 9ed1d92a..e53d654 100644
--- a/device/fido/cable/fido_ble_connection_unittest.cc
+++ b/device/fido/cable/fido_ble_connection_unittest.cc
@@ -405,8 +405,8 @@
   raw_ptr<MockBluetoothGattCharacteristic> fido_service_revision_;
   raw_ptr<MockBluetoothGattCharacteristic> fido_service_revision_bitfield_;
 
-  raw_ptr<MockBluetoothGattConnection> connection_;
-  raw_ptr<MockBluetoothGattNotifySession> notify_session_;
+  raw_ptr<MockBluetoothGattConnection, DanglingUntriaged> connection_;
+  raw_ptr<MockBluetoothGattNotifySession, DanglingUntriaged> notify_session_;
 };
 
 TEST_F(FidoBleConnectionTest, Address) {
diff --git a/device/fido/cable/fido_cable_device_unittest.cc b/device/fido/cable/fido_cable_device_unittest.cc
index d55ea699..533d7504 100644
--- a/device/fido/cable/fido_cable_device_unittest.cc
+++ b/device/fido/cable/fido_cable_device_unittest.cc
@@ -168,7 +168,7 @@
   scoped_refptr<MockBluetoothAdapter> adapter_ =
       base::MakeRefCounted<NiceMockBluetoothAdapter>();
   FakeCableAuthenticator authenticator_;
-  raw_ptr<MockFidoBleConnection> connection_;
+  raw_ptr<MockFidoBleConnection, DanglingUntriaged> connection_;
   std::unique_ptr<FidoCableDevice> device_;
 };
 
diff --git a/device/fido/cable/fido_cable_handshake_handler_unittest.cc b/device/fido/cable/fido_cable_handshake_handler_unittest.cc
index b0a6c24..51d81a08 100644
--- a/device/fido/cable/fido_cable_handshake_handler_unittest.cc
+++ b/device/fido/cable/fido_cable_handshake_handler_unittest.cc
@@ -292,7 +292,7 @@
   scoped_refptr<MockBluetoothAdapter> adapter_ =
       base::MakeRefCounted<NiceMockBluetoothAdapter>();
   FakeCableAuthenticator authenticator_;
-  raw_ptr<MockFidoBleConnection> connection_;
+  raw_ptr<MockFidoBleConnection, DanglingUntriaged> connection_;
   std::unique_ptr<FidoCableDevice> device_;
   TestDeviceCallbackReceiver callback_receiver_;
 };
diff --git a/device/fido/cable/v2_authenticator.cc b/device/fido/cable/v2_authenticator.cc
index 2f18351..144d6c74 100644
--- a/device/fido/cable/v2_authenticator.cc
+++ b/device/fido/cable/v2_authenticator.cc
@@ -616,7 +616,7 @@
     }
   }
 
-  const raw_ptr<Platform> platform_;
+  const raw_ptr<Platform, DanglingUntriaged> platform_;
   State state_ = State::kNone;
   const std::array<uint8_t, kTunnelIdSize> tunnel_id_;
   const std::array<uint8_t, kEIDKeySize> eid_key_;
diff --git a/device/fido/fido_request_handler_unittest.cc b/device/fido/fido_request_handler_unittest.cc
index 71a6e3e..7f4dd6b 100644
--- a/device/fido/fido_request_handler_unittest.cc
+++ b/device/fido/fido_request_handler_unittest.cc
@@ -315,7 +315,7 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   test::FakeFidoDiscoveryFactory fake_discovery_factory_;
   scoped_refptr<::testing::NiceMock<MockBluetoothAdapter>> mock_adapter_;
-  raw_ptr<test::FakeFidoDiscovery> discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> discovery_;
   FakeHandlerCallbackReceiver cb_;
 };
 
diff --git a/device/fido/get_assertion_handler_unittest.cc b/device/fido/get_assertion_handler_unittest.cc
index 0a424a88..51baf22d 100644
--- a/device/fido/get_assertion_handler_unittest.cc
+++ b/device/fido/get_assertion_handler_unittest.cc
@@ -199,10 +199,10 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<test::FakeFidoDiscoveryFactory> fake_discovery_factory_ =
       std::make_unique<test::FakeFidoDiscoveryFactory>();
-  raw_ptr<test::FakeFidoDiscovery> discovery_;
-  raw_ptr<test::FakeFidoDiscovery> cable_discovery_;
-  raw_ptr<test::FakeFidoDiscovery> nfc_discovery_;
-  raw_ptr<test::FakeFidoDiscovery> platform_discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> cable_discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> nfc_discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> platform_discovery_;
   scoped_refptr<::testing::NiceMock<MockBluetoothAdapter>> mock_adapter_ =
       base::MakeRefCounted<::testing::NiceMock<MockBluetoothAdapter>>();
   TestGetAssertionRequestCallback get_assertion_cb_;
diff --git a/device/fido/make_credential_handler_unittest.cc b/device/fido/make_credential_handler_unittest.cc
index f87f9856..1bb65232 100644
--- a/device/fido/make_credential_handler_unittest.cc
+++ b/device/fido/make_credential_handler_unittest.cc
@@ -146,9 +146,9 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
   std::unique_ptr<test::FakeFidoDiscoveryFactory> fake_discovery_factory_ =
       std::make_unique<test::FakeFidoDiscoveryFactory>();
-  raw_ptr<test::FakeFidoDiscovery> discovery_;
-  raw_ptr<test::FakeFidoDiscovery> nfc_discovery_;
-  raw_ptr<test::FakeFidoDiscovery> platform_discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> nfc_discovery_;
+  raw_ptr<test::FakeFidoDiscovery, DanglingUntriaged> platform_discovery_;
   scoped_refptr<::testing::NiceMock<MockBluetoothAdapter>> mock_adapter_;
   std::unique_ptr<MockFidoDevice> pending_mock_platform_device_;
   TestMakeCredentialRequestCallback cb_;
diff --git a/device/gamepad/dualshock4_controller_unittest.cc b/device/gamepad/dualshock4_controller_unittest.cc
index d8972d5..2a3bbc3b 100644
--- a/device/gamepad/dualshock4_controller_unittest.cc
+++ b/device/gamepad/dualshock4_controller_unittest.cc
@@ -178,8 +178,8 @@
   const std::vector<uint8_t> bluetooth_stop_vibration_report_;
   int callback_count_;
   mojom::GamepadHapticsResult callback_result_;
-  raw_ptr<FakeHidWriter> usb_writer_;
-  raw_ptr<FakeHidWriter> bluetooth_writer_;
+  raw_ptr<FakeHidWriter, DanglingUntriaged> usb_writer_;
+  raw_ptr<FakeHidWriter, DanglingUntriaged> bluetooth_writer_;
   std::unique_ptr<Dualshock4Controller> ds4_usb_;
   std::unique_ptr<Dualshock4Controller> ds4_bluetooth_;
   base::test::TaskEnvironment task_environment_{
diff --git a/device/gamepad/gamepad_service_unittest.cc b/device/gamepad/gamepad_service_unittest.cc
index 25d5b7d..9fb52f4e 100644
--- a/device/gamepad/gamepad_service_unittest.cc
+++ b/device/gamepad/gamepad_service_unittest.cc
@@ -111,8 +111,8 @@
 
  private:
   base::test::SingleThreadTaskEnvironment task_environment_;
-  raw_ptr<MockGamepadDataFetcher> fetcher_;
-  raw_ptr<GamepadService> service_;
+  raw_ptr<MockGamepadDataFetcher, DanglingUntriaged> fetcher_;
+  raw_ptr<GamepadService, DanglingUntriaged> service_;
   std::vector<std::unique_ptr<MockGamepadConsumer>> consumers_;
   Gamepads test_data_;
 };
diff --git a/device/gamepad/gamepad_test_helpers.h b/device/gamepad/gamepad_test_helpers.h
index f65487e..75cd047 100644
--- a/device/gamepad/gamepad_test_helpers.h
+++ b/device/gamepad/gamepad_test_helpers.h
@@ -83,10 +83,10 @@
 
  private:
   // Owning pointer (can't be a scoped_ptr due to private destructor).
-  raw_ptr<GamepadService> gamepad_service_;
+  raw_ptr<GamepadService, DanglingUntriaged> gamepad_service_;
 
   // Pointer owned by the provider (which is owned by the gamepad service).
-  raw_ptr<MockGamepadDataFetcher> data_fetcher_;
+  raw_ptr<MockGamepadDataFetcher, DanglingUntriaged> data_fetcher_;
 };
 
 }  // namespace device
diff --git a/device/gamepad/hid_haptic_gamepad_unittest.cc b/device/gamepad/hid_haptic_gamepad_unittest.cc
index 6a1fa1e..a12b4dee 100644
--- a/device/gamepad/hid_haptic_gamepad_unittest.cc
+++ b/device/gamepad/hid_haptic_gamepad_unittest.cc
@@ -131,7 +131,7 @@
   int second_callback_count_;
   mojom::GamepadHapticsResult first_callback_result_;
   mojom::GamepadHapticsResult second_callback_result_;
-  raw_ptr<FakeHidWriter> fake_hid_writer_;
+  raw_ptr<FakeHidWriter, DanglingUntriaged> fake_hid_writer_;
   std::unique_ptr<HidHapticGamepad> gamepad_;
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
diff --git a/device/gamepad/xbox_hid_controller_unittest.cc b/device/gamepad/xbox_hid_controller_unittest.cc
index 7e9cf56..1c13008e 100644
--- a/device/gamepad/xbox_hid_controller_unittest.cc
+++ b/device/gamepad/xbox_hid_controller_unittest.cc
@@ -116,7 +116,7 @@
   const std::vector<uint8_t> stop_vibration_report_;
   int callback_count_;
   mojom::GamepadHapticsResult callback_result_;
-  raw_ptr<FakeHidWriter> fake_hid_writer_;
+  raw_ptr<FakeHidWriter, DanglingUntriaged> fake_hid_writer_;
   std::unique_ptr<XboxHidController> gamepad_;
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
diff --git a/device/udev_linux/fake_udev_loader.cc b/device/udev_linux/fake_udev_loader.cc
index 25b91ef2..be6a846 100644
--- a/device/udev_linux/fake_udev_loader.cc
+++ b/device/udev_linux/fake_udev_loader.cc
@@ -23,7 +23,7 @@
   udev_list_entry& operator=(const udev_list_entry& other) = delete;
 
   const std::string name;
-  raw_ptr<udev_list_entry> next = nullptr;
+  raw_ptr<udev_list_entry, DanglingUntriaged> next = nullptr;
 };
 
 struct udev_device {
diff --git a/extensions/browser/api/idle/idle_api_unittest.cc b/extensions/browser/api/idle/idle_api_unittest.cc
index f5929ca2..618f0f6 100644
--- a/extensions/browser/api/idle/idle_api_unittest.cc
+++ b/extensions/browser/api/idle/idle_api_unittest.cc
@@ -78,9 +78,10 @@
   void SetUp() override;
 
  protected:
-  raw_ptr<IdleManager> idle_manager_;
-  raw_ptr<TestIdleProvider> idle_provider_;
-  raw_ptr<testing::StrictMock<MockEventDelegate>> event_delegate_;
+  raw_ptr<IdleManager, DanglingUntriaged> idle_manager_;
+  raw_ptr<TestIdleProvider, DanglingUntriaged> idle_provider_;
+  raw_ptr<testing::StrictMock<MockEventDelegate>, DanglingUntriaged>
+      event_delegate_;
 };
 
 void IdleTest::SetUp() {
diff --git a/extensions/browser/api/runtime/restart_after_delay_api_unittest.cc b/extensions/browser/api/runtime/restart_after_delay_api_unittest.cc
index 24b50b44..9c31790 100644
--- a/extensions/browser/api/runtime/restart_after_delay_api_unittest.cc
+++ b/extensions/browser/api/runtime/restart_after_delay_api_unittest.cc
@@ -97,7 +97,8 @@
   }
 
  private:
-  raw_ptr<DelayedRestartTestApiDelegate> api_delegate_ = nullptr;  // Not owned.
+  raw_ptr<DelayedRestartTestApiDelegate, DanglingUntriaged> api_delegate_ =
+      nullptr;  // Not owned.
 
   sync_preferences::TestingPrefServiceSyncable testing_pref_service_;
 };
diff --git a/extensions/browser/api/storage/session_storage_manager.h b/extensions/browser/api/storage/session_storage_manager.h
index ca3bb3e..2bdbcf2 100644
--- a/extensions/browser/api/storage/session_storage_manager.h
+++ b/extensions/browser/api/storage/session_storage_manager.h
@@ -44,7 +44,7 @@
 
     // Owned by the SessionStorageManager. Caller cannot rely on it after any
     // subsequent calls to SessionStorageManager methods.
-    raw_ptr<const base::Value> new_value;
+    raw_ptr<const base::Value, DanglingUntriaged> new_value;
   };
 
   SessionStorageManager(size_t quota_bytes_per_extension,
diff --git a/extensions/browser/api/storage/session_storage_manager_unittest.cc b/extensions/browser/api/storage/session_storage_manager_unittest.cc
index cee4d74..aab94750 100644
--- a/extensions/browser/api/storage/session_storage_manager_unittest.cc
+++ b/extensions/browser/api/storage/session_storage_manager_unittest.cc
@@ -60,7 +60,7 @@
   base::Value::Dict value_dict_;
 
   // Session storage manager being tested.
-  raw_ptr<SessionStorageManager> manager_;
+  raw_ptr<SessionStorageManager, DanglingUntriaged> manager_;
 };
 
 void SessionStorageManagerUnittest::SetUp() {
diff --git a/extensions/browser/app_window/app_window_geometry_cache_unittest.cc b/extensions/browser/app_window/app_window_geometry_cache_unittest.cc
index 5778c7d..a53b833 100644
--- a/extensions/browser/app_window/app_window_geometry_cache_unittest.cc
+++ b/extensions/browser/app_window/app_window_geometry_cache_unittest.cc
@@ -58,7 +58,7 @@
   std::string AddExtensionWithPrefs(const std::string& name);
 
  protected:
-  raw_ptr<ExtensionPrefs> extension_prefs_;  // Weak.
+  raw_ptr<ExtensionPrefs, DanglingUntriaged> extension_prefs_;  // Weak.
   std::unique_ptr<AppWindowGeometryCache> cache_;
 };
 
diff --git a/extensions/browser/event_listener_map.h b/extensions/browser/event_listener_map.h
index af1f608..c6d098b0 100644
--- a/extensions/browser/event_listener_map.h
+++ b/extensions/browser/event_listener_map.h
@@ -135,8 +135,9 @@
   const std::string event_name_;
   const std::string extension_id_;
   const GURL listener_url_;
-  raw_ptr<content::RenderProcessHost> process_ = nullptr;
-  raw_ptr<content::BrowserContext> browser_context_ = nullptr;
+  raw_ptr<content::RenderProcessHost, DanglingUntriaged> process_ = nullptr;
+  raw_ptr<content::BrowserContext, DanglingUntriaged> browser_context_ =
+      nullptr;
 
   const bool is_for_service_worker_ = false;
 
diff --git a/extensions/browser/extension_action_manager_unittest.cc b/extensions/browser/extension_action_manager_unittest.cc
index 2818da3..261bdd5 100644
--- a/extensions/browser/extension_action_manager_unittest.cc
+++ b/extensions/browser/extension_action_manager_unittest.cc
@@ -39,8 +39,8 @@
   ExtensionRegistry* registry() { return registry_; }
 
  private:
-  raw_ptr<ExtensionRegistry> registry_;
-  raw_ptr<ExtensionActionManager> manager_;
+  raw_ptr<ExtensionRegistry, DanglingUntriaged> registry_;
+  raw_ptr<ExtensionActionManager, DanglingUntriaged> manager_;
 };
 
 ExtensionActionManagerTest::ExtensionActionManagerTest() = default;
diff --git a/extensions/browser/extension_prefs.h b/extensions/browser/extension_prefs.h
index 850a651..9e25be7 100644
--- a/extensions/browser/extension_prefs.h
+++ b/extensions/browser/extension_prefs.h
@@ -938,7 +938,7 @@
 
   // The pref service specific to this set of extension prefs. Owned by the
   // BrowserContext.
-  raw_ptr<PrefService> prefs_;
+  raw_ptr<PrefService, DanglingUntriaged> prefs_;
 
   // Base extensions install directory.
   base::FilePath install_directory_;
diff --git a/extensions/browser/extension_prefs_helper.h b/extensions/browser/extension_prefs_helper.h
index 2ee6c51c..409e750 100644
--- a/extensions/browser/extension_prefs_helper.h
+++ b/extensions/browser/extension_prefs_helper.h
@@ -71,8 +71,8 @@
   const ExtensionPrefs* prefs() const { return prefs_; }
 
  private:
-  const raw_ptr<ExtensionPrefs> prefs_;
-  const raw_ptr<ExtensionPrefValueMap> value_map_;
+  const raw_ptr<ExtensionPrefs, DanglingUntriaged> prefs_;
+  const raw_ptr<ExtensionPrefValueMap, DanglingUntriaged> value_map_;
 };
 
 }  // namespace extensions
diff --git a/extensions/browser/permissions_manager_unittest.cc b/extensions/browser/permissions_manager_unittest.cc
index 8fb69f60..fcc7681 100644
--- a/extensions/browser/permissions_manager_unittest.cc
+++ b/extensions/browser/permissions_manager_unittest.cc
@@ -68,9 +68,9 @@
   void SetUp() override;
 
   // PermissionsManager being tested.
-  raw_ptr<PermissionsManager> manager_;
+  raw_ptr<PermissionsManager, DanglingUntriaged> manager_;
 
-  raw_ptr<ExtensionPrefs> extension_prefs_;
+  raw_ptr<ExtensionPrefs, DanglingUntriaged> extension_prefs_;
 };
 
 void PermissionsManagerUnittest::SetUp() {
diff --git a/extensions/browser/renderer_startup_helper_unittest.cc b/extensions/browser/renderer_startup_helper_unittest.cc
index 224e557..1135db3e 100644
--- a/extensions/browser/renderer_startup_helper_unittest.cc
+++ b/extensions/browser/renderer_startup_helper_unittest.cc
@@ -271,7 +271,7 @@
   }
 
   std::unique_ptr<RendererStartupHelperInterceptor> helper_;
-  raw_ptr<ExtensionRegistry> registry_;  // Weak.
+  raw_ptr<ExtensionRegistry, DanglingUntriaged> registry_;  // Weak.
   std::unique_ptr<content::MockRenderProcessHost> render_process_host_;
   std::unique_ptr<content::MockRenderProcessHost>
       incognito_render_process_host_;
diff --git a/extensions/browser/sandboxed_unpacker_unittest.cc b/extensions/browser/sandboxed_unpacker_unittest.cc
index 0dda5c5d..9965221d 100644
--- a/extensions/browser/sandboxed_unpacker_unittest.cc
+++ b/extensions/browser/sandboxed_unpacker_unittest.cc
@@ -312,7 +312,7 @@
 
  protected:
   base::ScopedTempDir extensions_dir_;
-  raw_ptr<MockSandboxedUnpackerClient> client_;
+  raw_ptr<MockSandboxedUnpackerClient, DanglingUntriaged> client_;
   scoped_refptr<SandboxedUnpacker> sandboxed_unpacker_;
   std::unique_ptr<content::InProcessUtilityThreadHelper>
       in_process_utility_thread_helper_;
diff --git a/extensions/browser/updater/extension_downloader.h b/extensions/browser/updater/extension_downloader.h
index fdc37c3..af71825 100644
--- a/extensions/browser/updater/extension_downloader.h
+++ b/extensions/browser/updater/extension_downloader.h
@@ -449,7 +449,7 @@
   std::map<ExtensionId, ExtensionDownloaderDelegate::PingResult> ping_results_;
 
   // Cache for .crx files.
-  raw_ptr<ExtensionCache> extension_cache_;
+  raw_ptr<ExtensionCache, DanglingUntriaged> extension_cache_;
 
   // May be used to fetch access tokens for protected download requests. May be
   // null. If non-null, guaranteed to outlive this object.
diff --git a/extensions/browser/updater/update_service_unittest.cc b/extensions/browser/updater/update_service_unittest.cc
index d4521b9f..0ede966 100644
--- a/extensions/browser/updater/update_service_unittest.cc
+++ b/extensions/browser/updater/update_service_unittest.cc
@@ -493,7 +493,7 @@
   }
 
  private:
-  raw_ptr<UpdateService> update_service_ = nullptr;
+  raw_ptr<UpdateService, DanglingUntriaged> update_service_ = nullptr;
   scoped_refptr<FakeUpdateClient> update_client_;
   MockExtensionSystemFactory<FakeExtensionSystem>
       fake_extension_system_factory_;
diff --git a/extensions/components/native_app_window/native_app_window_views.h b/extensions/components/native_app_window/native_app_window_views.h
index 461713fb..2fa65557 100644
--- a/extensions/components/native_app_window/native_app_window_views.h
+++ b/extensions/components/native_app_window/native_app_window_views.h
@@ -156,7 +156,7 @@
 
   raw_ptr<extensions::AppWindow> app_window_ = nullptr;  // Not owned.
   raw_ptr<views::WebView> web_view_ = nullptr;
-  raw_ptr<views::Widget> widget_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> widget_ = nullptr;
 
   std::unique_ptr<SkRegion> draggable_region_;
 
diff --git a/extensions/shell/browser/shell_native_app_window.h b/extensions/shell/browser/shell_native_app_window.h
index 8474134..620fe41 100644
--- a/extensions/shell/browser/shell_native_app_window.h
+++ b/extensions/shell/browser/shell_native_app_window.h
@@ -71,7 +71,7 @@
   void SetActivateOnPointer(bool activate_on_pointer) override;
 
  private:
-  raw_ptr<AppWindow> app_window_;
+  raw_ptr<AppWindow, DanglingUntriaged> app_window_;
 };
 
 }  // namespace extensions
diff --git a/google_apis/gcm/engine/mcs_client.h b/google_apis/gcm/engine/mcs_client.h
index 975a7ba2..c8fac2e 100644
--- a/google_apis/gcm/engine/mcs_client.h
+++ b/google_apis/gcm/engine/mcs_client.h
@@ -303,7 +303,7 @@
   PersistentIdList restored_unackeds_server_ids_;
 
   // The GCM persistent store. Not owned.
-  raw_ptr<GCMStore> gcm_store_;
+  raw_ptr<GCMStore, DanglingUntriaged> gcm_store_;
 
   const scoped_refptr<base::SequencedTaskRunner> io_task_runner_;
 
diff --git a/gpu/command_buffer/client/cmd_buffer_helper.h b/gpu/command_buffer/client/cmd_buffer_helper.h
index bdb61437..2d169a3 100644
--- a/gpu/command_buffer/client/cmd_buffer_helper.h
+++ b/gpu/command_buffer/client/cmd_buffer_helper.h
@@ -311,7 +311,7 @@
   // from given command buffer state.
   void UpdateCachedState(const CommandBuffer::State& state);
 
-  const raw_ptr<CommandBuffer> command_buffer_;
+  const raw_ptr<CommandBuffer, DanglingUntriaged> command_buffer_;
   int32_t ring_buffer_id_ = -1;
   uint32_t ring_buffer_size_ = 0;
   scoped_refptr<gpu::Buffer> ring_buffer_;
diff --git a/gpu/command_buffer/client/fenced_allocator.h b/gpu/command_buffer/client/fenced_allocator.h
index 5e92b2b..2847ab7 100644
--- a/gpu/command_buffer/client/fenced_allocator.h
+++ b/gpu/command_buffer/client/fenced_allocator.h
@@ -272,7 +272,7 @@
 
  private:
   FencedAllocator allocator_;
-  raw_ptr<void> base_;
+  raw_ptr<void, DanglingUntriaged> base_;
 };
 
 }  // namespace gpu
diff --git a/gpu/command_buffer/client/gles2_implementation_unittest.cc b/gpu/command_buffer/client/gles2_implementation_unittest.cc
index 23a3232c..b7a3c4a 100644
--- a/gpu/command_buffer/client/gles2_implementation_unittest.cc
+++ b/gpu/command_buffer/client/gles2_implementation_unittest.cc
@@ -469,7 +469,7 @@
   raw_ptr<MockClientGpuControl> gpu_control_;
   raw_ptr<GLES2CmdHelper> helper_;
   raw_ptr<MockTransferBuffer> transfer_buffer_;
-  raw_ptr<GLES2Implementation> gl_;
+  raw_ptr<GLES2Implementation, DanglingUntriaged> gl_;
   raw_ptr<CommandBufferEntry> commands_;
 };
 
diff --git a/gpu/command_buffer/client/raster_implementation_unittest.cc b/gpu/command_buffer/client/raster_implementation_unittest.cc
index 17fd7ad..4f5162d 100644
--- a/gpu/command_buffer/client/raster_implementation_unittest.cc
+++ b/gpu/command_buffer/client/raster_implementation_unittest.cc
@@ -306,7 +306,7 @@
   raw_ptr<MockClientGpuControl> gpu_control_;
   raw_ptr<RasterCmdHelper> helper_;
   raw_ptr<MockTransferBuffer> transfer_buffer_;
-  raw_ptr<RasterImplementation> gl_;
+  raw_ptr<RasterImplementation, DanglingUntriaged> gl_;
   raw_ptr<CommandBufferEntry> commands_;
 };
 
diff --git a/gpu/command_buffer/client/ring_buffer.h b/gpu/command_buffer/client/ring_buffer.h
index 383891c..2a7928583 100644
--- a/gpu/command_buffer/client/ring_buffer.h
+++ b/gpu/command_buffer/client/ring_buffer.h
@@ -160,7 +160,7 @@
   uint32_t num_used_blocks_ = 0;
 
   // The physical address that corresponds to base_offset.
-  raw_ptr<void> base_;
+  raw_ptr<void, DanglingUntriaged> base_;
 };
 
 }  // namespace gpu
diff --git a/gpu/command_buffer/client/ring_buffer_test.cc b/gpu/command_buffer/client/ring_buffer_test.cc
index 2d4418cb..538af9b3 100644
--- a/gpu/command_buffer/client/ring_buffer_test.cc
+++ b/gpu/command_buffer/client/ring_buffer_test.cc
@@ -85,7 +85,7 @@
   bool delay_set_token_;
 
   std::unique_ptr<int8_t[]> buffer_;
-  raw_ptr<int8_t> buffer_start_;
+  raw_ptr<int8_t, DanglingUntriaged> buffer_start_;
   base::test::SingleThreadTaskEnvironment task_environment_;
 };
 
diff --git a/gpu/command_buffer/client/transfer_buffer.h b/gpu/command_buffer/client/transfer_buffer.h
index 29be30e4..86c4afc4 100644
--- a/gpu/command_buffer/client/transfer_buffer.h
+++ b/gpu/command_buffer/client/transfer_buffer.h
@@ -242,7 +242,7 @@
   raw_ptr<void> buffer_;
   unsigned int size_;
   raw_ptr<CommandBufferHelper> helper_;
-  raw_ptr<TransferBufferInterface> transfer_buffer_;
+  raw_ptr<TransferBufferInterface, DanglingUntriaged> transfer_buffer_;
 };
 
 template <typename T>
diff --git a/gpu/command_buffer/service/command_buffer_direct.h b/gpu/command_buffer/service/command_buffer_direct.h
index 6fa3e7f4..4b49f16 100644
--- a/gpu/command_buffer/service/command_buffer_direct.h
+++ b/gpu/command_buffer/service/command_buffer_direct.h
@@ -68,7 +68,7 @@
 
  private:
   CommandBufferService service_;
-  raw_ptr<AsyncAPIInterface> handler_ = nullptr;
+  raw_ptr<AsyncAPIInterface, DanglingUntriaged> handler_ = nullptr;
 };
 
 }  // namespace gpu
diff --git a/gpu/command_buffer/service/common_decoder.h b/gpu/command_buffer/service/common_decoder.h
index fea96818..7d6c205 100644
--- a/gpu/command_buffer/service/common_decoder.h
+++ b/gpu/command_buffer/service/common_decoder.h
@@ -217,8 +217,8 @@
 
   #undef COMMON_COMMAND_BUFFER_CMD_OP
 
-  raw_ptr<CommandBufferServiceBase> command_buffer_service_;
-  raw_ptr<DecoderClient> client_;
+  raw_ptr<CommandBufferServiceBase, DanglingUntriaged> command_buffer_service_;
+  raw_ptr<DecoderClient, DanglingUntriaged> client_;
   size_t max_bucket_size_;
 
   using BucketMap = std::map<uint32_t, std::unique_ptr<Bucket>>;
diff --git a/gpu/command_buffer/service/dawn_service_serializer.h b/gpu/command_buffer/service/dawn_service_serializer.h
index d4ffd617..dbc4bb8 100644
--- a/gpu/command_buffer/service/dawn_service_serializer.h
+++ b/gpu/command_buffer/service/dawn_service_serializer.h
@@ -27,7 +27,7 @@
   bool NeedsFlush() const;
 
  private:
-  raw_ptr<DecoderClient> client_;
+  raw_ptr<DecoderClient, DanglingUntriaged> client_;
   std::vector<uint8_t> buffer_;
   size_t put_offset_;
 };
diff --git a/gpu/command_buffer/service/gles2_cmd_decoder_passthrough.h b/gpu/command_buffer/service/gles2_cmd_decoder_passthrough.h
index db44c1c..6f9cd88c 100644
--- a/gpu/command_buffer/service/gles2_cmd_decoder_passthrough.h
+++ b/gpu/command_buffer/service/gles2_cmd_decoder_passthrough.h
@@ -64,7 +64,7 @@
   GLsizeiptr size;
   GLbitfield original_access;
   GLbitfield filtered_access;
-  raw_ptr<uint8_t, AllowPtrArithmetic> map_ptr;
+  raw_ptr<uint8_t, DanglingUntriaged | AllowPtrArithmetic> map_ptr;
   int32_t data_shm_id;
   uint32_t data_shm_offset;
 };
diff --git a/gpu/command_buffer/service/gles2_query_manager.h b/gpu/command_buffer/service/gles2_query_manager.h
index 9341e48..f26218e 100644
--- a/gpu/command_buffer/service/gles2_query_manager.h
+++ b/gpu/command_buffer/service/gles2_query_manager.h
@@ -90,7 +90,7 @@
   // Safely resets the disjoint value if no queries are active.
   void SafelyResetDisjointValue();
 
-  raw_ptr<GLES2Decoder> decoder_;
+  raw_ptr<GLES2Decoder, DanglingUntriaged> decoder_;
 
   bool use_arb_occlusion_query2_for_occlusion_query_boolean_;
   bool use_arb_occlusion_query_for_occlusion_query_boolean_;
diff --git a/gpu/command_buffer/service/memory_program_cache_unittest.cc b/gpu/command_buffer/service/memory_program_cache_unittest.cc
index cf137ae..1da26cb1 100644
--- a/gpu/command_buffer/service/memory_program_cache_unittest.cc
+++ b/gpu/command_buffer/service/memory_program_cache_unittest.cc
@@ -204,8 +204,8 @@
   GpuProcessActivityFlags activity_flags_;
   std::unique_ptr<MemoryProgramCache> cache_;
   ShaderManager shader_manager_;
-  raw_ptr<Shader> vertex_shader_;
-  raw_ptr<Shader> fragment_shader_;
+  raw_ptr<Shader, DanglingUntriaged> vertex_shader_;
+  raw_ptr<Shader, DanglingUntriaged> fragment_shader_;
   int32_t shader_cache_count_;
   std::string shader_cache_shader_;
   std::vector<std::string> varyings_;
diff --git a/gpu/command_buffer/service/mocks.h b/gpu/command_buffer/service/mocks.h
index 5444dc6..41c6b9a 100644
--- a/gpu/command_buffer/service/mocks.h
+++ b/gpu/command_buffer/service/mocks.h
@@ -63,7 +63,7 @@
 
    private:
     unsigned int arg_count_;
-    raw_ptr<volatile CommandBufferEntry> args_;
+    raw_ptr<volatile CommandBufferEntry, DanglingUntriaged> args_;
   };
 
   void BeginDecoding() override {}
@@ -89,7 +89,7 @@
 
  private:
   raw_ptr<CommandBufferDirect> command_buffer_;
-  raw_ptr<CommandBufferServiceBase> command_buffer_service_;
+  raw_ptr<CommandBufferServiceBase, DanglingUntriaged> command_buffer_service_;
 };
 
 class MockDecoderClient : public DecoderClient {
diff --git a/gpu/command_buffer/service/program_manager_unittest.cc b/gpu/command_buffer/service/program_manager_unittest.cc
index ba5ff8ec..b5b086cd 100644
--- a/gpu/command_buffer/service/program_manager_unittest.cc
+++ b/gpu/command_buffer/service/program_manager_unittest.cc
@@ -2357,9 +2357,9 @@
 
   std::unique_ptr<MockProgramCache> cache_;
 
-  raw_ptr<Shader> vertex_shader_;
-  raw_ptr<Shader> fragment_shader_;
-  raw_ptr<Program> program_;
+  raw_ptr<Shader, DanglingUntriaged> vertex_shader_;
+  raw_ptr<Shader, DanglingUntriaged> fragment_shader_;
+  raw_ptr<Program, DanglingUntriaged> program_;
   ShaderManager shader_manager_;
 };
 
diff --git a/gpu/command_buffer/service/service_discardable_manager_unittest.cc b/gpu/command_buffer/service/service_discardable_manager_unittest.cc
index 00594f1..44ef3083c 100644
--- a/gpu/command_buffer/service/service_discardable_manager_unittest.cc
+++ b/gpu/command_buffer/service/service_discardable_manager_unittest.cc
@@ -131,7 +131,7 @@
   GpuPreferences gpu_preferences_;
   scoped_refptr<FeatureInfo> feature_info_;
   MockDestructionObserver destruction_observer_;
-  raw_ptr<TextureManager> texture_manager_;
+  raw_ptr<TextureManager, DanglingUntriaged> texture_manager_;
   FakeCommandBufferServiceBase command_buffer_service_;
   FakeDecoderClient client_;
   std::unique_ptr<MockGLES2Decoder> decoder_;
diff --git a/gpu/command_buffer/service/shared_image/shared_image_factory.h b/gpu/command_buffer/service/shared_image/shared_image_factory.h
index d5a64dc..388b8d08 100644
--- a/gpu/command_buffer/service/shared_image/shared_image_factory.h
+++ b/gpu/command_buffer/service/shared_image/shared_image_factory.h
@@ -141,7 +141,7 @@
                            viz::SharedImageFormat format,
                            gfx::GpuMemoryBufferType gmb_type);
 
-  raw_ptr<SharedImageManager> shared_image_manager_;
+  raw_ptr<SharedImageManager, DanglingUntriaged> shared_image_manager_;
   raw_ptr<SharedContextState> shared_context_state_;
   std::unique_ptr<MemoryTypeTracker> memory_tracker_;
 
diff --git a/gpu/command_buffer/tests/gl_helper_benchmark.cc b/gpu/command_buffer/tests/gl_helper_benchmark.cc
index 9331cfaaf..f60e565 100644
--- a/gpu/command_buffer/tests/gl_helper_benchmark.cc
+++ b/gpu/command_buffer/tests/gl_helper_benchmark.cc
@@ -108,7 +108,7 @@
 
   base::test::TaskEnvironment task_environment_;
   std::unique_ptr<GLInProcessContext> context_;
-  raw_ptr<gles2::GLES2Interface> gl_;
+  raw_ptr<gles2::GLES2Interface, DanglingUntriaged> gl_;
   std::unique_ptr<GLHelper> helper_;
   std::unique_ptr<GLHelperScaling> helper_scaling_;
   base::circular_deque<GLHelperScaling::ScaleOp> x_ops_, y_ops_;
diff --git a/gpu/command_buffer/tests/gl_helper_unittest.cc b/gpu/command_buffer/tests/gl_helper_unittest.cc
index c660218a..2f32c43 100644
--- a/gpu/command_buffer/tests/gl_helper_unittest.cc
+++ b/gpu/command_buffer/tests/gl_helper_unittest.cc
@@ -1256,7 +1256,7 @@
 
   base::test::ScopedFeatureList feature_list_;
   std::unique_ptr<GLInProcessContext> context_;
-  raw_ptr<gles2::GLES2Interface> gl_;
+  raw_ptr<gles2::GLES2Interface, DanglingUntriaged> gl_;
   std::unique_ptr<GLHelper> helper_;
   std::unique_ptr<GLHelperScaling> helper_scaling_;
   base::circular_deque<GLHelperScaling::ScaleOp> x_ops_, y_ops_;
diff --git a/gpu/command_buffer/tests/gl_test_setup_helper.h b/gpu/command_buffer/tests/gl_test_setup_helper.h
index 4e72b61..4184aa4 100644
--- a/gpu/command_buffer/tests/gl_test_setup_helper.h
+++ b/gpu/command_buffer/tests/gl_test_setup_helper.h
@@ -28,7 +28,7 @@
 
  private:
   std::unique_ptr<base::test::TaskEnvironment> task_environment_;
-  raw_ptr<gl::GLDisplay> display_ = nullptr;
+  raw_ptr<gl::GLDisplay, DanglingUntriaged> display_ = nullptr;
 };
 
 }  // namespace gpu
diff --git a/gpu/ipc/client/gpu_in_process_context_tests.cc b/gpu/ipc/client/gpu_in_process_context_tests.cc
index cfb1d47..536cefab 100644
--- a/gpu/ipc/client/gpu_in_process_context_tests.cc
+++ b/gpu/ipc/client/gpu_in_process_context_tests.cc
@@ -43,8 +43,8 @@
   void TearDown() override { context_.reset(); }
 
  protected:
-  raw_ptr<gpu::gles2::GLES2Interface> gl_;
-  raw_ptr<gpu::ContextSupport> context_support_;
+  raw_ptr<gpu::gles2::GLES2Interface, DanglingUntriaged> gl_;
+  raw_ptr<gpu::ContextSupport, DanglingUntriaged> context_support_;
 
  private:
   gpu::InProcessGpuThreadHolder gpu_thread_holder_;
diff --git a/ipc/ipc_channel_mojo.h b/ipc/ipc_channel_mojo.h
index 06605c1b..b5401a6 100644
--- a/ipc/ipc_channel_mojo.h
+++ b/ipc/ipc_channel_mojo.h
@@ -122,7 +122,7 @@
 
   const mojo::MessagePipeHandle pipe_;
   std::unique_ptr<MojoBootstrap> bootstrap_;
-  raw_ptr<Listener> listener_;
+  raw_ptr<Listener, DanglingUntriaged> listener_;
 
   std::unique_ptr<internal::MessagePipeReader> message_reader_;
 
diff --git a/ipc/ipc_channel_mojo_unittest.cc b/ipc/ipc_channel_mojo_unittest.cc
index c9aefa7e..733cd53 100644
--- a/ipc/ipc_channel_mojo_unittest.cc
+++ b/ipc/ipc_channel_mojo_unittest.cc
@@ -1154,7 +1154,7 @@
     receiver_.Bind(std::move(receiver));
   }
 
-  raw_ptr<IPC::Sender> sync_sender_ = nullptr;
+  raw_ptr<IPC::Sender, DanglingUntriaged> sync_sender_ = nullptr;
   int32_t next_expected_value_ = 0;
   int32_t response_value_ = 0;
   base::OnceClosure quit_closure_;
diff --git a/ipc/ipc_fuzzing_tests.cc b/ipc/ipc_fuzzing_tests.cc
index 11947ed..39a1d9c 100644
--- a/ipc/ipc_fuzzing_tests.cc
+++ b/ipc/ipc_fuzzing_tests.cc
@@ -147,7 +147,7 @@
     other_ = s;
   }
  protected:
-  raw_ptr<IPC::Sender> other_;
+  raw_ptr<IPC::Sender, DanglingUntriaged> other_;
 };
 
 enum {
diff --git a/ipc/ipc_sync_channel_unittest.cc b/ipc/ipc_sync_channel_unittest.cc
index 57318a2..6d13466 100644
--- a/ipc/ipc_sync_channel_unittest.cc
+++ b/ipc/ipc_sync_channel_unittest.cc
@@ -1172,8 +1172,8 @@
   }
 
   int ping_;
-  raw_ptr<RestrictedDispatchServer> server_;
-  raw_ptr<NonRestrictedDispatchServer> server2_;
+  raw_ptr<RestrictedDispatchServer, DanglingUntriaged> server_;
+  raw_ptr<NonRestrictedDispatchServer, DanglingUntriaged> server2_;
   raw_ptr<int> success_;
   raw_ptr<WaitableEvent> sent_ping_event_;
   std::unique_ptr<SyncChannel> non_restricted_channel_;
@@ -1286,7 +1286,7 @@
   int server_num_;
   raw_ptr<WaitableEvent> server_ready_event_;
   raw_ptr<WaitableEvent*> events_;
-  raw_ptr<RestrictedDispatchDeadlockServer> peer_;
+  raw_ptr<RestrictedDispatchDeadlockServer, DanglingUntriaged> peer_;
 };
 
 class RestrictedDispatchDeadlockClient2 : public Worker {
@@ -1409,8 +1409,8 @@
     }
   }
 
-  raw_ptr<RestrictedDispatchDeadlockServer> server_;
-  raw_ptr<RestrictedDispatchDeadlockClient2> peer_;
+  raw_ptr<RestrictedDispatchDeadlockServer, DanglingUntriaged> server_;
+  raw_ptr<RestrictedDispatchDeadlockClient2, DanglingUntriaged> peer_;
   raw_ptr<WaitableEvent> server_ready_event_;
   raw_ptr<WaitableEvent*> events_;
   bool received_msg_;
diff --git a/ipc/ipc_test_channel_listener.h b/ipc/ipc_test_channel_listener.h
index 2f7b920..d45e0ab 100644
--- a/ipc/ipc_test_channel_listener.h
+++ b/ipc/ipc_test_channel_listener.h
@@ -38,7 +38,7 @@
   void SendNextMessage();
 
  private:
-  raw_ptr<Sender> sender_;
+  raw_ptr<Sender, DanglingUntriaged> sender_;
   int messages_left_;
 };
 
diff --git a/ipc/sync_socket_unittest.cc b/ipc/sync_socket_unittest.cc
index c69e506..80200152 100644
--- a/ipc/sync_socket_unittest.cc
+++ b/ipc/sync_socket_unittest.cc
@@ -160,7 +160,7 @@
   }
 
   raw_ptr<base::SyncSocket> socket_;
-  raw_ptr<IPC::Channel> chan_;
+  raw_ptr<IPC::Channel, DanglingUntriaged> chan_;
 };
 
 using SyncSocketTest = IPCChannelMojoTestBase;
diff --git a/media/audio/audio_output_unittest.cc b/media/audio/audio_output_unittest.cc
index 6e37b79..e24db8c 100644
--- a/media/audio/audio_output_unittest.cc
+++ b/media/audio/audio_output_unittest.cc
@@ -81,7 +81,7 @@
   std::unique_ptr<AudioManager> audio_manager_;
   std::unique_ptr<AudioDeviceInfoAccessorForTests> audio_manager_device_info_;
   AudioParameters stream_params_;
-  raw_ptr<AudioOutputStream> stream_ = nullptr;
+  raw_ptr<AudioOutputStream, DanglingUntriaged> stream_ = nullptr;
   bool should_use_aaudio_ = false;
   bool aaudio_is_supported_ = false;
 #if BUILDFLAG(IS_ANDROID)
diff --git a/media/audio/clockless_audio_sink.cc b/media/audio/clockless_audio_sink.cc
index 0f5e861d..59aaa97 100644
--- a/media/audio/clockless_audio_sink.cc
+++ b/media/audio/clockless_audio_sink.cc
@@ -75,7 +75,7 @@
     }
   }
 
-  raw_ptr<AudioRendererSink::RenderCallback> callback_;
+  raw_ptr<AudioRendererSink::RenderCallback, DanglingUntriaged> callback_;
   std::unique_ptr<AudioBus> audio_bus_;
   std::unique_ptr<base::WaitableEvent> stop_event_;
   std::unique_ptr<base::DelegateSimpleThread> thread_;
diff --git a/media/audio/null_audio_sink.h b/media/audio/null_audio_sink.h
index d44c8a7..fdb40be2 100644
--- a/media/audio/null_audio_sink.h
+++ b/media/audio/null_audio_sink.h
@@ -59,7 +59,7 @@
   bool initialized_;
   bool started_;
   bool playing_;
-  raw_ptr<RenderCallback> callback_;
+  raw_ptr<RenderCallback, DanglingUntriaged> callback_;
 
   // Controls whether or not a running hash is computed for audio frames.
   std::unique_ptr<AudioHash> audio_hash_;
diff --git a/media/base/mock_audio_renderer_sink.h b/media/base/mock_audio_renderer_sink.h
index 68d1f70..53cd304 100644
--- a/media/base/mock_audio_renderer_sink.h
+++ b/media/base/mock_audio_renderer_sink.h
@@ -50,7 +50,7 @@
   ~MockAudioRendererSink() override;
 
  private:
-  raw_ptr<RenderCallback> callback_;
+  raw_ptr<RenderCallback, DanglingUntriaged> callback_;
   OutputDeviceInfo output_device_info_;
 };
 
diff --git a/media/base/null_video_sink.h b/media/base/null_video_sink.h
index b6cba54..c30794b 100644
--- a/media/base/null_video_sink.h
+++ b/media/base/null_video_sink.h
@@ -68,7 +68,7 @@
   scoped_refptr<base::SingleThreadTaskRunner> task_runner_;
 
   bool started_;
-  raw_ptr<RenderCallback> callback_;
+  raw_ptr<RenderCallback, DanglingUntriaged> callback_;
 
   // Manages cancellation of periodic Render() callback task.
   base::CancelableRepeatingClosure cancelable_worker_;
diff --git a/media/base/pipeline_impl.cc b/media/base/pipeline_impl.cc
index ad32f53..ae41795 100644
--- a/media/base/pipeline_impl.cc
+++ b/media/base/pipeline_impl.cc
@@ -192,7 +192,7 @@
 
   const scoped_refptr<base::SequencedTaskRunner> media_task_runner_;
   const scoped_refptr<base::SingleThreadTaskRunner> main_task_runner_;
-  const raw_ptr<MediaLog> media_log_;
+  const raw_ptr<MediaLog, DanglingUntriaged> media_log_;
 
   // A weak pointer to PipelineImpl. Must only use on the main task runner.
   base::WeakPtr<PipelineImpl> weak_pipeline_;
diff --git a/media/capabilities/webrtc_video_stats_db_impl_unittest.cc b/media/capabilities/webrtc_video_stats_db_impl_unittest.cc
index 064139c..3c20f07c 100644
--- a/media/capabilities/webrtc_video_stats_db_impl_unittest.cc
+++ b/media/capabilities/webrtc_video_stats_db_impl_unittest.cc
@@ -228,7 +228,7 @@
 
   // See documentation in SetUp()
   std::unique_ptr<FakeDB<WebrtcVideoStatsEntryProto>::EntryMap> fake_db_map_;
-  raw_ptr<FakeDB<WebrtcVideoStatsEntryProto>> fake_db_;
+  raw_ptr<FakeDB<WebrtcVideoStatsEntryProto>, DanglingUntriaged> fake_db_;
   std::unique_ptr<WebrtcVideoStatsDBImpl> stats_db_;
 };
 
diff --git a/media/cdm/aes_decryptor_unittest.cc b/media/cdm/aes_decryptor_unittest.cc
index 5d24cd13..fbd2e66 100644
--- a/media/cdm/aes_decryptor_unittest.cc
+++ b/media/cdm/aes_decryptor_unittest.cc
@@ -497,7 +497,7 @@
 
   StrictMock<MockCdmClient> cdm_client_;
   scoped_refptr<ContentDecryptionModule> cdm_;
-  raw_ptr<Decryptor> decryptor_;
+  raw_ptr<Decryptor, DanglingUntriaged> decryptor_;
   std::string session_id_;
 
 #if BUILDFLAG(ENABLE_LIBRARY_CDMS)
diff --git a/media/cdm/cdm_adapter_unittest.cc b/media/cdm/cdm_adapter_unittest.cc
index dadc893..5fbfba67 100644
--- a/media/cdm/cdm_adapter_unittest.cc
+++ b/media/cdm/cdm_adapter_unittest.cc
@@ -182,7 +182,8 @@
   void RunUntilIdle() { task_environment_.RunUntilIdle(); }
 
   StrictMock<MockCdmClient> cdm_client_;
-  raw_ptr<StrictMock<MockCdmAuxiliaryHelper>> cdm_helper_ = nullptr;
+  raw_ptr<StrictMock<MockCdmAuxiliaryHelper>, DanglingUntriaged> cdm_helper_ =
+      nullptr;
 
   // Keep track of the loaded CDM.
   scoped_refptr<ContentDecryptionModule> cdm_;
@@ -354,8 +355,8 @@
     ASSERT_TRUE(cdm_host_proxy_);
   }
 
-  raw_ptr<MockLibraryCdm> mock_library_cdm_ = nullptr;
-  raw_ptr<CdmHostProxy> cdm_host_proxy_ = nullptr;
+  raw_ptr<MockLibraryCdm, DanglingUntriaged> mock_library_cdm_ = nullptr;
+  raw_ptr<CdmHostProxy, DanglingUntriaged> cdm_host_proxy_ = nullptr;
 };
 
 // Instantiate test cases
diff --git a/media/filters/audio_file_reader.h b/media/filters/audio_file_reader.h
index 885eea2..e3528c6 100644
--- a/media/filters/audio_file_reader.h
+++ b/media/filters/audio_file_reader.h
@@ -107,7 +107,7 @@
   std::unique_ptr<AVCodecContext, ScopedPtrAVFreeContext> codec_context_;
 
   int stream_index_;
-  raw_ptr<FFmpegURLProtocol> protocol_;
+  raw_ptr<FFmpegURLProtocol, DanglingUntriaged> protocol_;
   AudioCodec audio_codec_;
   int channels_;
   int sample_rate_;
diff --git a/media/filters/decoder_selector.h b/media/filters/decoder_selector.h
index c0493ef..14135bc 100644
--- a/media/filters/decoder_selector.h
+++ b/media/filters/decoder_selector.h
@@ -156,8 +156,8 @@
   DecoderPriorityCB decoder_priority_cb_;
   raw_ptr<MediaLog> media_log_;
 
-  raw_ptr<StreamTraits> traits_ = nullptr;
-  raw_ptr<DemuxerStream> stream_ = nullptr;
+  raw_ptr<StreamTraits, DanglingUntriaged> traits_ = nullptr;
+  raw_ptr<DemuxerStream, DanglingUntriaged> stream_ = nullptr;
   raw_ptr<CdmContext> cdm_context_ = nullptr;
   WaitingCB waiting_cb_;
 
diff --git a/media/filters/decoder_stream.h b/media/filters/decoder_stream.h
index 7ecebaa..811c484 100644
--- a/media/filters/decoder_stream.h
+++ b/media/filters/decoder_stream.h
@@ -245,7 +245,7 @@
   ReadCB read_cb_;
   base::OnceClosure reset_cb_;
 
-  raw_ptr<DemuxerStream> stream_;
+  raw_ptr<DemuxerStream, DanglingUntriaged> stream_;
 
   raw_ptr<CdmContext> cdm_context_;
 
diff --git a/media/filters/ffmpeg_audio_decoder.h b/media/filters/ffmpeg_audio_decoder.h
index 83b5759a..67c4e69db 100644
--- a/media/filters/ffmpeg_audio_decoder.h
+++ b/media/filters/ffmpeg_audio_decoder.h
@@ -116,7 +116,7 @@
 
   std::unique_ptr<AudioDiscardHelper> discard_helper_;
 
-  raw_ptr<MediaLog> media_log_;
+  raw_ptr<MediaLog, DanglingUntriaged> media_log_;
 
   scoped_refptr<AudioBufferMemoryPool> pool_;
 
diff --git a/media/filters/ffmpeg_video_decoder.h b/media/filters/ffmpeg_video_decoder.h
index ded51394..60cb9d5 100644
--- a/media/filters/ffmpeg_video_decoder.h
+++ b/media/filters/ffmpeg_video_decoder.h
@@ -78,7 +78,7 @@
 
   SEQUENCE_CHECKER(sequence_checker_);
 
-  const raw_ptr<MediaLog> media_log_;
+  const raw_ptr<MediaLog, DanglingUntriaged> media_log_;
 
   DecoderState state_ = DecoderState::kUninitialized;
 
diff --git a/media/filters/frame_processor.cc b/media/filters/frame_processor.cc
index e0e2af3..0faae48 100644
--- a/media/filters/frame_processor.cc
+++ b/media/filters/frame_processor.cc
@@ -174,7 +174,7 @@
 
   // Pointer to the stream associated with this track. The stream is not owned
   // by |this|.
-  const raw_ptr<ChunkDemuxerStream> stream_;
+  const raw_ptr<ChunkDemuxerStream, DanglingUntriaged> stream_;
 
   // Queue of processed frames that have not yet been appended to |stream_|.
   // EnqueueProcessedFrame() adds to this queue, and FlushProcessedFrames()
diff --git a/media/filters/h264_bitstream_buffer.h b/media/filters/h264_bitstream_buffer.h
index 4f433b8..6e8ca72e 100644
--- a/media/filters/h264_bitstream_buffer.h
+++ b/media/filters/h264_bitstream_buffer.h
@@ -140,7 +140,7 @@
   size_t bits_in_buffer_;
 
   // Buffer for stream data.
-  raw_ptr<uint8_t, AllowPtrArithmetic> data_;
+  raw_ptr<uint8_t, DanglingUntriaged | AllowPtrArithmetic> data_;
 };
 
 }  // namespace media
diff --git a/media/filters/pipeline_controller_unittest.cc b/media/filters/pipeline_controller_unittest.cc
index a590c62e..8e5265a 100644
--- a/media/filters/pipeline_controller_unittest.cc
+++ b/media/filters/pipeline_controller_unittest.cc
@@ -162,7 +162,7 @@
   base::test::SingleThreadTaskEnvironment task_environment_;
 
   NiceMock<MockDemuxer> demuxer_;
-  raw_ptr<StrictMock<MockPipeline>> pipeline_;
+  raw_ptr<StrictMock<MockPipeline>, DanglingUntriaged> pipeline_;
   PipelineController pipeline_controller_;
 
   bool was_seeked_ = false;
diff --git a/media/filters/source_buffer_state_unittest.cc b/media/filters/source_buffer_state_unittest.cc
index 184c98a..303739c 100644
--- a/media/filters/source_buffer_state_unittest.cc
+++ b/media/filters/source_buffer_state_unittest.cc
@@ -168,7 +168,7 @@
 
   testing::StrictMock<MockMediaLog> media_log_;
   std::vector<std::unique_ptr<ChunkDemuxerStream>> demuxer_streams_;
-  raw_ptr<MockStreamParser> mock_stream_parser_;
+  raw_ptr<MockStreamParser, DanglingUntriaged> mock_stream_parser_;
   StreamParser::NewConfigCB new_config_cb_;
 };
 
diff --git a/media/filters/video_decoder_stream_unittest.cc b/media/filters/video_decoder_stream_unittest.cc
index 4ed49c27..c3ad3e6f 100644
--- a/media/filters/video_decoder_stream_unittest.cc
+++ b/media/filters/video_decoder_stream_unittest.cc
@@ -548,7 +548,7 @@
   std::vector<int> platform_decoder_indices_;
 
   // The current decoder used by |video_decoder_stream_|.
-  raw_ptr<FakeVideoDecoder> decoder_ = nullptr;
+  raw_ptr<FakeVideoDecoder, DanglingUntriaged> decoder_ = nullptr;
 
   bool is_initialized_;
   int num_decoded_frames_;
diff --git a/media/formats/hls/media_playlist_test_builder.h b/media/formats/hls/media_playlist_test_builder.h
index 862e38c..85abc7cc 100644
--- a/media/formats/hls/media_playlist_test_builder.h
+++ b/media/formats/hls/media_playlist_test_builder.h
@@ -77,7 +77,7 @@
   void VerifyExpectations(const MediaPlaylist& playlist,
                           const base::Location& from) const override;
 
-  raw_ptr<const MultivariantPlaylist> parent_ = nullptr;
+  raw_ptr<const MultivariantPlaylist, DanglingUntriaged> parent_ = nullptr;
   std::vector<SegmentExpectations> segment_expectations_;
 };
 
diff --git a/media/gpu/av1_decoder_unittest.cc b/media/gpu/av1_decoder_unittest.cc
index 4025bbfc..3061a33b 100644
--- a/media/gpu/av1_decoder_unittest.cc
+++ b/media/gpu/av1_decoder_unittest.cc
@@ -152,7 +152,7 @@
   }
 
   // Owned by |decoder_|.
-  raw_ptr<MockAV1Accelerator> mock_accelerator_;
+  raw_ptr<MockAV1Accelerator, DanglingUntriaged> mock_accelerator_;
 
   std::unique_ptr<AV1Decoder> decoder_;
   int32_t bitstream_id_ = 0;
diff --git a/media/gpu/ipc/service/vda_video_decoder_unittest.cc b/media/gpu/ipc/service/vda_video_decoder_unittest.cc
index 69e1959..23fee44 100644
--- a/media/gpu/ipc/service/vda_video_decoder_unittest.cc
+++ b/media/gpu/ipc/service/vda_video_decoder_unittest.cc
@@ -308,12 +308,13 @@
   testing::StrictMock<base::MockCallback<base::OnceClosure>> reset_cb_;
 
   scoped_refptr<FakeCommandBufferHelper> cbh_;
-  raw_ptr<testing::StrictMock<MockVideoDecodeAccelerator>> vda_;
+  raw_ptr<testing::StrictMock<MockVideoDecodeAccelerator>, DanglingUntriaged>
+      vda_;
   std::unique_ptr<VideoDecodeAccelerator> owned_vda_;
   scoped_refptr<PictureBufferManager> pbm_;
   std::unique_ptr<AsyncDestroyVideoDecoder<VdaVideoDecoder>> vdavd_;
 
-  raw_ptr<VideoDecodeAccelerator::Client> client_;
+  raw_ptr<VideoDecodeAccelerator::Client, DanglingUntriaged> client_;
   uint64_t next_release_count_ = 1;
 };
 
diff --git a/media/gpu/vaapi/vaapi_wrapper.h b/media/gpu/vaapi/vaapi_wrapper.h
index f4c698c..c093cf8 100644
--- a/media/gpu/vaapi/vaapi_wrapper.h
+++ b/media/gpu/vaapi/vaapi_wrapper.h
@@ -461,7 +461,7 @@
   struct VABufferDescriptor {
     VABufferType type;
     size_t size;
-    raw_ptr<const void> data;
+    raw_ptr<const void, DanglingUntriaged> data;
   };
   [[nodiscard]] bool SubmitBuffers(
       const std::vector<VABufferDescriptor>& va_buffers);
diff --git a/media/gpu/vaapi/vp9_vaapi_video_encoder_delegate_unittest.cc b/media/gpu/vaapi/vp9_vaapi_video_encoder_delegate_unittest.cc
index 4d88d65..01f7a353 100644
--- a/media/gpu/vaapi/vp9_vaapi_video_encoder_delegate_unittest.cc
+++ b/media/gpu/vaapi/vp9_vaapi_video_encoder_delegate_unittest.cc
@@ -301,7 +301,7 @@
 
   std::unique_ptr<VP9VaapiVideoEncoderDelegate> encoder_;
   scoped_refptr<MockVaapiWrapper> mock_vaapi_wrapper_;
-  raw_ptr<MockVP9RateControl> mock_rate_ctrl_ = nullptr;
+  raw_ptr<MockVP9RateControl, DanglingUntriaged> mock_rate_ctrl_ = nullptr;
 };
 
 void VP9VaapiVideoEncoderDelegateTest::ResetEncoder() {
diff --git a/media/learning/impl/learning_session_impl.cc b/media/learning/impl/learning_session_impl.cc
index bf24a2d0..2fb4846 100644
--- a/media/learning/impl/learning_session_impl.cc
+++ b/media/learning/impl/learning_session_impl.cc
@@ -101,7 +101,8 @@
   }
 
   base::WeakPtr<LearningSessionImpl> weak_session_;
-  raw_ptr<base::SequenceBound<LearningTaskController>> controller_;
+  raw_ptr<base::SequenceBound<LearningTaskController>, DanglingUntriaged>
+      controller_;
   LearningTask task_;
 
   // Set of ids that have been started but not completed / cancelled yet, and
diff --git a/media/learning/impl/learning_task_controller_impl_unittest.cc b/media/learning/impl/learning_task_controller_impl_unittest.cc
index a9653a6..d1c6f77 100644
--- a/media/learning/impl/learning_task_controller_impl_unittest.cc
+++ b/media/learning/impl/learning_task_controller_impl_unittest.cc
@@ -165,8 +165,8 @@
   const TargetValue predicted_target_;
   const TargetValue not_predicted_target_;
 
-  raw_ptr<FakeDistributionReporter> reporter_raw_ = nullptr;
-  raw_ptr<FakeTrainer> trainer_raw_ = nullptr;
+  raw_ptr<FakeDistributionReporter, DanglingUntriaged> reporter_raw_ = nullptr;
+  raw_ptr<FakeTrainer, DanglingUntriaged> trainer_raw_ = nullptr;
 
   LearningTask task_;
   std::unique_ptr<LearningTaskControllerImpl> controller_;
diff --git a/media/mojo/clients/mojo_audio_decoder_unittest.cc b/media/mojo/clients/mojo_audio_decoder_unittest.cc
index d64f867..a028e752 100644
--- a/media/mojo/clients/mojo_audio_decoder_unittest.cc
+++ b/media/mojo/clients/mojo_audio_decoder_unittest.cc
@@ -283,7 +283,7 @@
   // Service side mock.
   std::unique_ptr<MockAudioDecoder> owned_mock_audio_decoder_{
       std::make_unique<StrictMock<MockAudioDecoder>>()};
-  raw_ptr<MockAudioDecoder> mock_audio_decoder_{
+  raw_ptr<MockAudioDecoder, DanglingUntriaged> mock_audio_decoder_{
       owned_mock_audio_decoder_.get()};
 
   int num_of_decodes_ = 0;
diff --git a/media/mojo/clients/mojo_audio_encoder_unittest.cc b/media/mojo/clients/mojo_audio_encoder_unittest.cc
index bb1b8d7..85b3c423 100644
--- a/media/mojo/clients/mojo_audio_encoder_unittest.cc
+++ b/media/mojo/clients/mojo_audio_encoder_unittest.cc
@@ -142,7 +142,8 @@
   // Mojo server-side
   std::unique_ptr<mojo::Receiver<mojom::AudioEncoder>> receiver_;
   std::unique_ptr<MojoAudioEncoderService> audio_encoder_service_;
-  raw_ptr<StrictMock<MockAudioEncoder>> mock_audio_encoder_ = nullptr;
+  raw_ptr<StrictMock<MockAudioEncoder>, DanglingUntriaged> mock_audio_encoder_ =
+      nullptr;
 };
 
 TEST_F(MojoAudioEncoderTest, Initialize_Success) {
diff --git a/media/mojo/clients/mojo_demuxer_stream_impl.h b/media/mojo/clients/mojo_demuxer_stream_impl.h
index 1011405d..d7878363 100644
--- a/media/mojo/clients/mojo_demuxer_stream_impl.h
+++ b/media/mojo/clients/mojo_demuxer_stream_impl.h
@@ -58,7 +58,7 @@
   mojo::Receiver<mojom::DemuxerStream> receiver_;
 
   // See constructor.  We do not own |stream_|.
-  raw_ptr<media::DemuxerStream> stream_;
+  raw_ptr<media::DemuxerStream, DanglingUntriaged> stream_;
 
   std::unique_ptr<MojoDecoderBufferWriter> mojo_decoder_buffer_writer_;
 
diff --git a/media/mojo/clients/mojo_renderer_unittest.cc b/media/mojo/clients/mojo_renderer_unittest.cc
index afb2169..5fe4a57 100644
--- a/media/mojo/clients/mojo_renderer_unittest.cc
+++ b/media/mojo/clients/mojo_renderer_unittest.cc
@@ -222,7 +222,7 @@
   std::unique_ptr<MojoCdmService> mojo_cdm_service_;
 
   // Service side mocks and helpers.
-  raw_ptr<StrictMock<MockRenderer>> mock_renderer_;
+  raw_ptr<StrictMock<MockRenderer>, DanglingUntriaged> mock_renderer_;
   // This field is not a raw_ptr<> because it was filtered by the rewriter for:
   // #addr-of
   RAW_PTR_EXCLUSION RendererClient* remote_renderer_client_;
diff --git a/media/mojo/clients/mojo_video_encode_accelerator.cc b/media/mojo/clients/mojo_video_encode_accelerator.cc
index c8b1af8f..8d588cba 100644
--- a/media/mojo/clients/mojo_video_encode_accelerator.cc
+++ b/media/mojo/clients/mojo_video_encode_accelerator.cc
@@ -58,7 +58,7 @@
   void NotifyEncoderInfoChange(const VideoEncoderInfo& info) override;
 
  private:
-  raw_ptr<VideoEncodeAccelerator::Client> client_;
+  raw_ptr<VideoEncodeAccelerator::Client, DanglingUntriaged> client_;
   mojo::AssociatedReceiver<mojom::VideoEncodeAcceleratorClient> receiver_;
 };
 
diff --git a/media/mojo/services/cdm_service_broker_unittest.cc b/media/mojo/services/cdm_service_broker_unittest.cc
index 1df3c1ac..b34a52b 100644
--- a/media/mojo/services/cdm_service_broker_unittest.cc
+++ b/media/mojo/services/cdm_service_broker_unittest.cc
@@ -56,7 +56,8 @@
   }
 
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockCdmServiceClient> mock_cdm_service_client_ = nullptr;
+  raw_ptr<MockCdmServiceClient, DanglingUntriaged> mock_cdm_service_client_ =
+      nullptr;
   mojo::Remote<mojom::CdmServiceBroker> remote_;
   std::unique_ptr<CdmServiceBroker> broker_;
 };
diff --git a/media/mojo/services/cdm_service_unittest.cc b/media/mojo/services/cdm_service_unittest.cc
index 8228a64..783ed2c8 100644
--- a/media/mojo/services/cdm_service_unittest.cc
+++ b/media/mojo/services/cdm_service_unittest.cc
@@ -172,7 +172,8 @@
         &CdmServiceTest::CdmConnectionClosed, base::Unretained(this)));
   }
   std::unique_ptr<CdmService> service_;
-  raw_ptr<MockCdmServiceClient> mock_cdm_service_client_ = nullptr;
+  raw_ptr<MockCdmServiceClient, DanglingUntriaged> mock_cdm_service_client_ =
+      nullptr;
 };
 
 }  // namespace
diff --git a/media/mojo/services/mojo_audio_input_stream_unittest.cc b/media/mojo/services/mojo_audio_input_stream_unittest.cc
index 6149c2e..d1b9b5b 100644
--- a/media/mojo/services/mojo_audio_input_stream_unittest.cc
+++ b/media/mojo/services/mojo_audio_input_stream_unittest.cc
@@ -184,7 +184,7 @@
   base::CancelableSyncSocket local_;
   std::unique_ptr<TestCancelableSyncSocket> foreign_socket_;
   base::ReadOnlySharedMemoryRegion mem_;
-  raw_ptr<StrictMock<MockDelegate>> delegate_ = nullptr;
+  raw_ptr<StrictMock<MockDelegate>, DanglingUntriaged> delegate_ = nullptr;
   // This field is not a raw_ptr<> because it was filtered by the rewriter for:
   // #addr-of
   RAW_PTR_EXCLUSION AudioInputDelegate::EventHandler* delegate_event_handler_ =
diff --git a/media/mojo/services/mojo_cdm_file_io.h b/media/mojo/services/mojo_cdm_file_io.h
index 0d8a32d..f6b7c51 100644
--- a/media/mojo/services/mojo_cdm_file_io.h
+++ b/media/mojo/services/mojo_cdm_file_io.h
@@ -94,7 +94,7 @@
   raw_ptr<Delegate> delegate_ = nullptr;
 
   // Results of cdm::FileIO operations are sent asynchronously via |client_|.
-  raw_ptr<cdm::FileIOClient> client_ = nullptr;
+  raw_ptr<cdm::FileIOClient, DanglingUntriaged> client_ = nullptr;
 
   mojo::Remote<mojom::CdmStorage> cdm_storage_;
 
diff --git a/media/mojo/services/mojo_decryptor_service.h b/media/mojo/services/mojo_decryptor_service.h
index 4d043d54..7825fe2 100644
--- a/media/mojo/services/mojo_decryptor_service.h
+++ b/media/mojo/services/mojo_decryptor_service.h
@@ -105,7 +105,7 @@
   // Helper class to send decrypted DecoderBuffer to the client.
   std::unique_ptr<MojoDecoderBufferWriter> decrypted_buffer_writer_;
 
-  raw_ptr<media::Decryptor> decryptor_;
+  raw_ptr<media::Decryptor, DanglingUntriaged> decryptor_;
 
   // Holds the CdmContextRef to keep the CdmContext alive for the lifetime of
   // the |decryptor_|.
diff --git a/media/mojo/test/mojo_video_decoder_integration_test.cc b/media/mojo/test/mojo_video_decoder_integration_test.cc
index cc5a84f..3bc02c6e 100644
--- a/media/mojo/test/mojo_video_decoder_integration_test.cc
+++ b/media/mojo/test/mojo_video_decoder_integration_test.cc
@@ -351,7 +351,7 @@
 
   // MediaLog that the service has provided to |decoder_|. This should be
   // proxied to |client_media_log_|.
-  raw_ptr<MediaLog> decoder_media_log_ = nullptr;
+  raw_ptr<MediaLog, DanglingUntriaged> decoder_media_log_ = nullptr;
 
  private:
   // Passes |decoder_| to the service.
diff --git a/media/muxers/mp4_box_writer.h b/media/muxers/mp4_box_writer.h
index 40873127..b2194ab 100644
--- a/media/muxers/mp4_box_writer.h
+++ b/media/muxers/mp4_box_writer.h
@@ -50,7 +50,7 @@
   const Mp4MuxerContext& context() const { return *context_; }
 
  private:
-  const raw_ref<const Mp4MuxerContext> context_;
+  const raw_ref<const Mp4MuxerContext, DanglingUntriaged> context_;
   std::vector<std::unique_ptr<Mp4BoxWriter>> child_boxes_;
   SEQUENCE_CHECKER(sequence_checker_);
 };
diff --git a/media/renderers/decrypting_renderer_unittest.cc b/media/renderers/decrypting_renderer_unittest.cc
index f91c0d84..7cf13b9a0a 100644
--- a/media/renderers/decrypting_renderer_unittest.cc
+++ b/media/renderers/decrypting_renderer_unittest.cc
@@ -95,7 +95,7 @@
   StrictMock<MockDecryptor> decryptor_;
   StrictMock<MockMediaResource> media_resource_;
   StrictMock<MockRendererClient> renderer_client_;
-  raw_ptr<StrictMock<MockRenderer>> renderer_;
+  raw_ptr<StrictMock<MockRenderer>, DanglingUntriaged> renderer_;
   std::unique_ptr<DecryptingRenderer> decrypting_renderer_;
   std::vector<std::unique_ptr<StrictMock<MockDemuxerStream>>> streams_;
 };
diff --git a/media/renderers/renderer_impl_unittest.cc b/media/renderers/renderer_impl_unittest.cc
index 33b2cb0..3dfa8d53 100644
--- a/media/renderers/renderer_impl_unittest.cc
+++ b/media/renderers/renderer_impl_unittest.cc
@@ -363,8 +363,8 @@
   base::SimpleTestTickClock test_tick_clock_;
 
   std::unique_ptr<StrictMock<MockDemuxer>> demuxer_;
-  raw_ptr<StrictMock<MockVideoRenderer>> video_renderer_;
-  raw_ptr<StrictMock<MockAudioRenderer>> audio_renderer_;
+  raw_ptr<StrictMock<MockVideoRenderer>, DanglingUntriaged> video_renderer_;
+  raw_ptr<StrictMock<MockAudioRenderer>, DanglingUntriaged> audio_renderer_;
   std::unique_ptr<RendererImpl> renderer_impl_;
   std::unique_ptr<StrictMock<MockCdmContext>> cdm_context_;
 
diff --git a/media/renderers/video_renderer_impl.h b/media/renderers/video_renderer_impl.h
index ce061c7..8fbeb3a 100644
--- a/media/renderers/video_renderer_impl.h
+++ b/media/renderers/video_renderer_impl.h
@@ -220,7 +220,7 @@
   // might deadlock. Do not call Start() or Stop() on the sink directly, use
   // StartSink() and StopSink() to ensure background rendering is started.  Only
   // access these values on |task_runner_|.
-  const raw_ptr<VideoRendererSink> sink_;
+  const raw_ptr<VideoRendererSink, DanglingUntriaged> sink_;
   bool sink_started_;
 
   // Stores the last decoder config that was passed to
diff --git a/media/renderers/video_renderer_impl_unittest.cc b/media/renderers/video_renderer_impl_unittest.cc
index 60fbbb2..c09be70d 100644
--- a/media/renderers/video_renderer_impl_unittest.cc
+++ b/media/renderers/video_renderer_impl_unittest.cc
@@ -366,7 +366,8 @@
   // Fixture members.
   std::unique_ptr<VideoRendererImpl> renderer_;
   base::SimpleTestTickClock tick_clock_;
-  raw_ptr<NiceMock<MockVideoDecoder>> decoder_;  // Owned by |renderer_|.
+  raw_ptr<NiceMock<MockVideoDecoder>, DanglingUntriaged>
+      decoder_;  // Owned by |renderer_|.
   NiceMock<MockDemuxerStream> demuxer_stream_;
   bool simulate_decode_delay_;
 
diff --git a/media/renderers/video_resource_updater.h b/media/renderers/video_resource_updater.h
index 7d988ca..b3414021 100644
--- a/media/renderers/video_resource_updater.h
+++ b/media/renderers/video_resource_updater.h
@@ -207,10 +207,11 @@
   bool OnMemoryDump(const base::trace_event::MemoryDumpArgs& args,
                     base::trace_event::ProcessMemoryDump* pmd) override;
 
-  const raw_ptr<viz::ContextProvider> context_provider_;
+  const raw_ptr<viz::ContextProvider, DanglingUntriaged> context_provider_;
   const raw_ptr<viz::RasterContextProvider> raster_context_provider_;
   const raw_ptr<viz::SharedBitmapReporter> shared_bitmap_reporter_;
-  const raw_ptr<viz::ClientResourceProvider> resource_provider_;
+  const raw_ptr<viz::ClientResourceProvider, DanglingUntriaged>
+      resource_provider_;
   const bool use_stream_video_draw_quad_;
   const bool use_gpu_memory_buffer_resources_;
   // TODO(crbug.com/759456): Remove after r16 is used without the flag.
diff --git a/media/renderers/video_resource_updater_unittest.cc b/media/renderers/video_resource_updater_unittest.cc
index b82265f6..146bdb8 100644
--- a/media/renderers/video_resource_updater_unittest.cc
+++ b/media/renderers/video_resource_updater_unittest.cc
@@ -331,7 +331,7 @@
   // VideoResourceUpdater registers as a MemoryDumpProvider, which requires
   // a TaskRunner.
   base::test::SingleThreadTaskEnvironment task_environment_;
-  raw_ptr<UploadCounterGLES2Interface> gl_;
+  raw_ptr<UploadCounterGLES2Interface, DanglingUntriaged> gl_;
   scoped_refptr<viz::TestContextProvider> context_provider_;
   FakeSharedBitmapReporter shared_bitmap_reporter_;
   std::unique_ptr<viz::ClientResourceProvider> resource_provider_;
diff --git a/media/video/gpu_memory_buffer_video_frame_pool_unittest.cc b/media/video/gpu_memory_buffer_video_frame_pool_unittest.cc
index 219fd60..bc80f5a 100644
--- a/media/video/gpu_memory_buffer_video_frame_pool_unittest.cc
+++ b/media/video/gpu_memory_buffer_video_frame_pool_unittest.cc
@@ -239,10 +239,10 @@
   static constexpr uint8_t kUValue = 50;
   static constexpr uint8_t kVValue = 150;
 
-  raw_ptr<uint8_t> y_data_ = nullptr;
-  raw_ptr<uint8_t> u_data_ = nullptr;
-  raw_ptr<uint8_t> v_data_ = nullptr;
-  raw_ptr<uint8_t> uv_data_ = nullptr;
+  raw_ptr<uint8_t, DanglingUntriaged> y_data_ = nullptr;
+  raw_ptr<uint8_t, DanglingUntriaged> u_data_ = nullptr;
+  raw_ptr<uint8_t, DanglingUntriaged> v_data_ = nullptr;
+  raw_ptr<uint8_t, DanglingUntriaged> uv_data_ = nullptr;
 
   base::SimpleTestTickClock test_clock_;
   std::unique_ptr<MockGpuVideoAcceleratorFactories> mock_gpu_factories_;
diff --git a/media/video/video_encode_accelerator_adapter_test.cc b/media/video/video_encode_accelerator_adapter_test.cc
index 42af398..103b131 100644
--- a/media/video/video_encode_accelerator_adapter_test.cc
+++ b/media/video/video_encode_accelerator_adapter_test.cc
@@ -215,7 +215,8 @@
       gfx::ColorSpace::CreateREC709();
   std::vector<VideoEncodeAccelerator::SupportedProfile> supported_profiles_;
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<FakeVideoEncodeAccelerator> vea_;  // owned by |vae_adapter_|
+  raw_ptr<FakeVideoEncodeAccelerator, DanglingUntriaged>
+      vea_;  // owned by |vae_adapter_|
   std::unique_ptr<MockGpuVideoAcceleratorFactories> gpu_factories_;
   std::unique_ptr<VideoEncodeAcceleratorAdapter> vae_adapter_;
   scoped_refptr<base::SequencedTaskRunner> vea_runner_;
diff --git a/media/video/video_encoder_fallback_test.cc b/media/video/video_encoder_fallback_test.cc
index dd5a225e..9cd7b83 100644
--- a/media/video/video_encoder_fallback_test.cc
+++ b/media/video/video_encoder_fallback_test.cc
@@ -82,8 +82,8 @@
 
   base::test::TaskEnvironment task_environment_;
   scoped_refptr<base::SequencedTaskRunner> callback_runner_;
-  raw_ptr<MockVideoEncoder> main_video_encoder_;
-  raw_ptr<MockVideoEncoder> secondary_video_encoder_;
+  raw_ptr<MockVideoEncoder, DanglingUntriaged> main_video_encoder_;
+  raw_ptr<MockVideoEncoder, DanglingUntriaged> secondary_video_encoder_;
   std::unique_ptr<MockVideoEncoder> secondary_video_encoder_holder_;
   std::unique_ptr<VideoEncoderFallback> fallback_encoder_;
 };
diff --git a/net/base/test_completion_callback.h b/net/base/test_completion_callback.h
index e0c45f6..7a0e788b 100644
--- a/net/base/test_completion_callback.h
+++ b/net/base/test_completion_callback.h
@@ -165,7 +165,7 @@
  private:
   void SetResult(int result) override;
 
-  raw_ptr<IOBuffer> buffer_;
+  raw_ptr<IOBuffer, DanglingUntriaged> buffer_;
 };
 
 }  // namespace net
diff --git a/net/disk_cache/disk_cache_test_base.h b/net/disk_cache/disk_cache_test_base.h
index 113f94e..f9772d9 100644
--- a/net/disk_cache/disk_cache_test_base.h
+++ b/net/disk_cache/disk_cache_test_base.h
@@ -200,9 +200,10 @@
   // cache_ will always have a valid object, regardless of how the cache was
   // initialized. The implementation pointers can be NULL.
   std::unique_ptr<disk_cache::Backend> cache_;
-  raw_ptr<disk_cache::BackendImpl> cache_impl_ = nullptr;
+  raw_ptr<disk_cache::BackendImpl, DanglingUntriaged> cache_impl_ = nullptr;
   std::unique_ptr<disk_cache::SimpleFileTracker> simple_file_tracker_;
-  raw_ptr<disk_cache::SimpleBackendImpl> simple_cache_impl_ = nullptr;
+  raw_ptr<disk_cache::SimpleBackendImpl, DanglingUntriaged> simple_cache_impl_ =
+      nullptr;
   raw_ptr<disk_cache::MemBackendImpl> mem_cache_ = nullptr;
 
   uint32_t mask_ = 0;
diff --git a/net/dns/context_host_resolver_unittest.cc b/net/dns/context_host_resolver_unittest.cc
index e1ffb1a..e87edc7 100644
--- a/net/dns/context_host_resolver_unittest.cc
+++ b/net/dns/context_host_resolver_unittest.cc
@@ -104,7 +104,7 @@
         HostResolverSystemTask::Params(proc, 1u));
   }
 
-  raw_ptr<MockDnsClient> dns_client_;
+  raw_ptr<MockDnsClient, DanglingUntriaged> dns_client_;
   std::unique_ptr<HostResolverManager> manager_;
 };
 
diff --git a/net/dns/dns_server_iterator.h b/net/dns/dns_server_iterator.h
index b3585058..fd534cd3 100644
--- a/net/dns/dns_server_iterator.h
+++ b/net/dns/dns_server_iterator.h
@@ -59,11 +59,11 @@
   // Servers past their failure limit will only be used once all remaining
   // servers are also past their failure limit.
   int max_failures_;
-  raw_ptr<const ResolveContext> resolve_context_;
+  raw_ptr<const ResolveContext, DanglingUntriaged> resolve_context_;
   // The first server index to try when GetNextAttemptIndex() is called.
   size_t next_index_;
 
-  raw_ptr<const DnsSession> session_;
+  raw_ptr<const DnsSession, DanglingUntriaged> session_;
 };
 
 // Iterator used to get the next server to try for a DoH transaction.
diff --git a/net/dns/dns_test_util.h b/net/dns/dns_test_util.h
index 1a6fa5c89..5269e61 100644
--- a/net/dns/dns_test_util.h
+++ b/net/dns/dns_test_util.h
@@ -337,7 +337,7 @@
   uint16_t qtype;
   bool secure;
   bool delay;
-  raw_ptr<URLRequestContext> context;
+  raw_ptr<URLRequestContext, DanglingUntriaged> context;
 };
 
 typedef std::vector<MockDnsClientRule> MockDnsClientRuleList;
diff --git a/net/dns/dns_transaction_unittest.cc b/net/dns/dns_transaction_unittest.cc
index 735ab19..1fdecd3 100644
--- a/net/dns/dns_transaction_unittest.cc
+++ b/net/dns/dns_transaction_unittest.cc
@@ -424,7 +424,7 @@
  private:
   uint16_t qtype_ = 0;
   std::unique_ptr<DnsTransaction> transaction_;
-  raw_ptr<const DnsResponse> response_ = nullptr;
+  raw_ptr<const DnsResponse, DanglingUntriaged> response_ = nullptr;
   int expected_answer_count_;
   bool cancel_in_callback_ = false;
   base::RunLoop transaction_complete_run_loop_;
diff --git a/net/dns/host_resolver_manager_unittest.cc b/net/dns/host_resolver_manager_unittest.cc
index eaa2d2d..002b3a4 100644
--- a/net/dns/host_resolver_manager_unittest.cc
+++ b/net/dns/host_resolver_manager_unittest.cc
@@ -4875,11 +4875,11 @@
   }
 
   scoped_refptr<base::TestMockTimeTaskRunner> notifier_task_runner_;
-  raw_ptr<TestDnsConfigService> config_service_;
+  raw_ptr<TestDnsConfigService, DanglingUntriaged> config_service_;
   std::unique_ptr<SystemDnsConfigChangeNotifier> notifier_;
 
   // Owned by |resolver_|.
-  raw_ptr<MockDnsClient> dns_client_ = nullptr;
+  raw_ptr<MockDnsClient, DanglingUntriaged> dns_client_ = nullptr;
 };
 
 TEST_F(HostResolverManagerDnsTest, FlushCacheOnDnsConfigChange) {
diff --git a/net/dns/mdns_client_unittest.cc b/net/dns/mdns_client_unittest.cc
index 2437400..d820c01 100644
--- a/net/dns/mdns_client_unittest.cc
+++ b/net/dns/mdns_client_unittest.cc
@@ -1379,8 +1379,8 @@
 
   StrictMock<MockMDnsConnectionDelegate> delegate_;
 
-  raw_ptr<MockMDnsDatagramServerSocket> socket_ipv4_ptr_;
-  raw_ptr<MockMDnsDatagramServerSocket> socket_ipv6_ptr_;
+  raw_ptr<MockMDnsDatagramServerSocket, DanglingUntriaged> socket_ipv4_ptr_;
+  raw_ptr<MockMDnsDatagramServerSocket, DanglingUntriaged> socket_ipv6_ptr_;
   SimpleMockSocketFactory factory_;
   MDnsConnection connection_;
   TestCompletionCallback callback_;
diff --git a/net/filter/brotli_source_stream_unittest.cc b/net/filter/brotli_source_stream_unittest.cc
index cbbfb7a..96a8953 100644
--- a/net/filter/brotli_source_stream_unittest.cc
+++ b/net/filter/brotli_source_stream_unittest.cc
@@ -78,7 +78,7 @@
   scoped_refptr<IOBufferWithSize> out_buffer_;
 
  private:
-  raw_ptr<MockSourceStream> source_;
+  raw_ptr<MockSourceStream, DanglingUntriaged> source_;
   std::unique_ptr<SourceStream> brotli_stream_;
   std::unique_ptr<base::RunLoop> loop_;
 
diff --git a/net/filter/gzip_source_stream_unittest.cc b/net/filter/gzip_source_stream_unittest.cc
index 85c3202..efd68e2 100644
--- a/net/filter/gzip_source_stream_unittest.cc
+++ b/net/filter/gzip_source_stream_unittest.cc
@@ -140,7 +140,7 @@
   scoped_refptr<IOBuffer> output_buffer_;
   const int output_buffer_size_;
 
-  raw_ptr<MockSourceStream> source_;
+  raw_ptr<MockSourceStream, DanglingUntriaged> source_;
   std::unique_ptr<GzipSourceStream> stream_;
 };
 
diff --git a/net/http/bidirectional_stream.h b/net/http/bidirectional_stream.h
index baf64d5..2e27a5e 100644
--- a/net/http/bidirectional_stream.h
+++ b/net/http/bidirectional_stream.h
@@ -229,7 +229,7 @@
   std::unique_ptr<BidirectionalStreamRequestInfo> request_info_;
   const NetLogWithSource net_log_;
 
-  raw_ptr<HttpNetworkSession> session_;
+  raw_ptr<HttpNetworkSession, DanglingUntriaged> session_;
 
   bool send_request_headers_automatically_;
   // Whether request headers have been sent, as indicated in OnStreamReady()
diff --git a/net/http/http_auth_controller.h b/net/http/http_auth_controller.h
index 332d616d..19082cb2 100644
--- a/net/http/http_auth_controller.h
+++ b/net/http/http_auth_controller.h
@@ -235,9 +235,10 @@
   // These two are owned by the HttpNetworkSession/IOThread, which own the
   // objects which reference |this|. Therefore, these raw pointers are valid
   // for the lifetime of this object.
-  const raw_ptr<HttpAuthCache> http_auth_cache_;
-  const raw_ptr<HttpAuthHandlerFactory> http_auth_handler_factory_;
-  const raw_ptr<HostResolver> host_resolver_;
+  const raw_ptr<HttpAuthCache, DanglingUntriaged> http_auth_cache_;
+  const raw_ptr<HttpAuthHandlerFactory, DanglingUntriaged>
+      http_auth_handler_factory_;
+  const raw_ptr<HostResolver, DanglingUntriaged> host_resolver_;
 
   std::set<HttpAuth::Scheme> disabled_schemes_;
 
diff --git a/net/http/http_cache_lookup_manager.h b/net/http/http_cache_lookup_manager.h
index 4c047bf4..d18944f 100644
--- a/net/http/http_cache_lookup_manager.h
+++ b/net/http/http_cache_lookup_manager.h
@@ -58,7 +58,7 @@
   };
 
   // HttpCache must outlive the HttpCacheLookupManager.
-  raw_ptr<HttpCache> http_cache_;
+  raw_ptr<HttpCache, DanglingUntriaged> http_cache_;
   std::map<GURL, std::unique_ptr<LookupTransaction>> lookup_transactions_;
   base::WeakPtrFactory<HttpCacheLookupManager> weak_factory_{this};
 };
diff --git a/net/http/http_network_session.h b/net/http/http_network_session.h
index 81c5e70..25ebe0b5 100644
--- a/net/http/http_network_session.h
+++ b/net/http/http_network_session.h
@@ -198,7 +198,7 @@
   raw_ptr<TransportSecurityState> transport_security_state;
   raw_ptr<CTPolicyEnforcer> ct_policy_enforcer;
   raw_ptr<SCTAuditingDelegate> sct_auditing_delegate;
-  raw_ptr<ProxyResolutionService> proxy_resolution_service;
+  raw_ptr<ProxyResolutionService, DanglingUntriaged> proxy_resolution_service;
   raw_ptr<ProxyDelegate> proxy_delegate;
   raw_ptr<const HttpUserAgentSettings> http_user_agent_settings;
   raw_ptr<SSLConfigService> ssl_config_service;
@@ -339,7 +339,8 @@
   const raw_ptr<ReportingService> reporting_service_;
   const raw_ptr<NetworkErrorLoggingService> network_error_logging_service_;
 #endif
-  const raw_ptr<ProxyResolutionService> proxy_resolution_service_;
+  const raw_ptr<ProxyResolutionService, DanglingUntriaged>
+      proxy_resolution_service_;
   const raw_ptr<SSLConfigService> ssl_config_service_;
 
   HttpAuthCache http_auth_cache_;
diff --git a/net/http/http_network_transaction_unittest.cc b/net/http/http_network_transaction_unittest.cc
index 255313f..c4f0b74 100644
--- a/net/http/http_network_transaction_unittest.cc
+++ b/net/http/http_network_transaction_unittest.cc
@@ -20252,7 +20252,7 @@
 
  private:
   base::test::ScopedFeatureList feature_list_;
-  raw_ptr<TestReportingContext> test_reporting_context_;
+  raw_ptr<TestReportingContext, DanglingUntriaged> test_reporting_context_;
 };
 
 TEST_P(HttpNetworkTransactionReportingTest,
@@ -20406,7 +20406,8 @@
   int reporting_upload_depth_ = 0;
 
  private:
-  raw_ptr<TestNetworkErrorLoggingService> test_network_error_logging_service_;
+  raw_ptr<TestNetworkErrorLoggingService, DanglingUntriaged>
+      test_network_error_logging_service_;
 };
 
 TEST_F(HttpNetworkTransactionNetworkErrorLoggingTest,
diff --git a/net/http/http_response_body_drainer_unittest.cc b/net/http/http_response_body_drainer_unittest.cc
index 15cec29..ab69c36 100644
--- a/net/http/http_response_body_drainer_unittest.cc
+++ b/net/http/http_response_body_drainer_unittest.cc
@@ -270,7 +270,8 @@
   MockClientSocketFactory socket_factory_;
   const std::unique_ptr<HttpNetworkSession> session_;
   CloseResultWaiter result_waiter_;
-  const raw_ptr<MockHttpStream> mock_stream_;  // Owned by |drainer_|.
+  const raw_ptr<MockHttpStream, DanglingUntriaged>
+      mock_stream_;  // Owned by |drainer_|.
   std::unique_ptr<HttpResponseBodyDrainer> drainer_;
 };
 
diff --git a/net/http/http_server_properties_manager_unittest.cc b/net/http/http_server_properties_manager_unittest.cc
index a669566..a0fcddd 100644
--- a/net/http/http_server_properties_manager_unittest.cc
+++ b/net/http/http_server_properties_manager_unittest.cc
@@ -282,7 +282,7 @@
     return http_server_properties_dict;
   }
 
-  raw_ptr<MockPrefDelegate>
+  raw_ptr<MockPrefDelegate, DanglingUntriaged>
       pref_delegate_;  // Owned by HttpServerPropertiesManager.
   std::unique_ptr<HttpServerProperties> http_server_props_;
   base::Time one_day_from_now_;
diff --git a/net/http/http_stream_factory_test_util.h b/net/http/http_stream_factory_test_util.h
index bae8052f..cf2d8f6 100644
--- a/net/http/http_stream_factory_test_util.h
+++ b/net/http/http_stream_factory_test_util.h
@@ -157,9 +157,11 @@
   MockHttpStreamFactoryJob* dns_alpn_h3_job() const { return dns_alpn_h3_job_; }
 
  private:
-  raw_ptr<MockHttpStreamFactoryJob> main_job_ = nullptr;
-  raw_ptr<MockHttpStreamFactoryJob> alternative_job_ = nullptr;
-  raw_ptr<MockHttpStreamFactoryJob> dns_alpn_h3_job_ = nullptr;
+  raw_ptr<MockHttpStreamFactoryJob, DanglingUntriaged> main_job_ = nullptr;
+  raw_ptr<MockHttpStreamFactoryJob, DanglingUntriaged> alternative_job_ =
+      nullptr;
+  raw_ptr<MockHttpStreamFactoryJob, DanglingUntriaged> dns_alpn_h3_job_ =
+      nullptr;
 };
 
 }  // namespace net
diff --git a/net/network_error_logging/network_error_logging_service.h b/net/network_error_logging/network_error_logging_service.h
index a057e620..3b08f839 100644
--- a/net/network_error_logging/network_error_logging_service.h
+++ b/net/network_error_logging/network_error_logging_service.h
@@ -294,7 +294,7 @@
 
   // Unowned:
   raw_ptr<const base::Clock> clock_;
-  raw_ptr<ReportingService> reporting_service_ = nullptr;
+  raw_ptr<ReportingService, DanglingUntriaged> reporting_service_ = nullptr;
   bool shut_down_ = false;
 };
 
diff --git a/net/proxy_resolution/configured_proxy_resolution_service.h b/net/proxy_resolution/configured_proxy_resolution_service.h
index b9225581..74db301 100644
--- a/net/proxy_resolution/configured_proxy_resolution_service.h
+++ b/net/proxy_resolution/configured_proxy_resolution_service.h
@@ -403,7 +403,7 @@
 
   THREAD_CHECKER(thread_checker_);
 
-  raw_ptr<ProxyDelegate> proxy_delegate_ = nullptr;
+  raw_ptr<ProxyDelegate, DanglingUntriaged> proxy_delegate_ = nullptr;
 
   // Flag used by |SetReady()| to check if |this| has been deleted by a
   // synchronous callback.
diff --git a/net/proxy_resolution/mock_pac_file_fetcher.h b/net/proxy_resolution/mock_pac_file_fetcher.h
index 3a83590..ce97ca6b 100644
--- a/net/proxy_resolution/mock_pac_file_fetcher.h
+++ b/net/proxy_resolution/mock_pac_file_fetcher.h
@@ -44,7 +44,7 @@
  private:
   GURL pending_request_url_;
   CompletionOnceCallback pending_request_callback_;
-  raw_ptr<std::u16string> pending_request_text_ = nullptr;
+  raw_ptr<std::u16string, DanglingUntriaged> pending_request_text_ = nullptr;
   base::OnceClosure on_fetch_complete_;
   bool is_shutdown_ = false;
 };
diff --git a/net/proxy_resolution/mock_proxy_resolver.h b/net/proxy_resolution/mock_proxy_resolver.h
index 12bad7f..2e1929c 100644
--- a/net/proxy_resolution/mock_proxy_resolver.h
+++ b/net/proxy_resolution/mock_proxy_resolver.h
@@ -40,7 +40,7 @@
    private:
     raw_ptr<MockAsyncProxyResolver> resolver_;
     const GURL url_;
-    raw_ptr<ProxyInfo> results_;
+    raw_ptr<ProxyInfo, DanglingUntriaged> results_;
     CompletionOnceCallback callback_;
   };
 
diff --git a/net/proxy_resolution/multi_threaded_proxy_resolver_unittest.cc b/net/proxy_resolution/multi_threaded_proxy_resolver_unittest.cc
index 4a377d4..ce723cb 100644
--- a/net/proxy_resolution/multi_threaded_proxy_resolver_unittest.cc
+++ b/net/proxy_resolution/multi_threaded_proxy_resolver_unittest.cc
@@ -264,7 +264,7 @@
   }
 
  private:
-  raw_ptr<BlockableProxyResolverFactory> factory_ = nullptr;
+  raw_ptr<BlockableProxyResolverFactory, DanglingUntriaged> factory_ = nullptr;
   std::unique_ptr<ProxyResolverFactory> factory_owner_;
   std::unique_ptr<MultiThreadedProxyResolverFactory> resolver_factory_;
   std::unique_ptr<ProxyResolver> resolver_;
diff --git a/net/proxy_resolution/pac_file_decider_unittest.cc b/net/proxy_resolution/pac_file_decider_unittest.cc
index 8f25c2f0..4e67167 100644
--- a/net/proxy_resolution/pac_file_decider_unittest.cc
+++ b/net/proxy_resolution/pac_file_decider_unittest.cc
@@ -131,7 +131,7 @@
 
  private:
   raw_ptr<const Rules> rules_;
-  raw_ptr<URLRequestContext> request_context_ = nullptr;
+  raw_ptr<URLRequestContext, DanglingUntriaged> request_context_ = nullptr;
 };
 
 // A mock retriever, returns asynchronously when CompleteRequests() is called.
diff --git a/net/quic/bidirectional_stream_quic_impl_unittest.cc b/net/quic/bidirectional_stream_quic_impl_unittest.cc
index c585a36..10247b5a 100644
--- a/net/quic/bidirectional_stream_quic_impl_unittest.cc
+++ b/net/quic/bidirectional_stream_quic_impl_unittest.cc
@@ -403,7 +403,7 @@
         : mode(mode), packet(packet) {}
     PacketToWrite(IoMode mode, int rv) : mode(mode), packet(nullptr), rv(rv) {}
     IoMode mode;
-    raw_ptr<quic::QuicReceivedPacket> packet;
+    raw_ptr<quic::QuicReceivedPacket, DanglingUntriaged> packet;
     int rv;
   };
 
@@ -769,7 +769,7 @@
   scoped_refptr<TestTaskRunner> runner_;
   std::unique_ptr<MockWrite[]> mock_writes_;
   quic::MockClock clock_;
-  raw_ptr<quic::QuicConnection> connection_;
+  raw_ptr<quic::QuicConnection, DanglingUntriaged> connection_;
   std::unique_ptr<QuicChromiumConnectionHelper> helper_;
   std::unique_ptr<QuicChromiumAlarmFactory> alarm_factory_;
   TransportSecurityState transport_security_state_;
diff --git a/net/quic/quic_chromium_alarm_factory.h b/net/quic/quic_chromium_alarm_factory.h
index 1cb66007..7e86eae 100644
--- a/net/quic/quic_chromium_alarm_factory.h
+++ b/net/quic/quic_chromium_alarm_factory.h
@@ -39,7 +39,7 @@
       quic::QuicConnectionArena* arena) override;
 
  private:
-  raw_ptr<base::SequencedTaskRunner> task_runner_;
+  raw_ptr<base::SequencedTaskRunner, DanglingUntriaged> task_runner_;
   const raw_ptr<const quic::QuicClock> clock_;
 };
 
diff --git a/net/quic/quic_chromium_client_stream.h b/net/quic/quic_chromium_client_stream.h
index 8760b9eb..652502d 100644
--- a/net/quic/quic_chromium_client_stream.h
+++ b/net/quic/quic_chromium_client_stream.h
@@ -191,7 +191,7 @@
 
     // Callback to be invoked when ReadBody completes asynchronously.
     CompletionOnceCallback read_body_callback_;
-    raw_ptr<IOBuffer> read_body_buffer_;
+    raw_ptr<IOBuffer, DanglingUntriaged> read_body_buffer_;
     int read_body_buffer_len_ = 0;
 
     // Callback to be invoked when WriteStreamData or WritevStreamData completes
diff --git a/net/quic/quic_stream_factory.h b/net/quic/quic_stream_factory.h
index 971aec5..e8e26ba 100644
--- a/net/quic/quic_stream_factory.h
+++ b/net/quic/quic_stream_factory.h
@@ -720,9 +720,9 @@
 
   QuicConnectivityMonitor connectivity_monitor_;
 
-  raw_ptr<const base::TickClock> tick_clock_ = nullptr;
+  raw_ptr<const base::TickClock, DanglingUntriaged> tick_clock_ = nullptr;
 
-  raw_ptr<base::SequencedTaskRunner> task_runner_ = nullptr;
+  raw_ptr<base::SequencedTaskRunner, DanglingUntriaged> task_runner_ = nullptr;
 
   const raw_ptr<SSLConfigService> ssl_config_service_;
 
diff --git a/net/reporting/reporting_context.h b/net/reporting/reporting_context.h
index 3f8eb962..db465b2 100644
--- a/net/reporting/reporting_context.h
+++ b/net/reporting/reporting_context.h
@@ -98,7 +98,8 @@
 
   std::unique_ptr<ReportingCache> cache_;
 
-  const raw_ptr<ReportingCache::PersistentReportingStore> store_;
+  const raw_ptr<ReportingCache::PersistentReportingStore, DanglingUntriaged>
+      store_;
 
   // |delivery_agent_| must come after |tick_clock_|, |delegate_|, |uploader_|,
   // and |cache_|.
diff --git a/net/reporting/reporting_service_unittest.cc b/net/reporting/reporting_service_unittest.cc
index 944b149..8b4afde 100644
--- a/net/reporting/reporting_service_unittest.cc
+++ b/net/reporting/reporting_service_unittest.cc
@@ -107,7 +107,7 @@
   base::SimpleTestTickClock tick_clock_;
 
   std::unique_ptr<MockPersistentReportingStore> store_;
-  raw_ptr<TestReportingContext> context_;
+  raw_ptr<TestReportingContext, DanglingUntriaged> context_;
   std::unique_ptr<ReportingService> service_;
 };
 
diff --git a/net/reporting/reporting_test_util.h b/net/reporting/reporting_test_util.h
index 61296c3..00dcaa5 100644
--- a/net/reporting/reporting_test_util.h
+++ b/net/reporting/reporting_test_util.h
@@ -290,7 +290,8 @@
   base::SimpleTestClock clock_;
   base::SimpleTestTickClock tick_clock_;
   std::unique_ptr<TestReportingContext> context_;
-  raw_ptr<ReportingCache::PersistentReportingStore> store_ = nullptr;
+  raw_ptr<ReportingCache::PersistentReportingStore, DanglingUntriaged> store_ =
+      nullptr;
 };
 
 class TestReportingService : public ReportingService {
diff --git a/net/socket/socket_test_util.h b/net/socket/socket_test_util.h
index b492d4c2..bb0276f6 100644
--- a/net/socket/socket_test_util.h
+++ b/net/socket/socket_test_util.h
@@ -947,7 +947,7 @@
   bool in_confirm_handshake_ = false;
   NetLogWithSource net_log_;
   std::unique_ptr<StreamSocket> stream_socket_;
-  raw_ptr<SSLSocketDataProvider> data_;
+  raw_ptr<SSLSocketDataProvider, DanglingUntriaged> data_;
   // Address of the "remote" peer we're connected to.
   IPEndPoint peer_addr_;
 
@@ -1353,8 +1353,8 @@
   MockUDPClientSocket* GetLastProducedUDPSocket() const { return udp_socket_; }
 
  private:
-  raw_ptr<MockTaggingStreamSocket> tcp_socket_ = nullptr;
-  raw_ptr<MockUDPClientSocket> udp_socket_ = nullptr;
+  raw_ptr<MockTaggingStreamSocket, DanglingUntriaged> tcp_socket_ = nullptr;
+  raw_ptr<MockUDPClientSocket, DanglingUntriaged> udp_socket_ = nullptr;
 };
 
 // Host / port used for SOCKS4 test strings.
diff --git a/net/socket/socks_client_socket.h b/net/socket/socks_client_socket.h
index e606c59..e12475f4 100644
--- a/net/socket/socks_client_socket.h
+++ b/net/socket/socks_client_socket.h
@@ -143,7 +143,7 @@
   bool was_ever_used_ = false;
 
   // Used to resolve the hostname to which the SOCKS proxy will connect.
-  raw_ptr<HostResolver> host_resolver_;
+  raw_ptr<HostResolver, DanglingUntriaged> host_resolver_;
   SecureDnsPolicy secure_dns_policy_;
   std::unique_ptr<HostResolver::ResolveHostRequest> resolve_host_request_;
   const HostPortPair destination_;
diff --git a/net/socket/ssl_client_socket_unittest.cc b/net/socket/ssl_client_socket_unittest.cc
index a426ec41..75e6933 100644
--- a/net/socket/ssl_client_socket_unittest.cc
+++ b/net/socket/ssl_client_socket_unittest.cc
@@ -583,7 +583,7 @@
     SetResult(result);
   }
 
-  raw_ptr<StreamSocket> socket_;
+  raw_ptr<StreamSocket, DanglingUntriaged> socket_;
 };
 
 // A mock CTVerifier that records every call to Verify but doesn't verify
@@ -828,7 +828,7 @@
   }
 
   RecordingNetLogObserver log_observer_;
-  raw_ptr<ClientSocketFactory> socket_factory_;
+  raw_ptr<ClientSocketFactory, DanglingUntriaged> socket_factory_;
   std::unique_ptr<TestSSLConfigService> ssl_config_service_;
   std::unique_ptr<MockCertVerifier> cert_verifier_;
   std::unique_ptr<TransportSecurityState> transport_security_state_;
diff --git a/net/socket/ssl_server_socket_impl.cc b/net/socket/ssl_server_socket_impl.cc
index 1020f387..9f22c20c 100644
--- a/net/socket/ssl_server_socket_impl.cc
+++ b/net/socket/ssl_server_socket_impl.cc
@@ -167,7 +167,7 @@
   [[nodiscard]] int Init();
   void ExtractClientCert();
 
-  raw_ptr<SSLServerContextImpl> context_;
+  raw_ptr<SSLServerContextImpl, DanglingUntriaged> context_;
 
   NetLogWithSource net_log_;
 
diff --git a/net/spdy/spdy_session_pool_unittest.cc b/net/spdy/spdy_session_pool_unittest.cc
index c2b5ff0b..0ced714 100644
--- a/net/spdy/spdy_session_pool_unittest.cc
+++ b/net/spdy/spdy_session_pool_unittest.cc
@@ -92,7 +92,7 @@
 
   SpdySessionDependencies session_deps_;
   std::unique_ptr<HttpNetworkSession> http_session_;
-  raw_ptr<SpdySessionPool> spdy_session_pool_ = nullptr;
+  raw_ptr<SpdySessionPool, DanglingUntriaged> spdy_session_pool_ = nullptr;
   std::vector<std::unique_ptr<SSLSocketDataProvider>> ssl_data_vector_;
 };
 
diff --git a/net/ssl/ssl_client_session_cache.h b/net/ssl/ssl_client_session_cache.h
index d3857acd..52db428 100644
--- a/net/ssl/ssl_client_session_cache.h
+++ b/net/ssl/ssl_client_session_cache.h
@@ -118,7 +118,7 @@
   void OnMemoryPressure(
       base::MemoryPressureListener::MemoryPressureLevel memory_pressure_level);
 
-  raw_ptr<base::Clock> clock_;
+  raw_ptr<base::Clock, DanglingUntriaged> clock_;
   Config config_;
   base::LRUCache<Key, Entry> cache_;
   size_t lookups_since_flush_ = 0;
diff --git a/net/ssl/ssl_server_config.h b/net/ssl/ssl_server_config.h
index 1490c55..a7ae034 100644
--- a/net/ssl/ssl_server_config.h
+++ b/net/ssl/ssl_server_config.h
@@ -88,7 +88,7 @@
   // and must outlive any sockets spawned from this SSLServerContext.
   // This field is meaningful only if client certificates are requested.
   // If a verifier is not provided then all certificates are accepted.
-  raw_ptr<ClientCertVerifier> client_cert_verifier = nullptr;
+  raw_ptr<ClientCertVerifier, DanglingUntriaged> client_cert_verifier = nullptr;
 
   // The list of application level protocols supported with ALPN (Application
   // Layer Protocol Negotiation), in decreasing order of preference.  Protocols
diff --git a/net/test/embedded_test_server/http2_connection.cc b/net/test/embedded_test_server/http2_connection.cc
index ad218132..a51ef76 100644
--- a/net/test/embedded_test_server/http2_connection.cc
+++ b/net/test/embedded_test_server/http2_connection.cc
@@ -200,7 +200,7 @@
   std::vector<std::unique_ptr<HttpResponse>> responses_;
   StreamId stream_id_;
   const raw_ptr<Http2Connection> connection_;
-  raw_ptr<DataFrameSource> data_frame_;
+  raw_ptr<DataFrameSource, DanglingUntriaged> data_frame_;
   base::WeakPtrFactory<ResponseDelegate> weak_factory_{this};
 };
 
diff --git a/net/url_request/url_request_context_builder.h b/net/url_request/url_request_context_builder.h
index ae211c1..fb460d8c 100644
--- a/net/url_request/url_request_context_builder.h
+++ b/net/url_request/url_request_context_builder.h
@@ -428,7 +428,8 @@
   raw_ptr<NetLog> net_log_ = nullptr;
   std::unique_ptr<HostResolver> host_resolver_;
   std::string host_mapping_rules_;
-  raw_ptr<HostResolverManager> host_resolver_manager_ = nullptr;
+  raw_ptr<HostResolverManager, DanglingUntriaged> host_resolver_manager_ =
+      nullptr;
   raw_ptr<HostResolver::Factory> host_resolver_factory_ = nullptr;
   std::unique_ptr<ProxyConfigService> proxy_config_service_;
   bool pac_quick_check_enabled_ = true;
diff --git a/net/url_request/url_request_filter_unittest.cc b/net/url_request/url_request_filter_unittest.cc
index 76900499..ea60bebb 100644
--- a/net/url_request/url_request_filter_unittest.cc
+++ b/net/url_request/url_request_filter_unittest.cc
@@ -48,7 +48,7 @@
   }
 
  private:
-  mutable raw_ptr<URLRequestTestJob> job_ = nullptr;
+  mutable raw_ptr<URLRequestTestJob, DanglingUntriaged> job_ = nullptr;
 };
 
 TEST(URLRequestFilter, BasicMatching) {
diff --git a/net/url_request/url_request_unittest.cc b/net/url_request/url_request_unittest.cc
index 8a53c2e..ef07549 100644
--- a/net/url_request/url_request_unittest.cc
+++ b/net/url_request/url_request_unittest.cc
@@ -1058,7 +1058,8 @@
   }
 
  private:
-  raw_ptr<URLRequestInterceptorWithLoadTimingInfo> interceptor_;
+  raw_ptr<URLRequestInterceptorWithLoadTimingInfo, DanglingUntriaged>
+      interceptor_;
 };
 
 // "Normal" LoadTimingInfo as returned by a job.  Everything is in order, not
diff --git a/net/websockets/websocket_basic_stream_adapters.h b/net/websockets/websocket_basic_stream_adapters.h
index aac81ab..49da752 100644
--- a/net/websockets/websocket_basic_stream_adapters.h
+++ b/net/websockets/websocket_basic_stream_adapters.h
@@ -131,7 +131,7 @@
 
   // Read buffer and length used for both synchronous and asynchronous
   // read operations.
-  raw_ptr<IOBuffer> read_buffer_ = nullptr;
+  raw_ptr<IOBuffer, DanglingUntriaged> read_buffer_ = nullptr;
   size_t read_length_ = 0u;
 
   // Read callback saved for asynchronous reads.
diff --git a/net/websockets/websocket_channel.cc b/net/websockets/websocket_channel.cc
index d3d364a..b89cbfa 100644
--- a/net/websockets/websocket_channel.cc
+++ b/net/websockets/websocket_channel.cc
@@ -236,7 +236,7 @@
   // danger of this pointer being stale, because deleting the WebSocketChannel
   // cancels the connect process, deleting this object and preventing its
   // callbacks from being called.
-  const raw_ptr<WebSocketChannel> creator_;
+  const raw_ptr<WebSocketChannel, DanglingUntriaged> creator_;
 };
 
 WebSocketChannel::WebSocketChannel(
diff --git a/net/websockets/websocket_end_to_end_test.cc b/net/websockets/websocket_end_to_end_test.cc
index a4afca9..b381ebb 100644
--- a/net/websockets/websocket_end_to_end_test.cc
+++ b/net/websockets/websocket_end_to_end_test.cc
@@ -329,7 +329,8 @@
     return !event_interface_->failed();
   }
 
-  raw_ptr<ConnectTestingEventInterface> event_interface_;  // owned by channel_
+  raw_ptr<ConnectTestingEventInterface, DanglingUntriaged>
+      event_interface_;  // owned by channel_
   std::unique_ptr<TestProxyDelegateWithProxyInfo> proxy_delegate_;
   std::unique_ptr<URLRequestContextBuilder> context_builder_;
   std::unique_ptr<URLRequestContext> context_;
diff --git a/net/websockets/websocket_stream_create_test_base.h b/net/websockets/websocket_stream_create_test_base.h
index be4eba9..13cf7be8 100644
--- a/net/websockets/websocket_stream_create_test_base.h
+++ b/net/websockets/websocket_stream_create_test_base.h
@@ -90,7 +90,7 @@
       ssl_error_callbacks_;
   SSLInfo ssl_info_;
   bool ssl_fatal_ = false;
-  raw_ptr<URLRequest> url_request_ = nullptr;
+  raw_ptr<URLRequest, DanglingUntriaged> url_request_ = nullptr;
   AuthChallengeInfo auth_challenge_info_;
   base::OnceCallback<void(const AuthCredentials*)> on_auth_required_callback_;
 
diff --git a/remoting/codec/audio_decoder_opus.h b/remoting/codec/audio_decoder_opus.h
index bd1ab9a..1460865 100644
--- a/remoting/codec/audio_decoder_opus.h
+++ b/remoting/codec/audio_decoder_opus.h
@@ -36,7 +36,7 @@
 
   int sampling_rate_;
   int channels_;
-  raw_ptr<OpusDecoder> decoder_;
+  raw_ptr<OpusDecoder, DanglingUntriaged> decoder_;
 };
 
 }  // namespace remoting
diff --git a/remoting/codec/audio_encoder_opus.h b/remoting/codec/audio_encoder_opus.h
index c4d2e0a8..a4dcf407 100644
--- a/remoting/codec/audio_encoder_opus.h
+++ b/remoting/codec/audio_encoder_opus.h
@@ -47,7 +47,7 @@
 
   int sampling_rate_;
   AudioPacket::Channels channels_;
-  raw_ptr<OpusEncoder> encoder_;
+  raw_ptr<OpusEncoder, DanglingUntriaged> encoder_;
 
   int frame_size_;
   std::unique_ptr<media::MultiChannelResampler> resampler_;
diff --git a/remoting/host/chromoting_host_services_client_unittest.cc b/remoting/host/chromoting_host_services_client_unittest.cc
index 93f984b2..cc9c9c82 100644
--- a/remoting/host/chromoting_host_services_client_unittest.cc
+++ b/remoting/host/chromoting_host_services_client_unittest.cc
@@ -43,7 +43,7 @@
   void SetRemoteDisconnectCallback(base::OnceClosure callback);
 
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<base::Environment> environment_;
+  raw_ptr<base::Environment, DanglingUntriaged> environment_;
   bool is_server_started_ = true;
   std::unique_ptr<ChromotingHostServicesClient> client_;
   mojo::ReceiverSet<mojom::ChromotingHostServices> host_services_receivers_;
diff --git a/remoting/host/chromoting_host_unittest.cc b/remoting/host/chromoting_host_unittest.cc
index e6f50fb..9b9bd8e8 100644
--- a/remoting/host/chromoting_host_unittest.cc
+++ b/remoting/host/chromoting_host_unittest.cc
@@ -264,25 +264,26 @@
   std::unique_ptr<FakeDesktopEnvironmentFactory> desktop_environment_factory_;
   MockHostStatusObserver host_status_observer_;
   std::unique_ptr<ChromotingHost> host_;
-  raw_ptr<protocol::MockSessionManager> session_manager_;
+  raw_ptr<protocol::MockSessionManager, DanglingUntriaged> session_manager_;
   std::string owner_email_;
-  raw_ptr<protocol::FakeConnectionToClient> connection1_;
+  raw_ptr<protocol::FakeConnectionToClient, DanglingUntriaged> connection1_;
   std::unique_ptr<protocol::FakeConnectionToClient> owned_connection1_;
   // This field is not a raw_ptr<> to avoid returning a reference to a temporary
   // T* (result of implicitly casting raw_ptr<T> to T*).
   RAW_PTR_EXCLUSION ClientSession* client1_;
   std::string session_jid1_;
-  raw_ptr<MockSession> session1_;  // Owned by |connection_|.
+  raw_ptr<MockSession, DanglingUntriaged> session1_;  // Owned by |connection_|.
   std::unique_ptr<SessionConfig> session_config1_;
   MockClientStub client_stub1_;
   MockHostStub host_stub1_;
-  raw_ptr<protocol::FakeConnectionToClient> connection2_;
+  raw_ptr<protocol::FakeConnectionToClient, DanglingUntriaged> connection2_;
   std::unique_ptr<protocol::FakeConnectionToClient> owned_connection2_;
   // This field is not a raw_ptr<> to avoid returning a reference to a temporary
   // T* (result of implicitly casting raw_ptr<T> to T*).
   RAW_PTR_EXCLUSION ClientSession* client2_;
   std::string session_jid2_;
-  raw_ptr<MockSession> session2_;  // Owned by |connection2_|.
+  raw_ptr<MockSession, DanglingUntriaged>
+      session2_;  // Owned by |connection2_|.
   std::unique_ptr<SessionConfig> session_config2_;
   MockClientStub client_stub2_;
   MockHostStub host_stub2_;
diff --git a/remoting/host/client_session_unittest.cc b/remoting/host/client_session_unittest.cc
index bce36b3..879ce1317 100644
--- a/remoting/host/client_session_unittest.cc
+++ b/remoting/host/client_session_unittest.cc
@@ -211,7 +211,7 @@
   MockClientStub client_stub_;
 
   // ClientSession owns |connection_| but tests need it to inject fake events.
-  raw_ptr<protocol::FakeConnectionToClient> connection_;
+  raw_ptr<protocol::FakeConnectionToClient, DanglingUntriaged> connection_;
 
   std::unique_ptr<FakeDesktopEnvironmentFactory> desktop_environment_factory_;
 
diff --git a/remoting/host/fake_host_extension.h b/remoting/host/fake_host_extension.h
index 2a2d62e..0f2c08e 100644
--- a/remoting/host/fake_host_extension.h
+++ b/remoting/host/fake_host_extension.h
@@ -55,7 +55,7 @@
 
   // Unowned pointer to the object of |session_|, so that it can be accessed
   // after the extension session is created.
-  raw_ptr<Session> session_ptr_;
+  raw_ptr<Session, DanglingUntriaged> session_ptr_;
 
   // True if a message of |message_type| has been processed by this extension.
   bool has_handled_message_ = false;
diff --git a/remoting/host/heartbeat_sender_unittest.cc b/remoting/host/heartbeat_sender_unittest.cc
index 1ab8443..35f18aab 100644
--- a/remoting/host/heartbeat_sender_unittest.cc
+++ b/remoting/host/heartbeat_sender_unittest.cc
@@ -157,7 +157,7 @@
 
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
-  raw_ptr<MockHeartbeatClient> mock_client_;
+  raw_ptr<MockHeartbeatClient, DanglingUntriaged> mock_client_;
   std::unique_ptr<MockObserver> mock_observer_;
 
   std::unique_ptr<FakeSignalStrategy> signal_strategy_;
diff --git a/remoting/host/ipc_desktop_environment_unittest.cc b/remoting/host/ipc_desktop_environment_unittest.cc
index ccb33de..e74c05c 100644
--- a/remoting/host/ipc_desktop_environment_unittest.cc
+++ b/remoting/host/ipc_desktop_environment_unittest.cc
@@ -243,7 +243,7 @@
   std::string client_jid_;
 
   // Clipboard stub that receives clipboard events from the desktop process.
-  raw_ptr<protocol::ClipboardStub> clipboard_stub_;
+  raw_ptr<protocol::ClipboardStub, DanglingUntriaged> clipboard_stub_;
 
   // The daemons's end of the daemon-to-desktop channel.
   std::unique_ptr<IPC::ChannelProxy> desktop_channel_;
@@ -269,7 +269,7 @@
   std::unique_ptr<DesktopProcess> desktop_process_;
 
   // Input injector owned by |desktop_process_|.
-  raw_ptr<MockInputInjector> remote_input_injector_;
+  raw_ptr<MockInputInjector, DanglingUntriaged> remote_input_injector_;
 
   // Will be transferred to the caller of
   // MockDesktopEnvironment::CreateUrlForwarderConfigurator().
@@ -278,7 +278,8 @@
   // used.
   std::unique_ptr<MockUrlForwarderConfigurator>
       owned_remote_url_forwarder_configurator_;
-  raw_ptr<MockUrlForwarderConfigurator> remote_url_forwarder_configurator_;
+  raw_ptr<MockUrlForwarderConfigurator, DanglingUntriaged>
+      remote_url_forwarder_configurator_;
   std::unique_ptr<UrlForwarderConfigurator> url_forwarder_configurator_;
 
   // The last |terminal_id| passed to ConnectTermina();
diff --git a/remoting/host/it2me/it2me_host_unittest.cc b/remoting/host/it2me/it2me_host_unittest.cc
index 8aba021..aa9d307c 100644
--- a/remoting/host/it2me/it2me_host_unittest.cc
+++ b/remoting/host/it2me/it2me_host_unittest.cc
@@ -232,7 +232,7 @@
   ErrorCode last_error_code_ = ErrorCode::OK;
 
   // Used to set ConfirmationDialog behavior.
-  raw_ptr<FakeIt2MeDialogFactory> dialog_factory_ = nullptr;
+  raw_ptr<FakeIt2MeDialogFactory, DanglingUntriaged> dialog_factory_ = nullptr;
 
   absl::optional<base::Value::Dict> policies_;
 
diff --git a/remoting/host/it2me/it2me_native_messaging_host_unittest.cc b/remoting/host/it2me/it2me_native_messaging_host_unittest.cc
index c073dbe..815381e 100644
--- a/remoting/host/it2me/it2me_native_messaging_host_unittest.cc
+++ b/remoting/host/it2me/it2me_native_messaging_host_unittest.cc
@@ -253,7 +253,7 @@
   }
 
   // Raw pointer to host factory (owned by It2MeNativeMessagingHost).
-  raw_ptr<MockIt2MeHostFactory> factory_raw_ptr_ = nullptr;
+  raw_ptr<MockIt2MeHostFactory, DanglingUntriaged> factory_raw_ptr_ = nullptr;
 
  private:
   void StartHost();
@@ -279,7 +279,8 @@
 
   // Retain a raw pointer to |policy_loader_| in order to control the policy
   // contents.
-  raw_ptr<policy::FakeAsyncPolicyLoader> policy_loader_ = nullptr;
+  raw_ptr<policy::FakeAsyncPolicyLoader, DanglingUntriaged> policy_loader_ =
+      nullptr;
 
   // Task runner of the host thread.
   scoped_refptr<AutoThreadTaskRunner> host_task_runner_;
diff --git a/remoting/host/linux/x11_character_injector_unittest.cc b/remoting/host/linux/x11_character_injector_unittest.cc
index bb8f3df..96e126e 100644
--- a/remoting/host/linux/x11_character_injector_unittest.cc
+++ b/remoting/host/linux/x11_character_injector_unittest.cc
@@ -152,7 +152,8 @@
   void InjectAndRun(const std::vector<uint32_t>& code_points);
 
   std::unique_ptr<X11CharacterInjector> injector_;
-  raw_ptr<FakeX11Keyboard> keyboard_;  // Owned by |injector_|.
+  raw_ptr<FakeX11Keyboard, DanglingUntriaged>
+      keyboard_;  // Owned by |injector_|.
 
   base::test::SingleThreadTaskEnvironment task_environment_;
 };
diff --git a/remoting/host/remote_open_url/remote_open_url_client_unittest.cc b/remoting/host/remote_open_url/remote_open_url_client_unittest.cc
index 3878792..204cc39 100644
--- a/remoting/host/remote_open_url/remote_open_url_client_unittest.cc
+++ b/remoting/host/remote_open_url/remote_open_url_client_unittest.cc
@@ -71,8 +71,8 @@
 
   // These raw pointer objects are owned by |client_| so |client_| must outlive
   // the last use of them.
-  raw_ptr<MockRemoteOpenUrlClientDelegate> delegate_;
-  raw_ptr<MockChromotingHostServicesProvider> api_provider_;
+  raw_ptr<MockRemoteOpenUrlClientDelegate, DanglingUntriaged> delegate_;
+  raw_ptr<MockChromotingHostServicesProvider, DanglingUntriaged> api_provider_;
 
   std::unique_ptr<RemoteOpenUrlClient> client_;
   MockChromotingSessionServices mock_api_;
diff --git a/remoting/host/remote_open_url/remote_open_url_message_handler_unittest.cc b/remoting/host/remote_open_url/remote_open_url_message_handler_unittest.cc
index e21eb78..f5a5f92 100644
--- a/remoting/host/remote_open_url/remote_open_url_message_handler_unittest.cc
+++ b/remoting/host/remote_open_url/remote_open_url_message_handler_unittest.cc
@@ -55,7 +55,7 @@
 
   base::test::TaskEnvironment task_environment_;
   protocol::FakeMessagePipe fake_pipe_{/* asynchronous= */ false};
-  raw_ptr<RemoteOpenUrlMessageHandler> message_handler_;
+  raw_ptr<RemoteOpenUrlMessageHandler, DanglingUntriaged> message_handler_;
 };
 
 RemoteOpenUrlMessageHandlerTest::RemoteOpenUrlMessageHandlerTest() {
diff --git a/remoting/host/remoting_register_support_host_request_unittest.cc b/remoting/host/remoting_register_support_host_request_unittest.cc
index 090d903a..fbe991f 100644
--- a/remoting/host/remoting_register_support_host_request_unittest.cc
+++ b/remoting/host/remoting_register_support_host_request_unittest.cc
@@ -131,7 +131,8 @@
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
 
   std::unique_ptr<RemotingRegisterSupportHostRequest> register_host_request_;
-  raw_ptr<MockRegisterSupportHostClient> register_host_client_ = nullptr;
+  raw_ptr<MockRegisterSupportHostClient, DanglingUntriaged>
+      register_host_client_ = nullptr;
 
   std::unique_ptr<SignalStrategy> signal_strategy_;
   scoped_refptr<RsaKeyPair> key_pair_;
diff --git a/remoting/host/setup/me2me_native_messaging_host_unittest.cc b/remoting/host/setup/me2me_native_messaging_host_unittest.cc
index 15e5c289..624323b 100644
--- a/remoting/host/setup/me2me_native_messaging_host_unittest.cc
+++ b/remoting/host/setup/me2me_native_messaging_host_unittest.cc
@@ -262,7 +262,8 @@
  protected:
   // Reference to the MockDaemonControllerDelegate, which is owned by
   // |channel_|.
-  raw_ptr<MockDaemonControllerDelegate> daemon_controller_delegate_;
+  raw_ptr<MockDaemonControllerDelegate, DanglingUntriaged>
+      daemon_controller_delegate_;
 
  private:
   void StartHost();
diff --git a/remoting/host/token_validator_base_unittest.cc b/remoting/host/token_validator_base_unittest.cc
index 7a53fafc..4f913c2 100644
--- a/remoting/host/token_validator_base_unittest.cc
+++ b/remoting/host/token_validator_base_unittest.cc
@@ -71,8 +71,10 @@
  private:
   void StartValidateRequest(const std::string& token) override {}
 
-  raw_ptr<net::X509Certificate> expected_client_cert_ = nullptr;
-  raw_ptr<net::SSLPrivateKey> expected_private_key_ = nullptr;
+  raw_ptr<net::X509Certificate, DanglingUntriaged> expected_client_cert_ =
+      nullptr;
+  raw_ptr<net::SSLPrivateKey, DanglingUntriaged> expected_private_key_ =
+      nullptr;
 };
 
 TestTokenValidator::TestTokenValidator(const ThirdPartyAuthConfig& config)
diff --git a/remoting/host/webauthn/remote_webauthn_message_handler_unittest.cc b/remoting/host/webauthn/remote_webauthn_message_handler_unittest.cc
index 5303a88..82f1b7b 100644
--- a/remoting/host/webauthn/remote_webauthn_message_handler_unittest.cc
+++ b/remoting/host/webauthn/remote_webauthn_message_handler_unittest.cc
@@ -82,8 +82,9 @@
   protocol::RemoteWebAuthn GetLatestSentMessage();
 
   protocol::FakeMessagePipe fake_pipe_{/* asynchronous= */ false};
-  raw_ptr<MockRemoteWebAuthnStateChangeNotifier> mock_state_change_notifier_;
-  raw_ptr<RemoteWebAuthnMessageHandler> message_handler_;
+  raw_ptr<MockRemoteWebAuthnStateChangeNotifier, DanglingUntriaged>
+      mock_state_change_notifier_;
+  raw_ptr<RemoteWebAuthnMessageHandler, DanglingUntriaged> message_handler_;
 
  private:
   base::test::TaskEnvironment task_environment_;
diff --git a/remoting/host/webauthn/remote_webauthn_native_messaging_host_unittest.cc b/remoting/host/webauthn/remote_webauthn_native_messaging_host_unittest.cc
index dd87e7d..87e51f54 100644
--- a/remoting/host/webauthn/remote_webauthn_native_messaging_host_unittest.cc
+++ b/remoting/host/webauthn/remote_webauthn_native_messaging_host_unittest.cc
@@ -131,7 +131,7 @@
   void ResetReceiver();
 
   MockWebAuthnProxy webauthn_proxy_;
-  raw_ptr<MockChromotingHostServicesProvider> api_provider_;
+  raw_ptr<MockChromotingHostServicesProvider, DanglingUntriaged> api_provider_;
   MockChromotingSessionServices api_;
 
  private:
diff --git a/remoting/protocol/audio_pump_unittest.cc b/remoting/protocol/audio_pump_unittest.cc
index 6d61d8be..58c50b93 100644
--- a/remoting/protocol/audio_pump_unittest.cc
+++ b/remoting/protocol/audio_pump_unittest.cc
@@ -77,8 +77,8 @@
   base::test::SingleThreadTaskEnvironment task_environment_;
 
   // |source_| and |encoder_| are owned by the |pump_|.
-  raw_ptr<FakeAudioSource> source_;
-  raw_ptr<FakeAudioEncoder> encoder_;
+  raw_ptr<FakeAudioSource, DanglingUntriaged> source_;
+  raw_ptr<FakeAudioEncoder, DanglingUntriaged> encoder_;
 
   std::unique_ptr<AudioPump> pump_;
 
diff --git a/remoting/protocol/capture_scheduler_unittest.cc b/remoting/protocol/capture_scheduler_unittest.cc
index e095f6a..8f286d16 100644
--- a/remoting/protocol/capture_scheduler_unittest.cc
+++ b/remoting/protocol/capture_scheduler_unittest.cc
@@ -78,7 +78,7 @@
   base::SimpleTestTickClock tick_clock_;
 
   // Owned by |scheduler_|.
-  raw_ptr<base::MockOneShotTimer> capture_timer_;
+  raw_ptr<base::MockOneShotTimer, DanglingUntriaged> capture_timer_;
 
   bool capture_called_;
 };
diff --git a/remoting/protocol/clipboard_echo_filter.h b/remoting/protocol/clipboard_echo_filter.h
index dc2e6e35..edbb754 100644
--- a/remoting/protocol/clipboard_echo_filter.h
+++ b/remoting/protocol/clipboard_echo_filter.h
@@ -61,7 +61,7 @@
   void InjectClipboardEventToHost(const ClipboardEvent& event);
   void InjectClipboardEventToClient(const ClipboardEvent& event);
 
-  raw_ptr<ClipboardStub> host_stub_;
+  raw_ptr<ClipboardStub, DanglingUntriaged> host_stub_;
   raw_ptr<ClipboardStub> client_stub_;
   ClientFilter client_filter_;
   HostFilter host_filter_;
diff --git a/remoting/protocol/clipboard_filter.h b/remoting/protocol/clipboard_filter.h
index 864c744..a2ebe82 100644
--- a/remoting/protocol/clipboard_filter.h
+++ b/remoting/protocol/clipboard_filter.h
@@ -40,7 +40,7 @@
   void InjectClipboardEvent(const ClipboardEvent& event) override;
 
  private:
-  raw_ptr<ClipboardStub> clipboard_stub_ = nullptr;
+  raw_ptr<ClipboardStub, DanglingUntriaged> clipboard_stub_ = nullptr;
   bool enabled_ = true;
   absl::optional<size_t> max_size_;
 };
diff --git a/remoting/protocol/connection_unittest.cc b/remoting/protocol/connection_unittest.cc
index aceae2e..38c2626e 100644
--- a/remoting/protocol/connection_unittest.cc
+++ b/remoting/protocol/connection_unittest.cc
@@ -448,7 +448,8 @@
   MockHostStub host_stub_;
   MockInputStub host_input_stub_;
   std::unique_ptr<ConnectionToClient> host_connection_;
-  raw_ptr<FakeSession> host_session_;  // Owned by |host_connection_|.
+  raw_ptr<FakeSession, DanglingUntriaged>
+      host_session_;  // Owned by |host_connection_|.
   bool host_connected_ = false;
 
   MockConnectionToHostEventCallback client_event_handler_;
@@ -457,7 +458,8 @@
   FakeVideoRenderer client_video_renderer_;
   FakeAudioPlayer client_audio_player_;
   std::unique_ptr<ConnectionToHost> client_connection_;
-  raw_ptr<FakeSession> client_session_;  // Owned by |client_connection_|.
+  raw_ptr<FakeSession, DanglingUntriaged>
+      client_session_;  // Owned by |client_connection_|.
   std::unique_ptr<FakeSession> owned_client_session_;
   bool client_connected_ = false;
 
diff --git a/remoting/protocol/fake_message_pipe.h b/remoting/protocol/fake_message_pipe.h
index 45e03fd..5e6597b 100644
--- a/remoting/protocol/fake_message_pipe.h
+++ b/remoting/protocol/fake_message_pipe.h
@@ -73,7 +73,7 @@
 
   const bool asynchronous_;
   bool pipe_opened_ = false;
-  raw_ptr<EventHandler> event_handler_ = nullptr;
+  raw_ptr<EventHandler, DanglingUntriaged> event_handler_ = nullptr;
   base::queue<std::string> sent_messages_;
   std::vector<base::WeakPtr<FakeMessagePipeWrapper>> wrappers_;
 };
diff --git a/remoting/protocol/fake_session.h b/remoting/protocol/fake_session.h
index a63aacc2..f62068c 100644
--- a/remoting/protocol/fake_session.h
+++ b/remoting/protocol/fake_session.h
@@ -73,7 +73,7 @@
   std::string jid_;
 
   std::unique_ptr<FakeAuthenticator> authenticator_;
-  raw_ptr<Transport> transport_;
+  raw_ptr<Transport, DanglingUntriaged> transport_;
 
   ErrorCode error_ = OK;
   bool closed_ = false;
diff --git a/remoting/protocol/host_video_dispatcher.h b/remoting/protocol/host_video_dispatcher.h
index c6386db..017a92c 100644
--- a/remoting/protocol/host_video_dispatcher.h
+++ b/remoting/protocol/host_video_dispatcher.h
@@ -34,7 +34,7 @@
  private:
   void OnIncomingMessage(std::unique_ptr<CompoundBuffer> message) override;
 
-  raw_ptr<VideoFeedbackStub> video_feedback_stub_ = nullptr;
+  raw_ptr<VideoFeedbackStub, DanglingUntriaged> video_feedback_stub_ = nullptr;
 };
 
 }  // namespace remoting::protocol
diff --git a/remoting/protocol/input_filter.h b/remoting/protocol/input_filter.h
index 8a60477..1d9fdda 100644
--- a/remoting/protocol/input_filter.h
+++ b/remoting/protocol/input_filter.h
@@ -38,7 +38,7 @@
   void InjectTouchEvent(const TouchEvent& event) override;
 
  private:
-  raw_ptr<InputStub> input_stub_;
+  raw_ptr<InputStub, DanglingUntriaged> input_stub_;
   bool enabled_;
 };
 
diff --git a/remoting/protocol/pseudotcp_adapter_unittest.cc b/remoting/protocol/pseudotcp_adapter_unittest.cc
index 5b5bc1cb..3550bc9 100644
--- a/remoting/protocol/pseudotcp_adapter_unittest.cc
+++ b/remoting/protocol/pseudotcp_adapter_unittest.cc
@@ -152,7 +152,7 @@
 
   base::circular_deque<std::vector<char>> incoming_packets_;
 
-  raw_ptr<FakeSocket> peer_socket_;
+  raw_ptr<FakeSocket, DanglingUntriaged> peer_socket_;
   raw_ptr<RateLimiter> rate_limiter_;
   int latency_ms_;
 };
@@ -309,8 +309,8 @@
         base::WrapUnique(client_socket_.get()));
   }
 
-  raw_ptr<FakeSocket> host_socket_;
-  raw_ptr<FakeSocket> client_socket_;
+  raw_ptr<FakeSocket, DanglingUntriaged> host_socket_;
+  raw_ptr<FakeSocket, DanglingUntriaged> client_socket_;
 
   std::unique_ptr<PseudoTcpAdapter> host_pseudotcp_;
   std::unique_ptr<PseudoTcpAdapter> client_pseudotcp_;
diff --git a/remoting/protocol/spake2_authenticator.h b/remoting/protocol/spake2_authenticator.h
index 9a8bce5..f4097bb 100644
--- a/remoting/protocol/spake2_authenticator.h
+++ b/remoting/protocol/spake2_authenticator.h
@@ -84,7 +84,7 @@
   std::string remote_cert_;
 
   // Used for both host and client authenticators.
-  raw_ptr<SPAKE2_CTX> spake2_context_;
+  raw_ptr<SPAKE2_CTX, DanglingUntriaged> spake2_context_;
   State state_;
   bool started_ = false;
   RejectionReason rejection_reason_ = RejectionReason::INVALID_CREDENTIALS;
diff --git a/remoting/protocol/stream_message_pipe_adapter.h b/remoting/protocol/stream_message_pipe_adapter.h
index 3d03627..647ef7d 100644
--- a/remoting/protocol/stream_message_pipe_adapter.h
+++ b/remoting/protocol/stream_message_pipe_adapter.h
@@ -41,7 +41,7 @@
  private:
   void CloseOnError(int error);
 
-  raw_ptr<EventHandler> event_handler_ = nullptr;
+  raw_ptr<EventHandler, DanglingUntriaged> event_handler_ = nullptr;
 
   std::unique_ptr<P2PStreamSocket> socket_;
   ErrorCallback error_callback_;
@@ -74,7 +74,7 @@
   void OnChannelCreated(ChannelCreatedCallback callback,
                         std::unique_ptr<P2PStreamSocket> socket);
 
-  raw_ptr<StreamChannelFactory> stream_channel_factory_;
+  raw_ptr<StreamChannelFactory, DanglingUntriaged> stream_channel_factory_;
   ErrorCallback error_callback_;
 };
 
diff --git a/remoting/protocol/validating_authenticator_unittest.cc b/remoting/protocol/validating_authenticator_unittest.cc
index 28f5bb59..199076a 100644
--- a/remoting/protocol/validating_authenticator_unittest.cc
+++ b/remoting/protocol/validating_authenticator_unittest.cc
@@ -67,7 +67,8 @@
   // to |validating_authenticator_|.  Lifetime of the object is controlled by
   // |validating_authenticator_| so this pointer is no longer valid once
   // the owner is destroyed.
-  raw_ptr<testing::NiceMock<MockAuthenticator>> mock_authenticator_ = nullptr;
+  raw_ptr<testing::NiceMock<MockAuthenticator>, DanglingUntriaged>
+      mock_authenticator_ = nullptr;
 
   // This member is used to drive behavior in |validating_authenticator_| when
   // its validation complete callback is run.
diff --git a/remoting/protocol/webrtc_audio_source_adapter_unittest.cc b/remoting/protocol/webrtc_audio_source_adapter_unittest.cc
index 1aa6d374..ecb8b54 100644
--- a/remoting/protocol/webrtc_audio_source_adapter_unittest.cc
+++ b/remoting/protocol/webrtc_audio_source_adapter_unittest.cc
@@ -74,7 +74,7 @@
 
  protected:
   base::test::SingleThreadTaskEnvironment task_environment_;
-  raw_ptr<FakeAudioSource> audio_source_;
+  raw_ptr<FakeAudioSource, DanglingUntriaged> audio_source_;
   scoped_refptr<WebrtcAudioSourceAdapter> audio_source_adapter_;
   FakeAudioSink sink_;
 };
diff --git a/remoting/protocol/webrtc_connection_to_client.h b/remoting/protocol/webrtc_connection_to_client.h
index d7854cc8..35d0fe6 100644
--- a/remoting/protocol/webrtc_connection_to_client.h
+++ b/remoting/protocol/webrtc_connection_to_client.h
@@ -90,7 +90,7 @@
 
   std::unique_ptr<Session> session_;
 
-  raw_ptr<WebrtcVideoEncoderFactory> video_encoder_factory_;
+  raw_ptr<WebrtcVideoEncoderFactory, DanglingUntriaged> video_encoder_factory_;
 
   HostVideoStatsDispatcher video_stats_dispatcher_;
 
diff --git a/remoting/signaling/ftl_messaging_client_unittest.cc b/remoting/signaling/ftl_messaging_client_unittest.cc
index dd6dd475..166f912 100644
--- a/remoting/signaling/ftl_messaging_client_unittest.cc
+++ b/remoting/signaling/ftl_messaging_client_unittest.cc
@@ -156,7 +156,8 @@
   ProtobufHttpTestResponder test_responder_;
   FakeOAuthTokenGetter token_getter_{OAuthTokenGetter::Status::SUCCESS, "", ""};
   std::unique_ptr<FtlMessagingClient> messaging_client_;
-  raw_ptr<MockMessageReceptionChannel> mock_message_reception_channel_;
+  raw_ptr<MockMessageReceptionChannel, DanglingUntriaged>
+      mock_message_reception_channel_;
 
  private:
   base::test::TaskEnvironment task_environment_;
diff --git a/remoting/signaling/ftl_signal_strategy_unittest.cc b/remoting/signaling/ftl_signal_strategy_unittest.cc
index bb5550e..0d1670f41 100644
--- a/remoting/signaling/ftl_signal_strategy_unittest.cc
+++ b/remoting/signaling/ftl_signal_strategy_unittest.cc
@@ -237,9 +237,10 @@
   base::test::TaskEnvironment task_environment_{
       base::test::TaskEnvironment::TimeSource::MOCK_TIME};
 
-  raw_ptr<MockOAuthTokenGetter> token_getter_ = nullptr;
-  raw_ptr<FakeRegistrationManager> registration_manager_ = nullptr;
-  raw_ptr<FakeMessagingClient> messaging_client_ = nullptr;
+  raw_ptr<MockOAuthTokenGetter, DanglingUntriaged> token_getter_ = nullptr;
+  raw_ptr<FakeRegistrationManager, DanglingUntriaged> registration_manager_ =
+      nullptr;
+  raw_ptr<FakeMessagingClient, DanglingUntriaged> messaging_client_ = nullptr;
   std::unique_ptr<FtlSignalStrategy> signal_strategy_;
 
   std::vector<SignalStrategy::State> state_history_;
diff --git a/services/audio/device_listener_output_stream_unittest.cc b/services/audio/device_listener_output_stream_unittest.cc
index 26cf76d..4e2f37e 100644
--- a/services/audio/device_listener_output_stream_unittest.cc
+++ b/services/audio/device_listener_output_stream_unittest.cc
@@ -62,7 +62,8 @@
   }
 
  private:
-  raw_ptr<AudioOutputStream::AudioSourceCallback> provided_callback_ = nullptr;
+  raw_ptr<AudioOutputStream::AudioSourceCallback, DanglingUntriaged>
+      provided_callback_ = nullptr;
 };
 
 class FakeAudioManagerForDeviceChange : public media::FakeAudioManager {
diff --git a/services/audio/loopback_stream_unittest.cc b/services/audio/loopback_stream_unittest.cc
index 87b56eb2..e2c1fe11 100644
--- a/services/audio/loopback_stream_unittest.cc
+++ b/services/audio/loopback_stream_unittest.cc
@@ -261,7 +261,8 @@
   std::vector<std::unique_ptr<FakeLoopbackGroupMember>> sources_;
   NiceMock<MockClientAndObserver> client_;
   std::unique_ptr<LoopbackStream> stream_;
-  raw_ptr<FakeSyncWriter> consumer_ = nullptr;  // Owned by |stream_|.
+  raw_ptr<FakeSyncWriter, DanglingUntriaged> consumer_ =
+      nullptr;  // Owned by |stream_|.
 
   mojo::Remote<media::mojom::AudioInputStream> remote_input_stream_;
 };
diff --git a/services/audio/output_controller_unittest.cc b/services/audio/output_controller_unittest.cc
index b1e830c2..232527336 100644
--- a/services/audio/output_controller_unittest.cc
+++ b/services/audio/output_controller_unittest.cc
@@ -221,7 +221,7 @@
     NOTREACHED();
   }
 
-  raw_ptr<AudioOutputStream> impl_;
+  raw_ptr<AudioOutputStream, DanglingUntriaged> impl_;
   const AudioParameters::Format format_;
   base::OnceClosure close_callback_;
   raw_ptr<AudioOutputStream::AudioSourceCallback> callback_ = nullptr;
@@ -312,8 +312,10 @@
   }
 
   media::FakeAudioLogFactory fake_audio_log_factory_;
-  raw_ptr<MockAudioOutputStream> last_created_stream_ = nullptr;
-  raw_ptr<MockAudioOutputStream> last_closed_stream_ = nullptr;
+  raw_ptr<MockAudioOutputStream, DanglingUntriaged> last_created_stream_ =
+      nullptr;
+  raw_ptr<MockAudioOutputStream, DanglingUntriaged> last_closed_stream_ =
+      nullptr;
 };
 
 ACTION(PopulateBuffer) {
diff --git a/services/audio/output_device_mixer_impl_unittest.cc b/services/audio/output_device_mixer_impl_unittest.cc
index 3a0a5500..340cdca9 100644
--- a/services/audio/output_device_mixer_impl_unittest.cc
+++ b/services/audio/output_device_mixer_impl_unittest.cc
@@ -73,7 +73,8 @@
   }
 
  private:
-  raw_ptr<AudioOutputStream::AudioSourceCallback> provided_callback_ = nullptr;
+  raw_ptr<AudioOutputStream::AudioSourceCallback, DanglingUntriaged>
+      provided_callback_ = nullptr;
   double volume_ = 0;
 };
 
@@ -202,7 +203,7 @@
   // Helper.
   struct StreamUnderTest {
     // MixableOutputStream produced by OutputMixerImpl.
-    raw_ptr<AudioOutputStream> mixable_stream;
+    raw_ptr<AudioOutputStream, DanglingUntriaged> mixable_stream;
     // All the mocks associated with it.
     raw_ptr<MixTrackMock> mix_track_mock;
   };
@@ -422,7 +423,7 @@
         OutputDeviceMixerImpl::kSwitchToUnmixedPlaybackDelay * 2);
   }
 
-  raw_ptr<MockMixingGraph> mock_mixing_graph_ = nullptr;
+  raw_ptr<MockMixingGraph, DanglingUntriaged> mock_mixing_graph_ = nullptr;
   StrictMock<MockAudioOutputStream> mock_mixing_graph_output_stream_;
 
   const media::AudioParameters mixer_output_params_{
diff --git a/services/audio/output_device_mixer_manager.h b/services/audio/output_device_mixer_manager.h
index b55304c..f48d6784 100644
--- a/services/audio/output_device_mixer_manager.h
+++ b/services/audio/output_device_mixer_manager.h
@@ -58,7 +58,8 @@
 
   using OutputDeviceMixers = std::vector<std::unique_ptr<OutputDeviceMixer>>;
   using ListenerToDeviceMap =
-      base::flat_map<raw_ptr<ReferenceOutput::Listener>, std::string>;
+      base::flat_map<raw_ptr<ReferenceOutput::Listener, DanglingUntriaged>,
+                     std::string>;
 
   // Forwards device change notifications to OutputDeviceMixers.
   void OnDeviceChange();
diff --git a/services/audio/sync_reader_unittest.cc b/services/audio/sync_reader_unittest.cc
index 23ad041..3b4bcb1 100644
--- a/services/audio/sync_reader_unittest.cc
+++ b/services/audio/sync_reader_unittest.cc
@@ -178,7 +178,8 @@
   std::unique_ptr<MockOutputGlitchCounter> mock_audio_glitch_counter_ptr_;
 
  protected:
-  raw_ptr<MockOutputGlitchCounter> mock_output_glitch_counter_;
+  raw_ptr<MockOutputGlitchCounter, DanglingUntriaged>
+      mock_output_glitch_counter_;
   std::unique_ptr<SyncReader> reader_;
   base::WritableSharedMemoryMapping shmem_;
   raw_ptr<media::AudioOutputBuffer> buffer_;
diff --git a/services/device/geolocation/geolocation_provider_impl_unittest.cc b/services/device/geolocation/geolocation_provider_impl_unittest.cc
index d94dd6e2..2f4ce9d 100644
--- a/services/device/geolocation/geolocation_provider_impl_unittest.cc
+++ b/services/device/geolocation/geolocation_provider_impl_unittest.cc
@@ -130,7 +130,7 @@
   base::ThreadChecker thread_checker_;
 
   // Owned by the GeolocationProviderImpl class.
-  raw_ptr<FakeLocationProvider> arbitrator_;
+  raw_ptr<FakeLocationProvider, DanglingUntriaged> arbitrator_;
 
   // True if |arbitrator_| is started.
   bool is_started_;
diff --git a/services/device/geolocation/location_arbitrator_unittest.cc b/services/device/geolocation/location_arbitrator_unittest.cc
index ccc88d8..7a14d52 100644
--- a/services/device/geolocation/location_arbitrator_unittest.cc
+++ b/services/device/geolocation/location_arbitrator_unittest.cc
@@ -113,7 +113,8 @@
     return base::WrapUnique(system_location_provider_.get());
   }
 
-  raw_ptr<FakeLocationProvider> network_location_provider_ = nullptr;
+  raw_ptr<FakeLocationProvider, DanglingUntriaged> network_location_provider_ =
+      nullptr;
   raw_ptr<FakeLocationProvider> system_location_provider_ = nullptr;
   bool should_use_system_location_provider_;
 };
diff --git a/services/device/geolocation/public_ip_address_geolocator.h b/services/device/geolocation/public_ip_address_geolocator.h
index 56521b8..83665e4 100644
--- a/services/device/geolocation/public_ip_address_geolocator.h
+++ b/services/device/geolocation/public_ip_address_geolocator.h
@@ -55,7 +55,7 @@
   base::Time last_updated_timestamp_;
 
   // Notifier to ask for IP-geolocation updates.
-  const raw_ptr<PublicIpAddressLocationNotifier> notifier_;
+  const raw_ptr<PublicIpAddressLocationNotifier, DanglingUntriaged> notifier_;
 
   // The most recent PartialNetworkTrafficAnnotationTag provided by a client.
   std::unique_ptr<const net::PartialNetworkTrafficAnnotationTag>
diff --git a/services/device/geolocation/wifi_data_provider_common_unittest.cc b/services/device/geolocation/wifi_data_provider_common_unittest.cc
index fc477c6..4b074a0 100644
--- a/services/device/geolocation/wifi_data_provider_common_unittest.cc
+++ b/services/device/geolocation/wifi_data_provider_common_unittest.cc
@@ -78,7 +78,7 @@
   }
 
   std::unique_ptr<MockWlanApi> wlan_api_;
-  raw_ptr<MockPollingPolicy> polling_policy_ = nullptr;
+  raw_ptr<MockPollingPolicy, DanglingUntriaged> polling_policy_ = nullptr;
 
  private:
   ~WifiDataProviderCommonWithMock() override = default;
@@ -133,8 +133,8 @@
   WifiDataProviderHandle::WifiDataUpdateCallback wifi_data_callback_;
   scoped_refptr<WifiDataProviderCommonWithMock> provider_;
 
-  raw_ptr<MockWlanApi> wlan_api_ = nullptr;
-  raw_ptr<MockPollingPolicy> polling_policy_ = nullptr;
+  raw_ptr<MockWlanApi, DanglingUntriaged> wlan_api_ = nullptr;
+  raw_ptr<MockPollingPolicy, DanglingUntriaged> polling_policy_ = nullptr;
 };
 
 TEST_F(GeolocationWifiDataProviderCommonTest, CreateDestroy) {
diff --git a/services/device/public/cpp/power_monitor/power_monitor_broadcast_source_unittest.cc b/services/device/public/cpp/power_monitor/power_monitor_broadcast_source_unittest.cc
index 327d48d..654caab1 100644
--- a/services/device/public/cpp/power_monitor/power_monitor_broadcast_source_unittest.cc
+++ b/services/device/public/cpp/power_monitor/power_monitor_broadcast_source_unittest.cc
@@ -44,7 +44,8 @@
   base::test::SingleThreadTaskEnvironment task_environment_;
 
  private:
-  raw_ptr<PowerMonitorBroadcastSource> power_monitor_source_ptr_;
+  raw_ptr<PowerMonitorBroadcastSource, DanglingUntriaged>
+      power_monitor_source_ptr_;
 };
 
 TEST_F(PowerMonitorBroadcastSourceTest, PowerMessageReceiveBroadcast) {
diff --git a/services/device/serial/serial_port_manager_impl_unittest.cc b/services/device/serial/serial_port_manager_impl_unittest.cc
index 8a10a3b2..905399b 100644
--- a/services/device/serial/serial_port_manager_impl_unittest.cc
+++ b/services/device/serial/serial_port_manager_impl_unittest.cc
@@ -180,8 +180,9 @@
     return base::SingleThreadTaskRunner::GetCurrentDefault();
   }
 
-  raw_ptr<FakeSerialEnumerator> enumerator_;
-  raw_ptr<BluetoothSerialDeviceEnumerator> bluetooth_enumerator_;
+  raw_ptr<FakeSerialEnumerator, DanglingUntriaged> enumerator_;
+  raw_ptr<BluetoothSerialDeviceEnumerator, DanglingUntriaged>
+      bluetooth_enumerator_;
   scoped_refptr<MockBluetoothAdapter> adapter_ =
       base::MakeRefCounted<MockBluetoothAdapter>();
   scoped_refptr<MockBluetoothSocket> mock_socket_ =
diff --git a/services/device/usb/mock_usb_device_handle.h b/services/device/usb/mock_usb_device_handle.h
index bc5aa325..1836364 100644
--- a/services/device/usb/mock_usb_device_handle.h
+++ b/services/device/usb/mock_usb_device_handle.h
@@ -143,7 +143,7 @@
   ~MockUsbDeviceHandle() override;
 
  private:
-  raw_ptr<UsbDevice> device_;
+  raw_ptr<UsbDevice, DanglingUntriaged> device_;
 };
 
 }  // namespace device
diff --git a/services/device/usb/mojo/device_manager_impl_unittest.cc b/services/device/usb/mojo/device_manager_impl_unittest.cc
index ff3acd1..dc7e53a 100644
--- a/services/device/usb/mojo/device_manager_impl_unittest.cc
+++ b/services/device/usb/mojo/device_manager_impl_unittest.cc
@@ -57,7 +57,7 @@
   ~USBDeviceManagerImplTest() override = default;
 
  protected:
-  raw_ptr<MockUsbService> mock_usb_service_;
+  raw_ptr<MockUsbService, DanglingUntriaged> mock_usb_service_;
   std::unique_ptr<DeviceManagerImpl> device_manager_instance_;
   base::test::SingleThreadTaskEnvironment task_environment_;
 };
diff --git a/services/network/attribution/attribution_verification_mediator.h b/services/network/attribution/attribution_verification_mediator.h
index a10b126d..393bcbd 100644
--- a/services/network/attribution/attribution_verification_mediator.h
+++ b/services/network/attribution/attribution_verification_mediator.h
@@ -203,7 +203,8 @@
 
   // The key_commitment_getter_ instance is a singleton owned by NetworkService,
   // it will always outlive this.
-  const raw_ptr<const TrustTokenKeyCommitmentGetter> key_commitment_getter_;
+  const raw_ptr<const TrustTokenKeyCommitmentGetter, DanglingUntriaged>
+      key_commitment_getter_;
 
   // Relinquishes ownership during posted tasks for the potentially
   // computationally intensive cryptographic operations
diff --git a/services/network/attribution/attribution_verification_mediator_unittest.cc b/services/network/attribution/attribution_verification_mediator_unittest.cc
index 2b70991..9cc73ad 100644
--- a/services/network/attribution/attribution_verification_mediator_unittest.cc
+++ b/services/network/attribution/attribution_verification_mediator_unittest.cc
@@ -96,7 +96,7 @@
 
   // We hold onto a raw ptr to configure the call expectations, the helper owns
   // the unique_ptr.
-  raw_ptr<FakeCryptographer> fake_cryptographer_;
+  raw_ptr<FakeCryptographer, DanglingUntriaged> fake_cryptographer_;
   std::unique_ptr<AttributionVerificationMediator> mediator_;
 
   base::HistogramTester histograms_;
diff --git a/services/network/http_cache_data_remover_unittest.cc b/services/network/http_cache_data_remover_unittest.cc
index a2e4dc3..a2c6d1c 100644
--- a/services/network/http_cache_data_remover_unittest.cc
+++ b/services/network/http_cache_data_remover_unittest.cc
@@ -179,7 +179,7 @@
   RAW_PTR_EXCLUSION disk_cache::Backend* backend_ = nullptr;
 
  private:
-  raw_ptr<net::HttpCache> cache_;
+  raw_ptr<net::HttpCache, DanglingUntriaged> cache_;
 };
 
 class HttpCacheDataRemoverSplitCacheTest : public HttpCacheDataRemoverTest {
diff --git a/services/network/ignore_errors_cert_verifier_unittest.cc b/services/network/ignore_errors_cert_verifier_unittest.cc
index 088b77b..dc4b1402 100644
--- a/services/network/ignore_errors_cert_verifier_unittest.cc
+++ b/services/network/ignore_errors_cert_verifier_unittest.cc
@@ -80,7 +80,7 @@
 
   // The wrapped CertVerifier. Defaults to returning ERR_CERT_INVALID. Owned by
   // |verifier_|.
-  raw_ptr<MockCertVerifier> mock_verifier_;
+  raw_ptr<MockCertVerifier, DanglingUntriaged> mock_verifier_;
   IgnoreErrorsCertVerifier verifier_;
 };
 
diff --git a/services/network/p2p/socket_manager.h b/services/network/p2p/socket_manager.h
index 03af2e0..52c0e91 100644
--- a/services/network/p2p/socket_manager.h
+++ b/services/network/p2p/socket_manager.h
@@ -162,7 +162,7 @@
   void OnConnectionError();
 
   DeleteCallback delete_callback_;
-  raw_ptr<net::URLRequestContext> url_request_context_;
+  raw_ptr<net::URLRequestContext, DanglingUntriaged> url_request_context_;
   const net::NetworkAnonymizationKey network_anonymization_key_;
 
   std::unique_ptr<ProxyResolvingClientSocketFactory>
diff --git a/services/network/p2p/socket_tcp_unittest.cc b/services/network/p2p/socket_tcp_unittest.cc
index f1c83b6..1d9eb36 100644
--- a/services/network/p2p/socket_tcp_unittest.cc
+++ b/services/network/p2p/socket_tcp_unittest.cc
@@ -108,7 +108,7 @@
 
   base::test::TaskEnvironment task_environment_;
   std::string sent_data_;
-  raw_ptr<FakeSocket> socket_;  // Owned by |socket_impl_|.
+  raw_ptr<FakeSocket, DanglingUntriaged> socket_;  // Owned by |socket_impl_|.
   std::unique_ptr<P2PSocketTcpBase> socket_impl_;
   FakeP2PSocketDelegate socket_delegate_;
   std::unique_ptr<FakeSocketClient> fake_client_;
diff --git a/services/network/p2p/socket_udp_unittest.cc b/services/network/p2p/socket_udp_unittest.cc
index 840efb6e..8f7d6812 100644
--- a/services/network/p2p/socket_udp_unittest.cc
+++ b/services/network/p2p/socket_udp_unittest.cc
@@ -314,7 +314,8 @@
   P2PMessageThrottler throttler_;
   ScopedFakeClock fake_clock_;
   base::circular_deque<FakeDatagramServerSocket::UDPPacket> sent_packets_;
-  raw_ptr<FakeDatagramServerSocket> socket_;  // Owned by |socket_impl_|.
+  raw_ptr<FakeDatagramServerSocket, DanglingUntriaged>
+      socket_;  // Owned by |socket_impl_|.
   FakeP2PSocketDelegate socket_delegate_;
   std::unique_ptr<P2PSocketUdp> socket_impl_;
   std::unique_ptr<FakeSocketClient> fake_client_;
diff --git a/services/network/proxy_auto_config_library_unittest.cc b/services/network/proxy_auto_config_library_unittest.cc
index fa48b69..2530c6b 100644
--- a/services/network/proxy_auto_config_library_unittest.cc
+++ b/services/network/proxy_auto_config_library_unittest.cc
@@ -263,7 +263,7 @@
   net::IPAddress local_ip_;
   net::Error connect_error_;
   bool connect_async_ = false;
-  raw_ptr<base::OnceClosure> connect_callback_;
+  raw_ptr<base::OnceClosure, DanglingUntriaged> connect_callback_;
 };
 
 class MockSocketFactory : public net::ClientSocketFactory {
diff --git a/services/network/proxy_service_mojo_unittest.cc b/services/network/proxy_service_mojo_unittest.cc
index 8711e15..c068193 100644
--- a/services/network/proxy_service_mojo_unittest.cc
+++ b/services/network/proxy_service_mojo_unittest.cc
@@ -138,7 +138,7 @@
   TestNetworkDelegate network_delegate_;
   net::MockHostResolver mock_host_resolver_;
   // Owned by |proxy_resolution_service_|.
-  raw_ptr<net::MockPacFileFetcher> fetcher_;
+  raw_ptr<net::MockPacFileFetcher, DanglingUntriaged> fetcher_;
   net::RecordingNetLogObserver net_log_observer_;
   std::unique_ptr<net::ConfiguredProxyResolutionService>
       proxy_resolution_service_;
diff --git a/services/network/public/cpp/source_stream_to_data_pipe_unittest.cc b/services/network/public/cpp/source_stream_to_data_pipe_unittest.cc
index 752e3d3..7061418 100644
--- a/services/network/public/cpp/source_stream_to_data_pipe_unittest.cc
+++ b/services/network/public/cpp/source_stream_to_data_pipe_unittest.cc
@@ -113,7 +113,7 @@
   void FinishedReading(int result) { callback_result_ = result; }
 
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<net::MockSourceStream> source_;
+  raw_ptr<net::MockSourceStream, DanglingUntriaged> source_;
   std::unique_ptr<SourceStreamToDataPipe> adapter_;
   mojo::ScopedDataPipeConsumerHandle consumer_end_;
   absl::optional<int> callback_result_;
diff --git a/services/network/test/url_loader_context_for_tests.h b/services/network/test/url_loader_context_for_tests.h
index 0c8cce32..66ccc45 100644
--- a/services/network/test/url_loader_context_for_tests.h
+++ b/services/network/test/url_loader_context_for_tests.h
@@ -61,8 +61,10 @@
   cors::OriginAccessList origin_access_list_;
   corb::PerFactoryState corb_state_;
 
-  raw_ptr<mojom::NetworkContextClient> network_context_client_ = nullptr;
-  raw_ptr<net::URLRequestContext> url_request_context_ = nullptr;
+  raw_ptr<mojom::NetworkContextClient, DanglingUntriaged>
+      network_context_client_ = nullptr;
+  raw_ptr<net::URLRequestContext, DanglingUntriaged> url_request_context_ =
+      nullptr;
   scoped_refptr<ResourceSchedulerClient> resource_scheduler_client_;
 };
 
diff --git a/services/network/throttling/throttling_upload_data_stream.h b/services/network/throttling/throttling_upload_data_stream.h
index a0a99a7..b278c35 100644
--- a/services/network/throttling/throttling_upload_data_stream.h
+++ b/services/network/throttling/throttling_upload_data_stream.h
@@ -48,7 +48,7 @@
   ThrottlingNetworkInterceptor::ThrottleCallback throttle_callback_;
   int64_t throttled_byte_count_;
 
-  raw_ptr<net::UploadDataStream> upload_data_stream_;
+  raw_ptr<net::UploadDataStream, DanglingUntriaged> upload_data_stream_;
   base::WeakPtr<ThrottlingNetworkInterceptor> interceptor_;
 };
 
diff --git a/services/network/trust_tokens/trust_token_request_issuance_helper.h b/services/network/trust_tokens/trust_token_request_issuance_helper.h
index e8843ad0..a12e282 100644
--- a/services/network/trust_tokens/trust_token_request_issuance_helper.h
+++ b/services/network/trust_tokens/trust_token_request_issuance_helper.h
@@ -231,7 +231,7 @@
   // operation's execution.
   absl::optional<SuitableTrustTokenOrigin> issuer_;
   const SuitableTrustTokenOrigin top_level_origin_;
-  const raw_ptr<TrustTokenStore> token_store_;
+  const raw_ptr<TrustTokenStore, DanglingUntriaged> token_store_;
   const raw_ptr<const TrustTokenKeyCommitmentGetter> key_commitment_getter_;
   const absl::optional<std::string> custom_key_commitment_;
   const absl::optional<url::Origin> custom_issuer_;
diff --git a/services/network/trust_tokens/trust_token_request_redemption_helper.h b/services/network/trust_tokens/trust_token_request_redemption_helper.h
index ab2d164..30ac524f 100644
--- a/services/network/trust_tokens/trust_token_request_redemption_helper.h
+++ b/services/network/trust_tokens/trust_token_request_redemption_helper.h
@@ -198,7 +198,7 @@
   // alongside the RR if redemption succeeds.
   std::string token_verification_key_;
 
-  const raw_ptr<TrustTokenStore> token_store_;
+  const raw_ptr<TrustTokenStore, DanglingUntriaged> token_store_;
   const raw_ptr<const TrustTokenKeyCommitmentGetter> key_commitment_getter_;
   const absl::optional<std::string> custom_key_commitment_;
   const absl::optional<url::Origin> custom_issuer_;
diff --git a/services/network/trust_tokens/trust_token_request_signing_helper.h b/services/network/trust_tokens/trust_token_request_signing_helper.h
index dbbbadc..4a7ab24 100644
--- a/services/network/trust_tokens/trust_token_request_signing_helper.h
+++ b/services/network/trust_tokens/trust_token_request_signing_helper.h
@@ -110,7 +110,7 @@
       mojom::TrustTokenOperationStatus status) override;
 
  private:
-  raw_ptr<TrustTokenStore> token_store_;
+  raw_ptr<TrustTokenStore, DanglingUntriaged> token_store_;
 
   Params params_;
 
diff --git a/services/network/url_loader.h b/services/network/url_loader.h
index 65e522e..e0f48086 100644
--- a/services/network/url_loader.h
+++ b/services/network/url_loader.h
@@ -495,7 +495,8 @@
 
   raw_ptr<net::URLRequestContext> url_request_context_;
 
-  raw_ptr<mojom::NetworkContextClient> network_context_client_;
+  raw_ptr<mojom::NetworkContextClient, DanglingUntriaged>
+      network_context_client_;
   DeleteCallback delete_callback_;
 
   int32_t options_;
diff --git a/services/network/url_loader_unittest.cc b/services/network/url_loader_unittest.cc
index 73e4e87..98a8d444 100644
--- a/services/network/url_loader_unittest.cc
+++ b/services/network/url_loader_unittest.cc
@@ -1170,7 +1170,7 @@
   net::ScopedTestRoot scoped_test_root_;
   net::EmbeddedTestServer test_server_;
   std::unique_ptr<net::ScopedDefaultHostResolverProc> mock_host_resolver_;
-  raw_ptr<net::TestNetworkDelegate>
+  raw_ptr<net::TestNetworkDelegate, DanglingUntriaged>
       unowned_test_network_delegate_;  // owned by |url_request_context_|
   std::unique_ptr<net::URLRequestContext> url_request_context_;
   URLLoaderContextForTests url_loader_context_for_tests_;
diff --git a/services/preferences/tracked/pref_hash_filter_unittest.cc b/services/preferences/tracked/pref_hash_filter_unittest.cc
index a6253c2..5bc4d67 100644
--- a/services/preferences/tracked/pref_hash_filter_unittest.cc
+++ b/services/preferences/tracked/pref_hash_filter_unittest.cc
@@ -622,9 +622,11 @@
         std::move(pref_store_contents_));
   }
 
-  raw_ptr<MockPrefHashStore> mock_pref_hash_store_;
-  raw_ptr<MockPrefHashStore> mock_external_validation_pref_hash_store_;
-  raw_ptr<MockHashStoreContents> mock_external_validation_hash_store_contents_;
+  raw_ptr<MockPrefHashStore, DanglingUntriaged> mock_pref_hash_store_;
+  raw_ptr<MockPrefHashStore, DanglingUntriaged>
+      mock_external_validation_pref_hash_store_;
+  raw_ptr<MockHashStoreContents, DanglingUntriaged>
+      mock_external_validation_hash_store_contents_;
   base::Value::Dict pref_store_contents_;
   scoped_refptr<MockValidationDelegateRecord> mock_validation_delegate_record_;
   std::unique_ptr<PrefHashFilter> pref_hash_filter_;
diff --git a/services/proxy_resolver/proxy_resolver_factory_impl_unittest.cc b/services/proxy_resolver/proxy_resolver_factory_impl_unittest.cc
index 53f29c47..9bcb341 100644
--- a/services/proxy_resolver/proxy_resolver_factory_impl_unittest.cc
+++ b/services/proxy_resolver/proxy_resolver_factory_impl_unittest.cc
@@ -64,7 +64,8 @@
 class TestProxyResolverFactory : public ProxyResolverV8TracingFactory {
  public:
   struct PendingRequest {
-    raw_ptr<std::unique_ptr<ProxyResolverV8Tracing>> resolver;
+    raw_ptr<std::unique_ptr<ProxyResolverV8Tracing>, DanglingUntriaged>
+        resolver;
     net::CompletionOnceCallback callback;
   };
 
diff --git a/services/proxy_resolver/proxy_resolver_impl_unittest.cc b/services/proxy_resolver/proxy_resolver_impl_unittest.cc
index 63b3391..6f35ebb 100644
--- a/services/proxy_resolver/proxy_resolver_impl_unittest.cc
+++ b/services/proxy_resolver/proxy_resolver_impl_unittest.cc
@@ -120,7 +120,7 @@
   struct Job {
     GURL url;
     net::NetworkAnonymizationKey network_anonymization_key;
-    raw_ptr<net::ProxyInfo> results;
+    raw_ptr<net::ProxyInfo, DanglingUntriaged> results;
     bool cancelled = false;
 
     void Complete(int result) {
@@ -223,10 +223,10 @@
 
  protected:
   base::test::TaskEnvironment task_environment_;
-  raw_ptr<MockProxyResolverV8Tracing> mock_proxy_resolver_;
+  raw_ptr<MockProxyResolverV8Tracing, DanglingUntriaged> mock_proxy_resolver_;
 
   std::unique_ptr<ProxyResolverImpl> resolver_impl_;
-  raw_ptr<mojom::ProxyResolver> resolver_;
+  raw_ptr<mojom::ProxyResolver, DanglingUntriaged> resolver_;
 };
 
 TEST_F(ProxyResolverImplTest, GetProxyForUrl) {
diff --git a/services/resource_coordinator/memory_instrumentation/graph.h b/services/resource_coordinator/memory_instrumentation/graph.h
index 3ff71c73..72d4190 100644
--- a/services/resource_coordinator/memory_instrumentation/graph.h
+++ b/services/resource_coordinator/memory_instrumentation/graph.h
@@ -180,7 +180,7 @@
     }
 
    private:
-    raw_ptr<GlobalDumpGraph::Process> dump_graph_;
+    raw_ptr<GlobalDumpGraph::Process, DanglingUntriaged> dump_graph_;
     const raw_ptr<Node> parent_;
     base::trace_event::MemoryAllocatorDumpGuid guid_;
     std::map<std::string, Entry> entries_;
@@ -194,7 +194,7 @@
     double cumulative_owned_coefficient_ = 1;
     double cumulative_owning_coefficient_ = 1;
 
-    raw_ptr<GlobalDumpGraph::Edge> owns_edge_;
+    raw_ptr<GlobalDumpGraph::Edge, DanglingUntriaged> owns_edge_;
     std::vector<GlobalDumpGraph::Edge*> owned_by_edges_;
   };
 
diff --git a/services/resource_coordinator/public/cpp/memory_instrumentation/tracing_observer.h b/services/resource_coordinator/public/cpp/memory_instrumentation/tracing_observer.h
index 2ae973b..3eedc251 100644
--- a/services/resource_coordinator/public/cpp/memory_instrumentation/tracing_observer.h
+++ b/services/resource_coordinator/public/cpp/memory_instrumentation/tracing_observer.h
@@ -57,7 +57,8 @@
   // Returns true if the dump mode is allowed for current tracing session.
   bool IsDumpModeAllowed(base::trace_event::MemoryDumpLevelOfDetail) const;
 
-  const raw_ptr<base::trace_event::MemoryDumpManager> memory_dump_manager_;
+  const raw_ptr<base::trace_event::MemoryDumpManager, DanglingUntriaged>
+      memory_dump_manager_;
   const raw_ptr<base::trace_event::TraceLog> trace_log_;
   std::unique_ptr<base::trace_event::TraceConfig::MemoryDumpConfig>
       memory_dump_config_;
diff --git a/services/tracing/perfetto/test_utils.h b/services/tracing/perfetto/test_utils.h
index 0406b5a..b732d09 100644
--- a/services/tracing/perfetto/test_utils.h
+++ b/services/tracing/perfetto/test_utils.h
@@ -59,7 +59,7 @@
   TestDataSource(const std::string& data_source_name, size_t send_packet_count);
 
   size_t send_packet_count_;
-  raw_ptr<tracing::PerfettoProducer> producer_ = nullptr;
+  raw_ptr<tracing::PerfettoProducer, DanglingUntriaged> producer_ = nullptr;
   perfetto::DataSourceConfig config_;
   base::OnceClosure start_tracing_callback_ = base::OnceClosure();
 };
diff --git a/services/tracing/public/cpp/perfetto/perfetto_producer.h b/services/tracing/public/cpp/perfetto/perfetto_producer.h
index c631188..89790bef 100644
--- a/services/tracing/public/cpp/perfetto/perfetto_producer.h
+++ b/services/tracing/public/cpp/perfetto/perfetto_producer.h
@@ -153,7 +153,8 @@
   // subprocess to start tracing after it connects).
   base::TimeDelta startup_tracing_timeout_ = base::Seconds(60);
 
-  const raw_ptr<base::tracing::PerfettoTaskRunner> task_runner_;
+  const raw_ptr<base::tracing::PerfettoTaskRunner, DanglingUntriaged>
+      task_runner_;
 
   std::atomic<bool> startup_tracing_active_{false};
 
diff --git a/services/tracing/public/cpp/perfetto/perfetto_traced_process.h b/services/tracing/public/cpp/perfetto/perfetto_traced_process.h
index eb776820..5c643f6b 100644
--- a/services/tracing/public/cpp/perfetto/perfetto_traced_process.h
+++ b/services/tracing/public/cpp/perfetto/perfetto_traced_process.h
@@ -123,7 +123,7 @@
    private:
     uint64_t data_source_id_ = 0;
     std::string name_;
-    raw_ptr<PerfettoProducer> producer_ = nullptr;
+    raw_ptr<PerfettoProducer, DanglingUntriaged> producer_ = nullptr;
   };
 
 #if BUILDFLAG(USE_PERFETTO_CLIENT_LIBRARY)
diff --git a/services/video_capture/device_media_to_mojo_adapter_unittest.cc b/services/video_capture/device_media_to_mojo_adapter_unittest.cc
index f5c041c..740dc262 100644
--- a/services/video_capture/device_media_to_mojo_adapter_unittest.cc
+++ b/services/video_capture/device_media_to_mojo_adapter_unittest.cc
@@ -53,7 +53,7 @@
   }
 
  protected:
-  raw_ptr<media::MockDevice> mock_device_ptr_;
+  raw_ptr<media::MockDevice, DanglingUntriaged> mock_device_ptr_;
   std::unique_ptr<DeviceMediaToMojoAdapter> adapter_;
   std::unique_ptr<MockVideoFrameHandler> mock_video_frame_handler_;
   mojo::PendingRemote<mojom::VideoFrameHandler> video_frame_handler_;
diff --git a/services/video_capture/test/mock_video_capture_device_shared_access_unittest.cc b/services/video_capture/test/mock_video_capture_device_shared_access_unittest.cc
index b97540f..55fadc6 100644
--- a/services/video_capture/test/mock_video_capture_device_shared_access_unittest.cc
+++ b/services/video_capture/test/mock_video_capture_device_shared_access_unittest.cc
@@ -270,7 +270,7 @@
  protected:
   base::test::TaskEnvironment task_environment_;
   media::MockDevice mock_device_;
-  raw_ptr<media::MockDeviceFactory> mock_device_factory_;
+  raw_ptr<media::MockDeviceFactory, DanglingUntriaged> mock_device_factory_;
   std::unique_ptr<DeviceFactoryImpl> service_device_factory_;
   std::unique_ptr<VideoSourceProviderImpl> source_provider_;
   mojo::Remote<mojom::VideoSource> source_remote_1_;
diff --git a/services/video_capture/test/mock_video_capture_device_test.h b/services/video_capture/test/mock_video_capture_device_test.h
index 8500849..05a59b6 100644
--- a/services/video_capture/test/mock_video_capture_device_test.h
+++ b/services/video_capture/test/mock_video_capture_device_test.h
@@ -37,7 +37,7 @@
   void SetUp() override;
 
  protected:
-  raw_ptr<media::MockDeviceFactory> mock_device_factory_;
+  raw_ptr<media::MockDeviceFactory, DanglingUntriaged> mock_device_factory_;
   std::unique_ptr<DeviceFactoryImpl> mock_device_factory_adapter_;
 
   base::MockCallback<DeviceFactory::GetDeviceInfosCallback>
diff --git a/services/video_capture/video_source_impl.h b/services/video_capture/video_source_impl.h
index 3762c8e..3e8c963 100644
--- a/services/video_capture/video_source_impl.h
+++ b/services/video_capture/video_source_impl.h
@@ -71,7 +71,7 @@
   void StopDeviceAsynchronously();
   void OnStopDeviceComplete();
 
-  const raw_ptr<DeviceFactory> device_factory_;
+  const raw_ptr<DeviceFactory, DanglingUntriaged> device_factory_;
   const std::string device_id_;
   mojo::ReceiverSet<mojom::VideoSource> receivers_;
   base::RepeatingClosure on_last_binding_closed_cb_;
diff --git a/services/video_capture/video_source_provider_impl.h b/services/video_capture/video_source_provider_impl.h
index 69ab60b0..b6593d6 100644
--- a/services/video_capture/video_source_provider_impl.h
+++ b/services/video_capture/video_source_provider_impl.h
@@ -55,7 +55,7 @@
   void OnClientDisconnectedOrClosed();
   void OnVideoSourceLastClientDisconnected(const std::string& device_id);
 
-  const raw_ptr<DeviceFactory> device_factory_;
+  const raw_ptr<DeviceFactory, DanglingUntriaged> device_factory_;
   base::RepeatingClosure on_last_client_disconnected_cb_;
   int client_count_ = 0;
   int closed_but_not_yet_disconnected_client_count_ = 0;
diff --git a/sql/meta_table.h b/sql/meta_table.h
index f0cbb84..72b0e39 100644
--- a/sql/meta_table.h
+++ b/sql/meta_table.h
@@ -126,7 +126,7 @@
   bool DeleteKey(base::StringPiece key);
 
  private:
-  raw_ptr<Database> db_ = nullptr;
+  raw_ptr<Database, DanglingUntriaged> db_ = nullptr;
 };
 
 }  // namespace sql
diff --git a/storage/browser/file_system/file_system_operation_runner.h b/storage/browser/file_system/file_system_operation_runner.h
index 1cb7a0b..982dcf0 100644
--- a/storage/browser/file_system/file_system_operation_runner.h
+++ b/storage/browser/file_system/file_system_operation_runner.h
@@ -304,7 +304,7 @@
   void FinishOperation(OperationID id);
 
   // Not owned; whatever owns this has to make sure context outlives this.
-  raw_ptr<FileSystemContext> file_system_context_;
+  raw_ptr<FileSystemContext, DanglingUntriaged> file_system_context_;
 
   using Operations =
       std::map<OperationID, std::unique_ptr<FileSystemOperation>>;
diff --git a/storage/browser/file_system/obfuscated_file_util.cc b/storage/browser/file_system/obfuscated_file_util.cc
index 543bb9b..ca9403b 100644
--- a/storage/browser/file_system/obfuscated_file_util.cc
+++ b/storage/browser/file_system/obfuscated_file_util.cc
@@ -232,7 +232,7 @@
   }
 
   raw_ptr<SandboxDirectoryDatabase> db_;
-  raw_ptr<FileSystemOperationContext> context_;
+  raw_ptr<FileSystemOperationContext, DanglingUntriaged> context_;
   raw_ptr<ObfuscatedFileUtil> obfuscated_file_util_;
   FileSystemURL root_url_;
   bool recursive_;
diff --git a/storage/browser/file_system/sandbox_file_system_backend.h b/storage/browser/file_system/sandbox_file_system_backend.h
index 1bf1253..644246c 100644
--- a/storage/browser/file_system/sandbox_file_system_backend.h
+++ b/storage/browser/file_system/sandbox_file_system_backend.h
@@ -80,7 +80,8 @@
   CreateStorageKeyEnumerator();
 
  private:
-  raw_ptr<SandboxFileSystemBackendDelegate> delegate_;  // Not owned.
+  raw_ptr<SandboxFileSystemBackendDelegate, DanglingUntriaged>
+      delegate_;  // Not owned.
 };
 
 }  // namespace storage
diff --git a/storage/browser/quota/quota_manager_proxy.h b/storage/browser/quota/quota_manager_proxy.h
index e8b6f88..fbb0eba 100644
--- a/storage/browser/quota/quota_manager_proxy.h
+++ b/storage/browser/quota/quota_manager_proxy.h
@@ -291,7 +291,7 @@
   //    constructed. This is because the easiest way to ensure that
   //    QuotaManagerImpl exposes its QuotaManagerProxy in a thread-safe manner
   //    is to have the QuotaManagerImpl's QuotaManagerProxy reference be const.
-  raw_ptr<QuotaManagerImpl> quota_manager_impl_
+  raw_ptr<QuotaManagerImpl, DanglingUntriaged> quota_manager_impl_
       GUARDED_BY_CONTEXT(quota_manager_impl_sequence_checker_);
 
   // TaskRunner that accesses QuotaManagerImpl's sequence.
diff --git a/storage/browser/test/mock_quota_manager_proxy.h b/storage/browser/test/mock_quota_manager_proxy.h
index 8100e6a2..46b92b02 100644
--- a/storage/browser/test/mock_quota_manager_proxy.h
+++ b/storage/browser/test/mock_quota_manager_proxy.h
@@ -125,7 +125,7 @@
   ~MockQuotaManagerProxy() override;
 
  private:
-  const raw_ptr<MockQuotaManager> mock_quota_manager_;
+  const raw_ptr<MockQuotaManager, DanglingUntriaged> mock_quota_manager_;
 
   blink::StorageKey last_notified_storage_key_;
   blink::mojom::StorageType last_notified_type_ =
diff --git a/storage/browser/test/sandbox_file_system_test_helper.h b/storage/browser/test/sandbox_file_system_test_helper.h
index 392ac65c..e12b66b 100644
--- a/storage/browser/test/sandbox_file_system_test_helper.h
+++ b/storage/browser/test/sandbox_file_system_test_helper.h
@@ -113,7 +113,7 @@
 
   blink::StorageKey storage_key_;
   const FileSystemType type_;
-  raw_ptr<FileSystemFileUtil> file_util_;
+  raw_ptr<FileSystemFileUtil, DanglingUntriaged> file_util_;
 };
 
 }  // namespace storage
diff --git a/third_party/blink/public/platform/scheduler/web_scoped_virtual_time_pauser.h b/third_party/blink/public/platform/scheduler/web_scoped_virtual_time_pauser.h
index 0e64615b..09fc561 100644
--- a/third_party/blink/public/platform/scheduler/web_scoped_virtual_time_pauser.h
+++ b/third_party/blink/public/platform/scheduler/web_scoped_virtual_time_pauser.h
@@ -63,7 +63,8 @@
   bool paused_ = false;
   bool virtual_time_enabled_when_paused_ = false;
   VirtualTaskDuration duration_ = VirtualTaskDuration::kInstant;
-  raw_ptr<scheduler::ThreadSchedulerBase> scheduler_;  // NOT OWNED
+  raw_ptr<scheduler::ThreadSchedulerBase, DanglingUntriaged>
+      scheduler_;  // NOT OWNED
   WebString debug_name_;
   intptr_t trace_id_;
 };
diff --git a/ui/aura/env.h b/ui/aura/env.h
index e4fb170..df3cf69be 100644
--- a/ui/aura/env.h
+++ b/ui/aura/env.h
@@ -205,7 +205,7 @@
   std::unique_ptr<InputStateLookup> input_state_lookup_;
   std::unique_ptr<ui::PlatformEventSource> event_source_;
 
-  raw_ptr<ui::ContextFactory> context_factory_ = nullptr;
+  raw_ptr<ui::ContextFactory, DanglingUntriaged> context_factory_ = nullptr;
 
   static bool initial_throttle_input_on_resize_;
   bool throttle_input_on_resize_ = initial_throttle_input_on_resize_;
diff --git a/ui/aura/gestures/gesture_recognizer_unittest.cc b/ui/aura/gestures/gesture_recognizer_unittest.cc
index 1babd5e..d33e6e0f 100644
--- a/ui/aura/gestures/gesture_recognizer_unittest.cc
+++ b/ui/aura/gestures/gesture_recognizer_unittest.cc
@@ -398,7 +398,7 @@
         false /* is_source_touch_event_set_blocking */);
   }
 
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
   raw_ptr<WindowEventDispatcher> dispatcher_;
   AckState synchronous_ack_for_next_event_;
   std::list<uint32_t> sent_events_ids_;
diff --git a/ui/aura/test/window_test_api.h b/ui/aura/test/window_test_api.h
index b0c1b60..9b04806 100644
--- a/ui/aura/test/window_test_api.h
+++ b/ui/aura/test/window_test_api.h
@@ -27,7 +27,7 @@
   void SetOcclusionState(aura::Window::OcclusionState state);
 
  private:
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
 };
 
 }  // namespace test
diff --git a/ui/aura/window_event_dispatcher_unittest.cc b/ui/aura/window_event_dispatcher_unittest.cc
index a0f1dc5..7eb58843 100644
--- a/ui/aura/window_event_dispatcher_unittest.cc
+++ b/ui/aura/window_event_dispatcher_unittest.cc
@@ -1510,7 +1510,7 @@
     got_event_ = true;
   }
 
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
   bool delete_during_handle_;
   bool got_event_;
 };
@@ -1838,7 +1838,7 @@
 
   // Closure that is run prior to |object_to_delete_| being deleted.
   base::OnceClosure delete_closure_;
-  raw_ptr<T> object_to_delete_;
+  raw_ptr<T, DanglingUntriaged> object_to_delete_;
 };
 
 // Tests that RootWindow drops mouse-moved event that is supposed to be sent to
@@ -2073,7 +2073,7 @@
   void OnWindowDestroyed(Window* window) override { got_destroy_ = true; }
 
  private:
-  raw_ptr<WindowTreeHost> host_;
+  raw_ptr<WindowTreeHost, DanglingUntriaged> host_;
   bool got_mouse_event_;
   bool got_destroy_;
 };
@@ -2991,7 +2991,7 @@
   }
 
   raw_ptr<WindowEventDispatcher> dispatcher_;
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
 };
 
 // Tests that gesture events dispatched through the asynchronous flow have
@@ -3250,7 +3250,7 @@
     }
 
    private:
-    raw_ptr<aura::Window> focused_;
+    raw_ptr<aura::Window, DanglingUntriaged> focused_;
   };
   Handler mouse_handler(focused);
   mouse_target->AddPostTargetHandler(&mouse_handler);
diff --git a/ui/aura/window_observer.h b/ui/aura/window_observer.h
index 056f45b..03266102 100644
--- a/ui/aura/window_observer.h
+++ b/ui/aura/window_observer.h
@@ -27,11 +27,13 @@
       HIERARCHY_CHANGED
     };
 
-    raw_ptr<Window> target;  // The window that was added or removed.
-    raw_ptr<Window> new_parent;
-    raw_ptr<Window> old_parent;
+    raw_ptr<Window, DanglingUntriaged>
+        target;  // The window that was added or removed.
+    raw_ptr<Window, DanglingUntriaged> new_parent;
+    raw_ptr<Window, DanglingUntriaged> old_parent;
     HierarchyChangePhase phase;
-    raw_ptr<Window> receiver;  // The window receiving the notification.
+    raw_ptr<Window, DanglingUntriaged>
+        receiver;  // The window receiving the notification.
   };
 
   WindowObserver();
diff --git a/ui/aura/window_occlusion_change_builder_unittest.cc b/ui/aura/window_occlusion_change_builder_unittest.cc
index bda74b63..7b184bd3 100644
--- a/ui/aura/window_occlusion_change_builder_unittest.cc
+++ b/ui/aura/window_occlusion_change_builder_unittest.cc
@@ -45,7 +45,7 @@
     last_occluded_region_ = window_->occluded_region_in_root();
   }
 
-  raw_ptr<Window> window_ = nullptr;
+  raw_ptr<Window, DanglingUntriaged> window_ = nullptr;
   int occlusion_change_count_ = 0;
   Window::OcclusionState last_occlusion_state_ =
       Window::OcclusionState::UNKNOWN;
diff --git a/ui/aura/window_occlusion_tracker_unittest.cc b/ui/aura/window_occlusion_tracker_unittest.cc
index 5fcae75..89889b3 100644
--- a/ui/aura/window_occlusion_tracker_unittest.cc
+++ b/ui/aura/window_occlusion_tracker_unittest.cc
@@ -1436,7 +1436,7 @@
       ui::LayerAnimationSequence* sequence) override {}
 
  private:
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
 };
 
 }  // namespace
@@ -1593,7 +1593,7 @@
   }
 
  private:
-  raw_ptr<Window> other_window_;
+  raw_ptr<Window, DanglingUntriaged> other_window_;
 };
 
 class WindowDelegateWithQueuedExpectation : public MockWindowDelegate {
@@ -1693,7 +1693,7 @@
   }
 
  private:
-  raw_ptr<Window> other_window_ = nullptr;
+  raw_ptr<Window, DanglingUntriaged> other_window_ = nullptr;
 };
 
 }  // namespace
@@ -1963,7 +1963,7 @@
   }
 
  private:
-  raw_ptr<Window> window_to_update_ = nullptr;
+  raw_ptr<Window, DanglingUntriaged> window_to_update_ = nullptr;
 };
 
 class WindowDelegateAddingAndHidingChild : public MockWindowDelegate {
diff --git a/ui/aura/window_unittest.cc b/ui/aura/window_unittest.cc
index 057deb3..c0db606 100644
--- a/ui/aura/window_unittest.cc
+++ b/ui/aura/window_unittest.cc
@@ -293,7 +293,7 @@
   }
 
  private:
-  raw_ptr<Window> window_;
+  raw_ptr<Window, DanglingUntriaged> window_;
 };
 
 // Used in verifying mouse capture.
@@ -1979,7 +1979,7 @@
 
   struct WindowBoundsInfo {
     int changed_count = 0;
-    raw_ptr<Window> window = nullptr;
+    raw_ptr<Window, DanglingUntriaged> window = nullptr;
     gfx::Rect old_bounds;
     gfx::Rect new_bounds;
     ui::PropertyChangeReason reason =
@@ -1988,27 +1988,27 @@
 
   struct WindowOpacityInfo {
     int changed_count = 0;
-    raw_ptr<Window> window = nullptr;
+    raw_ptr<Window, DanglingUntriaged> window = nullptr;
     ui::PropertyChangeReason reason =
         ui::PropertyChangeReason::NOT_FROM_ANIMATION;
   };
 
   struct WindowTargetTransformChangingInfo {
     int changed_count = 0;
-    raw_ptr<Window> window = nullptr;
+    raw_ptr<Window, DanglingUntriaged> window = nullptr;
     gfx::Transform new_transform;
   };
 
   struct WindowTransformedInfo {
     int changed_count = 0;
-    raw_ptr<Window> window = nullptr;
+    raw_ptr<Window, DanglingUntriaged> window = nullptr;
     ui::PropertyChangeReason reason =
         ui::PropertyChangeReason::NOT_FROM_ANIMATION;
   };
 
   struct CountAndWindow {
     int count = 0;
-    raw_ptr<Window> window = nullptr;
+    raw_ptr<Window, DanglingUntriaged> window = nullptr;
   };
 
   WindowObserverTest() = default;
@@ -3006,8 +3006,8 @@
   }
 
  private:
-  raw_ptr<Window> to_observe_;
-  raw_ptr<Window> to_delete_;
+  raw_ptr<Window, DanglingUntriaged> to_observe_;
+  raw_ptr<Window, DanglingUntriaged> to_delete_;
 };
 
 TEST_F(WindowTest, DeleteParentWindowFromOnWindowVisibiltyChanged) {
diff --git a/ui/base/ime/linux/input_method_auralinux_unittest.cc b/ui/base/ime/linux/input_method_auralinux_unittest.cc
index e04caf60..97945ebf29 100644
--- a/ui/base/ime/linux/input_method_auralinux_unittest.cc
+++ b/ui/base/ime/linux/input_method_auralinux_unittest.cc
@@ -201,8 +201,8 @@
   uint32_t input_flags_;
   bool should_do_learning_;
   bool can_compose_inline_;
-  raw_ptr<TextInputClient> old_client_ = nullptr;
-  raw_ptr<TextInputClient> new_client_ = nullptr;
+  raw_ptr<TextInputClient, DanglingUntriaged> old_client_ = nullptr;
+  raw_ptr<TextInputClient, DanglingUntriaged> new_client_ = nullptr;
 };
 
 class InputMethodDelegateForTesting : public ImeKeyEventDispatcher {
diff --git a/ui/compositor/animation_throughput_reporter.cc b/ui/compositor/animation_throughput_reporter.cc
index 3aa4fe5e..5a996bed 100644
--- a/ui/compositor/animation_throughput_reporter.cc
+++ b/ui/compositor/animation_throughput_reporter.cc
@@ -134,7 +134,7 @@
   // Whether this class should delete itself on animation ended.
   bool should_delete_ = false;
 
-  const raw_ptr<LayerAnimator> animator_;
+  const raw_ptr<LayerAnimator, DanglingUntriaged> animator_;
 
   absl::optional<ThroughputTracker> throughput_tracker_;
 
diff --git a/ui/compositor/callback_layer_animation_observer_unittest.cc b/ui/compositor/callback_layer_animation_observer_unittest.cc
index 1fd83ce7..08511a2 100644
--- a/ui/compositor/callback_layer_animation_observer_unittest.cc
+++ b/ui/compositor/callback_layer_animation_observer_unittest.cc
@@ -126,11 +126,11 @@
 
  private:
   // The observer to delete, if non-NULL, in AnimationsStarted().
-  raw_ptr<CallbackLayerAnimationObserver>
+  raw_ptr<CallbackLayerAnimationObserver, DanglingUntriaged>
       observer_to_delete_in_animation_started_ = nullptr;
 
   // The observer to delete, if non-NULL, in AnimationsEnded().
-  raw_ptr<CallbackLayerAnimationObserver>
+  raw_ptr<CallbackLayerAnimationObserver, DanglingUntriaged>
       observer_to_delete_in_animation_ended_ = nullptr;
 };
 
diff --git a/ui/compositor/compositor_unittest.cc b/ui/compositor/compositor_unittest.cc
index 7e14f31..72b9d16 100644
--- a/ui/compositor/compositor_unittest.cc
+++ b/ui/compositor/compositor_unittest.cc
@@ -506,7 +506,7 @@
                                   float new_device_scale_factor) override {}
 
  private:
-  raw_ptr<Layer> parent_;
+  raw_ptr<Layer, DanglingUntriaged> parent_;
   std::vector<std::unique_ptr<Layer>> added_layers_;
   bool update_visual_state_called_ = false;
 };
diff --git a/ui/compositor/layer_unittest.cc b/ui/compositor/layer_unittest.cc
index 641aae1..7e0e0a4 100644
--- a/ui/compositor/layer_unittest.cc
+++ b/ui/compositor/layer_unittest.cc
@@ -2171,7 +2171,7 @@
                                   float new_device_scale_factor) override {}
 
   int paint_count_;
-  raw_ptr<Layer> layer_;
+  raw_ptr<Layer, DanglingUntriaged> layer_;
   gfx::Rect schedule_paint_rect_;
   gfx::Rect last_clip_rect_;
 };
diff --git a/ui/compositor/test/layer_animation_observer_test_api.h b/ui/compositor/test/layer_animation_observer_test_api.h
index 9c12969c..d5d0635 100644
--- a/ui/compositor/test/layer_animation_observer_test_api.h
+++ b/ui/compositor/test/layer_animation_observer_test_api.h
@@ -27,7 +27,7 @@
 
  private:
   // The instance to provide internal access to.
-  raw_ptr<LayerAnimationObserver> observer_;
+  raw_ptr<LayerAnimationObserver, DanglingUntriaged> observer_;
 };
 
 }  // namespace test
diff --git a/ui/compositor/test/test_layer_animation_observer.h b/ui/compositor/test/test_layer_animation_observer.h
index e593c2c..e404702 100644
--- a/ui/compositor/test/test_layer_animation_observer.h
+++ b/ui/compositor/test/test_layer_animation_observer.h
@@ -115,25 +115,30 @@
  private:
   int next_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_attached_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged>
+      last_attached_sequence_;
   int last_attached_sequence_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_scheduled_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged>
+      last_scheduled_sequence_;
   int last_scheduled_sequence_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_started_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged>
+      last_started_sequence_;
   int last_started_sequence_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_aborted_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged>
+      last_aborted_sequence_;
   int last_aborted_sequence_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_ended_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged> last_ended_sequence_;
   int last_ended_sequence_epoch_;
 
   raw_ptr<const LayerAnimationSequence> last_repetition_ended_sequence_;
   int last_repetition_ended_sequence_epoch_;
 
-  raw_ptr<const LayerAnimationSequence> last_detached_sequence_;
+  raw_ptr<const LayerAnimationSequence, DanglingUntriaged>
+      last_detached_sequence_;
   int last_detached_sequence_epoch_;
 
   bool requires_notification_when_animator_destroyed_;
diff --git a/ui/events/event_target.h b/ui/events/event_target.h
index 4ad0940..1027691 100644
--- a/ui/events/event_target.h
+++ b/ui/events/event_target.h
@@ -137,7 +137,7 @@
 
   EventHandlerPriorityList pre_target_list_;
   EventHandlerList post_target_list_;
-  raw_ptr<EventHandler> target_handler_ = nullptr;
+  raw_ptr<EventHandler, DanglingUntriaged> target_handler_ = nullptr;
 };
 
 }  // namespace ui
diff --git a/ui/events/gestures/gesture_provider_aura.h b/ui/events/gestures/gesture_provider_aura.h
index 20363f1..d6ceb4b 100644
--- a/ui/events/gestures/gesture_provider_aura.h
+++ b/ui/events/gestures/gesture_provider_aura.h
@@ -79,7 +79,7 @@
   std::vector<std::unique_ptr<GestureEvent>> pending_gestures_;
 
   // |gesture_consumer_| must outlive this object.
-  raw_ptr<GestureConsumer> gesture_consumer_;
+  raw_ptr<GestureConsumer, DanglingUntriaged> gesture_consumer_;
 };
 
 }  // namespace ui
diff --git a/ui/gfx/animation/animation_test_api.h b/ui/gfx/animation/animation_test_api.h
index fbba6b68..756ac6d 100644
--- a/ui/gfx/animation/animation_test_api.h
+++ b/ui/gfx/animation/animation_test_api.h
@@ -53,7 +53,7 @@
   void IncrementTime(base::TimeDelta delta);
 
  private:
-  raw_ptr<AnimationContainer> container_;
+  raw_ptr<AnimationContainer, DanglingUntriaged> container_;
 };
 
 }  // namespace gfx
diff --git a/ui/message_center/views/notification_control_buttons_unittest.cc b/ui/message_center/views/notification_control_buttons_unittest.cc
index 4932f66..3841eb4f 100644
--- a/ui/message_center/views/notification_control_buttons_unittest.cc
+++ b/ui/message_center/views/notification_control_buttons_unittest.cc
@@ -37,7 +37,8 @@
   }
 
  private:
-  raw_ptr<NotificationControlButtonsView> buttons_view_ = nullptr;
+  raw_ptr<NotificationControlButtonsView, DanglingUntriaged> buttons_view_ =
+      nullptr;
 };
 
 }  // namespace
diff --git a/ui/message_center/views/notification_control_buttons_view.h b/ui/message_center/views/notification_control_buttons_view.h
index 413ff78..68e7b02 100644
--- a/ui/message_center/views/notification_control_buttons_view.h
+++ b/ui/message_center/views/notification_control_buttons_view.h
@@ -78,7 +78,7 @@
 
   raw_ptr<views::ImageButton, DanglingUntriaged> close_button_ = nullptr;
   raw_ptr<views::ImageButton, DanglingUntriaged> settings_button_ = nullptr;
-  raw_ptr<views::ImageButton> snooze_button_ = nullptr;
+  raw_ptr<views::ImageButton, DanglingUntriaged> snooze_button_ = nullptr;
 
   // The color used for the close, settings, and snooze icons.
   absl::optional<SkColor> icon_color_;
diff --git a/ui/message_center/views/notification_header_view_unittest.cc b/ui/message_center/views/notification_header_view_unittest.cc
index 92827602..035a6d57 100644
--- a/ui/message_center/views/notification_header_view_unittest.cc
+++ b/ui/message_center/views/notification_header_view_unittest.cc
@@ -83,7 +83,8 @@
   }
 
  protected:
-  raw_ptr<NotificationHeaderView> notification_header_view_ = nullptr;
+  raw_ptr<NotificationHeaderView, DanglingUntriaged> notification_header_view_ =
+      nullptr;
 
  private:
   views::Widget widget_;
diff --git a/ui/message_center/views/notification_view.h b/ui/message_center/views/notification_view.h
index 54d849e27..98c4207 100644
--- a/ui/message_center/views/notification_view.h
+++ b/ui/message_center/views/notification_view.h
@@ -72,7 +72,7 @@
   void HeaderRowPressed();
 
   // Notification title, which is dynamically created inside view hierarchy.
-  raw_ptr<views::Label> title_view_ = nullptr;
+  raw_ptr<views::Label, DanglingUntriaged> title_view_ = nullptr;
 
   // Views for inline settings.
   raw_ptr<views::RadioButton> block_all_button_ = nullptr;
diff --git a/ui/message_center/views/notification_view_base.h b/ui/message_center/views/notification_view_base.h
index 474aa41de..6155627 100644
--- a/ui/message_center/views/notification_view_base.h
+++ b/ui/message_center/views/notification_view_base.h
@@ -382,7 +382,8 @@
   std::vector<views::LabelButton*> action_buttons_;
   std::vector<views::View*> item_views_;
   raw_ptr<views::ProgressBar, DanglingUntriaged> progress_bar_view_ = nullptr;
-  raw_ptr<CompactTitleMessageView> compact_title_message_view_ = nullptr;
+  raw_ptr<CompactTitleMessageView, DanglingUntriaged>
+      compact_title_message_view_ = nullptr;
   raw_ptr<views::View> action_buttons_row_ = nullptr;
   raw_ptr<NotificationInputContainer> inline_reply_ = nullptr;
 
diff --git a/ui/message_center/views/notification_view_unittest.cc b/ui/message_center/views/notification_view_unittest.cc
index e7a15d5..843dcc2 100644
--- a/ui/message_center/views/notification_view_unittest.cc
+++ b/ui/message_center/views/notification_view_unittest.cc
@@ -294,7 +294,7 @@
     ink_drop_stopped_ = true;
   }
 
-  raw_ptr<NotificationView> notification_view_ = nullptr;
+  raw_ptr<NotificationView, DanglingUntriaged> notification_view_ = nullptr;
   bool delete_on_notification_removed_ = false;
   bool ink_drop_stopped_ = false;
   std::unique_ptr<base::test::ScopedFeatureList> scoped_feature_list_;
diff --git a/ui/ozone/platform/wayland/gpu/wayland_surface_factory.cc b/ui/ozone/platform/wayland/gpu/wayland_surface_factory.cc
index c4b88ae..030b7c2 100644
--- a/ui/ozone/platform/wayland/gpu/wayland_surface_factory.cc
+++ b/ui/ozone/platform/wayland/gpu/wayland_surface_factory.cc
@@ -80,8 +80,8 @@
   bool LoadGLES2Bindings(const gl::GLImplementationParts& impl) override;
 
  private:
-  const raw_ptr<WaylandConnection> connection_;
-  const raw_ptr<WaylandBufferManagerGpu> buffer_manager_;
+  const raw_ptr<WaylandConnection, DanglingUntriaged> connection_;
+  const raw_ptr<WaylandBufferManagerGpu, DanglingUntriaged> buffer_manager_;
 };
 
 bool GLOzoneEGLWayland::CanImportNativePixmap() {
diff --git a/ui/ozone/platform/wayland/gpu/wayland_surface_factory.h b/ui/ozone/platform/wayland/gpu/wayland_surface_factory.h
index 43f9a17..edadfc46 100644
--- a/ui/ozone/platform/wayland/gpu/wayland_surface_factory.h
+++ b/ui/ozone/platform/wayland/gpu/wayland_surface_factory.h
@@ -66,8 +66,8 @@
       const override;
 
  private:
-  const raw_ptr<WaylandConnection> connection_;
-  const raw_ptr<WaylandBufferManagerGpu> buffer_manager_;
+  const raw_ptr<WaylandConnection, DanglingUntriaged> connection_;
+  const raw_ptr<WaylandBufferManagerGpu, DanglingUntriaged> buffer_manager_;
   std::unique_ptr<GLOzone> egl_implementation_;
 };
 
diff --git a/ui/ozone/platform/wayland/host/wayland_cursor.h b/ui/ozone/platform/wayland/host/wayland_cursor.h
index 29caba6..83087884 100644
--- a/ui/ozone/platform/wayland/host/wayland_cursor.h
+++ b/ui/ozone/platform/wayland/host/wayland_cursor.h
@@ -89,7 +89,7 @@
                        uint32_t hotspot_x_dip,
                        uint32_t hotspot_y_dip);
 
-  const raw_ptr<WaylandPointer> pointer_;
+  const raw_ptr<WaylandPointer, DanglingUntriaged> pointer_;
   const raw_ptr<WaylandConnection> connection_;
   const wl::Object<wl_surface> pointer_surface_;
 
diff --git a/ui/ozone/platform/wayland/host/wayland_data_device.h b/ui/ozone/platform/wayland/host/wayland_data_device.h
index f3f52b64..04d8c351 100644
--- a/ui/ozone/platform/wayland/host/wayland_data_device.h
+++ b/ui/ozone/platform/wayland/host/wayland_data_device.h
@@ -128,7 +128,7 @@
   // The wl_data_device wrapped by this WaylandDataDevice.
   wl::Object<wl_data_device> data_device_;
 
-  raw_ptr<DragDelegate> drag_delegate_ = nullptr;
+  raw_ptr<DragDelegate, DanglingUntriaged> drag_delegate_ = nullptr;
 
   // There are two separate data offers at a time, the drag offer and the
   // selection offer, each with independent lifetimes. When we receive a new
diff --git a/ui/ozone/platform/wayland/host/wayland_data_drag_controller.h b/ui/ozone/platform/wayland/host/wayland_data_drag_controller.h
index 263c4a5..c1e6dfd 100644
--- a/ui/ozone/platform/wayland/host/wayland_data_drag_controller.h
+++ b/ui/ozone/platform/wayland/host/wayland_data_drag_controller.h
@@ -217,7 +217,7 @@
   raw_ptr<WaylandWindow> origin_window_ = nullptr;
 
   // Current window under pointer.
-  raw_ptr<WaylandWindow> window_ = nullptr;
+  raw_ptr<WaylandWindow, DanglingUntriaged> window_ = nullptr;
 
   // The most recent location received while dragging the data.
   gfx::PointF last_drag_location_;
diff --git a/ui/ozone/platform/wayland/host/wayland_window_drag_controller.h b/ui/ozone/platform/wayland/host/wayland_window_drag_controller.h
index f629a62..28bbcb6 100644
--- a/ui/ozone/platform/wayland/host/wayland_window_drag_controller.h
+++ b/ui/ozone/platform/wayland/host/wayland_window_drag_controller.h
@@ -200,7 +200,7 @@
   // pointer focus when the session was initiated.
   raw_ptr<WaylandWindow> origin_window_ = nullptr;
 
-  raw_ptr<WaylandWindow> drag_target_window_ = nullptr;
+  raw_ptr<WaylandWindow, DanglingUntriaged> drag_target_window_ = nullptr;
 
   // The |origin_window_| can be destroyed during the DND session. If this
   // happens, |origin_surface_| takes ownership of its surface and ensure it
diff --git a/ui/ozone/platform/wayland/host/wayland_window_manager.h b/ui/ozone/platform/wayland/host/wayland_window_manager.h
index 08f45404..7c99452 100644
--- a/ui/ozone/platform/wayland/host/wayland_window_manager.h
+++ b/ui/ozone/platform/wayland/host/wayland_window_manager.h
@@ -129,7 +129,7 @@
   // well. See crbug.com/1324548.
   std::unique_ptr<WaylandSubsurface> subsurface_recycle_cache_;
 
-  raw_ptr<WaylandWindow> located_events_grabber_ = nullptr;
+  raw_ptr<WaylandWindow, DanglingUntriaged> located_events_grabber_ = nullptr;
 
   // Stores strictly monotonically increasing counter for allocating unique
   // AccelerateWidgets.
diff --git a/ui/ozone/platform/wayland/test/mock_pointer.h b/ui/ozone/platform/wayland/test/mock_pointer.h
index 309962b..6f00f1ce 100644
--- a/ui/ozone/platform/wayland/test/mock_pointer.h
+++ b/ui/ozone/platform/wayland/test/mock_pointer.h
@@ -39,7 +39,7 @@
   TestZcrPointerStylus* pointer_stylus() const { return pointer_stylus_; }
 
  private:
-  raw_ptr<TestZcrPointerStylus> pointer_stylus_ = nullptr;
+  raw_ptr<TestZcrPointerStylus, DanglingUntriaged> pointer_stylus_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/mock_surface.h b/ui/ozone/platform/wayland/test/mock_surface.h
index 7a11c6e..a1da17b4 100644
--- a/ui/ozone/platform/wayland/test/mock_surface.h
+++ b/ui/ozone/platform/wayland/test/mock_surface.h
@@ -119,20 +119,21 @@
   void set_buffer_scale(int32_t buffer_scale) { buffer_scale_ = buffer_scale; }
 
  private:
-  raw_ptr<MockXdgSurface> xdg_surface_ = nullptr;
-  raw_ptr<TestSubSurface> sub_surface_ = nullptr;
-  raw_ptr<TestViewport> viewport_ = nullptr;
-  raw_ptr<TestAlphaBlending> blending_ = nullptr;
-  raw_ptr<TestOverlayPrioritizedSurface> prioritized_surface_ = nullptr;
-  raw_ptr<TestAugmentedSurface> augmented_surface_ = nullptr;
+  raw_ptr<MockXdgSurface, DanglingUntriaged> xdg_surface_ = nullptr;
+  raw_ptr<TestSubSurface, DanglingUntriaged> sub_surface_ = nullptr;
+  raw_ptr<TestViewport, DanglingUntriaged> viewport_ = nullptr;
+  raw_ptr<TestAlphaBlending, DanglingUntriaged> blending_ = nullptr;
+  raw_ptr<TestOverlayPrioritizedSurface, DanglingUntriaged>
+      prioritized_surface_ = nullptr;
+  raw_ptr<TestAugmentedSurface, DanglingUntriaged> augmented_surface_ = nullptr;
   gfx::Rect opaque_region_ = {-1, -1, 0, 0};
   gfx::Rect input_region_ = {-1, -1, 0, 0};
 
-  raw_ptr<wl_resource> frame_callback_ = nullptr;
+  raw_ptr<wl_resource, DanglingUntriaged> frame_callback_ = nullptr;
   base::flat_map<wl_resource*, wl_resource*> linux_buffer_releases_;
 
-  raw_ptr<wl_resource> attached_buffer_ = nullptr;
-  raw_ptr<wl_resource> prev_attached_buffer_ = nullptr;
+  raw_ptr<wl_resource, DanglingUntriaged> attached_buffer_ = nullptr;
+  raw_ptr<wl_resource, DanglingUntriaged> prev_attached_buffer_ = nullptr;
 
   int32_t buffer_scale_ = -1;
 };
diff --git a/ui/ozone/platform/wayland/test/mock_wayland_platform_window_delegate.h b/ui/ozone/platform/wayland/test/mock_wayland_platform_window_delegate.h
index 9a8feae..2514fad1 100644
--- a/ui/ozone/platform/wayland/test/mock_wayland_platform_window_delegate.h
+++ b/ui/ozone/platform/wayland/test/mock_wayland_platform_window_delegate.h
@@ -35,7 +35,7 @@
   int64_t viz_seq() const { return viz_seq_; }
 
  private:
-  raw_ptr<WaylandWindow> wayland_window_ = nullptr;
+  raw_ptr<WaylandWindow, DanglingUntriaged> wayland_window_ = nullptr;
 
   // |viz_seq_| is used to save an incrementing sequence point on each
   // call to InsertSequencePoint. Test code can check this value to know
diff --git a/ui/ozone/platform/wayland/test/mock_xdg_activation_v1.h b/ui/ozone/platform/wayland/test/mock_xdg_activation_v1.h
index b86af19..1145484 100644
--- a/ui/ozone/platform/wayland/test/mock_xdg_activation_v1.h
+++ b/ui/ozone/platform/wayland/test/mock_xdg_activation_v1.h
@@ -47,7 +47,7 @@
                void(struct wl_client* client, struct wl_resource* resource));
 
  private:
-  raw_ptr<MockXdgActivationTokenV1> token_ = nullptr;
+  raw_ptr<MockXdgActivationTokenV1, DanglingUntriaged> token_ = nullptr;
 };
 
 class MockXdgActivationTokenV1 : public ServerObject {
diff --git a/ui/ozone/platform/wayland/test/mock_xdg_surface.h b/ui/ozone/platform/wayland/test/mock_xdg_surface.h
index a8cd0b1..9b7e8ba 100644
--- a/ui/ozone/platform/wayland/test/mock_xdg_surface.h
+++ b/ui/ozone/platform/wayland/test/mock_xdg_surface.h
@@ -53,7 +53,7 @@
   // Has either toplevel role..
   std::unique_ptr<MockXdgTopLevel> xdg_toplevel_;
   // Or popup role.
-  raw_ptr<TestXdgPopup> xdg_popup_ = nullptr;
+  raw_ptr<TestXdgPopup, DanglingUntriaged> xdg_popup_ = nullptr;
 
   // MockSurface that is the ground for this xdg_surface.
   raw_ptr<wl_resource> surface_ = nullptr;
@@ -100,7 +100,7 @@
   }
 
  private:
-  raw_ptr<TestZAuraToplevel> zaura_toplevel_ = nullptr;
+  raw_ptr<TestZAuraToplevel, DanglingUntriaged> zaura_toplevel_ = nullptr;
 
   gfx::Size min_size_;
   gfx::Size max_size_;
diff --git a/ui/ozone/platform/wayland/test/test_data_device_manager.h b/ui/ozone/platform/wayland/test/test_data_device_manager.h
index bb15aa7..255bd52 100644
--- a/ui/ozone/platform/wayland/test/test_data_device_manager.h
+++ b/ui/ozone/platform/wayland/test/test_data_device_manager.h
@@ -38,8 +38,8 @@
   }
 
  private:
-  raw_ptr<TestDataDevice> data_device_ = nullptr;
-  raw_ptr<TestDataSource> data_source_ = nullptr;
+  raw_ptr<TestDataDevice, DanglingUntriaged> data_device_ = nullptr;
+  raw_ptr<TestDataSource, DanglingUntriaged> data_source_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_output.h b/ui/ozone/platform/wayland/test/test_output.h
index 6dd6066d..8dfada2 100644
--- a/ui/ozone/platform/wayland/test/test_output.h
+++ b/ui/ozone/platform/wayland/test/test_output.h
@@ -102,8 +102,8 @@
 
   TestOutputMetrics metrics_;
 
-  raw_ptr<TestZAuraOutput> aura_output_ = nullptr;
-  raw_ptr<TestZXdgOutput> xdg_output_ = nullptr;
+  raw_ptr<TestZAuraOutput, DanglingUntriaged> aura_output_ = nullptr;
+  raw_ptr<TestZXdgOutput, DanglingUntriaged> xdg_output_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_seat.h b/ui/ozone/platform/wayland/test/test_seat.h
index b0f2135e..f6f82d0 100644
--- a/ui/ozone/platform/wayland/test/test_seat.h
+++ b/ui/ozone/platform/wayland/test/test_seat.h
@@ -43,9 +43,9 @@
   TestTouch* touch() const { return touch_; }
 
  private:
-  raw_ptr<MockPointer> pointer_;
-  raw_ptr<TestKeyboard> keyboard_;
-  raw_ptr<TestTouch> touch_;
+  raw_ptr<MockPointer, DanglingUntriaged> pointer_;
+  raw_ptr<TestKeyboard, DanglingUntriaged> keyboard_;
+  raw_ptr<TestTouch, DanglingUntriaged> touch_;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_selection_device_manager.h b/ui/ozone/platform/wayland/test/test_selection_device_manager.h
index e00d7f6..8ac2a3d 100644
--- a/ui/ozone/platform/wayland/test/test_selection_device_manager.h
+++ b/ui/ozone/platform/wayland/test/test_selection_device_manager.h
@@ -79,8 +79,8 @@
 
  private:
   const std::unique_ptr<Delegate> delegate_;
-  raw_ptr<TestSelectionDevice> device_ = nullptr;
-  raw_ptr<TestSelectionSource> source_ = nullptr;
+  raw_ptr<TestSelectionDevice, DanglingUntriaged> device_ = nullptr;
+  raw_ptr<TestSelectionSource, DanglingUntriaged> source_ = nullptr;
 };
 
 class TestSelectionOffer : public ServerObject {
diff --git a/ui/ozone/platform/wayland/test/test_subsurface.h b/ui/ozone/platform/wayland/test/test_subsurface.h
index f0cef0c0..2822930 100644
--- a/ui/ozone/platform/wayland/test/test_subsurface.h
+++ b/ui/ozone/platform/wayland/test/test_subsurface.h
@@ -56,9 +56,10 @@
   raw_ptr<wl_resource> surface_ = nullptr;
 
   // Parent surface resource.
-  raw_ptr<wl_resource> parent_resource_ = nullptr;
+  raw_ptr<wl_resource, DanglingUntriaged> parent_resource_ = nullptr;
 
-  raw_ptr<TestAugmentedSubSurface> augmented_subsurface_ = nullptr;
+  raw_ptr<TestAugmentedSubSurface, DanglingUntriaged> augmented_subsurface_ =
+      nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_touch.h b/ui/ozone/platform/wayland/test/test_touch.h
index bac09c0..1f004243 100644
--- a/ui/ozone/platform/wayland/test/test_touch.h
+++ b/ui/ozone/platform/wayland/test/test_touch.h
@@ -33,7 +33,7 @@
   TestZcrTouchStylus* touch_stylus() const { return touch_stylus_; }
 
  private:
-  raw_ptr<TestZcrTouchStylus> touch_stylus_ = nullptr;
+  raw_ptr<TestZcrTouchStylus, DanglingUntriaged> touch_stylus_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_wayland_server_thread.h b/ui/ozone/platform/wayland/test/test_wayland_server_thread.h
index 71799f1e..44ae4f8 100644
--- a/ui/ozone/platform/wayland/test/test_wayland_server_thread.h
+++ b/ui/ozone/platform/wayland/test/test_wayland_server_thread.h
@@ -222,7 +222,7 @@
   TestServerListener client_destroy_listener_;
   raw_ptr<wl_client> client_ = nullptr;
   raw_ptr<wl_event_loop> event_loop_ = nullptr;
-  raw_ptr<wl_protocol_logger> protocol_logger_ = nullptr;
+  raw_ptr<wl_protocol_logger, DanglingUntriaged> protocol_logger_ = nullptr;
 
   ServerConfig config_;
 
diff --git a/ui/ozone/platform/wayland/test/test_wp_pointer_gestures.h b/ui/ozone/platform/wayland/test/test_wp_pointer_gestures.h
index 1b454e7..e559ce5 100644
--- a/ui/ozone/platform/wayland/test/test_wp_pointer_gestures.h
+++ b/ui/ozone/platform/wayland/test/test_wp_pointer_gestures.h
@@ -43,7 +43,7 @@
                               struct wl_resource* pointer);
 
  private:
-  raw_ptr<TestPinchGesture> pinch_;
+  raw_ptr<TestPinchGesture, DanglingUntriaged> pinch_;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_zcr_text_input_extension.h b/ui/ozone/platform/wayland/test/test_zcr_text_input_extension.h
index d3300518..294e38c3 100644
--- a/ui/ozone/platform/wayland/test/test_zcr_text_input_extension.h
+++ b/ui/ozone/platform/wayland/test/test_zcr_text_input_extension.h
@@ -39,7 +39,7 @@
   }
 
  private:
-  raw_ptr<MockZcrExtendedTextInput> extended_text_input_;
+  raw_ptr<MockZcrExtendedTextInput, DanglingUntriaged> extended_text_input_;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_zwp_linux_buffer_params.h b/ui/ozone/platform/wayland/test/test_zwp_linux_buffer_params.h
index 19f9115f..e76bc7d 100644
--- a/ui/ozone/platform/wayland/test/test_zwp_linux_buffer_params.h
+++ b/ui/ozone/platform/wayland/test/test_zwp_linux_buffer_params.h
@@ -75,7 +75,7 @@
 
   // A buffer resource, which is created on Create or CreateImmed call. Can be
   // null if not created/failed to be created.
-  raw_ptr<wl_resource> buffer_resource_ = nullptr;
+  raw_ptr<wl_resource, DanglingUntriaged> buffer_resource_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/ozone/platform/wayland/test/test_zwp_linux_explicit_synchronization.h b/ui/ozone/platform/wayland/test/test_zwp_linux_explicit_synchronization.h
index afb2e99a..bcf13e7d 100644
--- a/ui/ozone/platform/wayland/test/test_zwp_linux_explicit_synchronization.h
+++ b/ui/ozone/platform/wayland/test/test_zwp_linux_explicit_synchronization.h
@@ -21,7 +21,7 @@
   wl_resource* surface_resource() const { return surface_resource_; }
 
  private:
-  raw_ptr<wl_resource> surface_resource_;
+  raw_ptr<wl_resource, DanglingUntriaged> surface_resource_;
 };
 
 // Manage wl_viewporter object.
diff --git a/ui/ozone/platform/wayland/test/test_zwp_text_input_manager.h b/ui/ozone/platform/wayland/test/test_zwp_text_input_manager.h
index 9508bca8c..4214388c 100644
--- a/ui/ozone/platform/wayland/test/test_zwp_text_input_manager.h
+++ b/ui/ozone/platform/wayland/test/test_zwp_text_input_manager.h
@@ -34,7 +34,7 @@
   MockZwpTextInput* text_input() const { return text_input_; }
 
  private:
-  raw_ptr<MockZwpTextInput> text_input_ = nullptr;
+  raw_ptr<MockZwpTextInput, DanglingUntriaged> text_input_ = nullptr;
 };
 
 }  // namespace wl
diff --git a/ui/views/accessibility/ax_tree_source_views_unittest.cc b/ui/views/accessibility/ax_tree_source_views_unittest.cc
index 1cdee71..7070fec4 100644
--- a/ui/views/accessibility/ax_tree_source_views_unittest.cc
+++ b/ui/views/accessibility/ax_tree_source_views_unittest.cc
@@ -75,9 +75,12 @@
   }
 
   UniqueWidgetPtr widget_;
-  raw_ptr<Label> label1_ = nullptr;         // Owned by views hierarchy.
-  raw_ptr<Label> label2_ = nullptr;         // Owned by views hierarchy.
-  raw_ptr<Textfield> textfield_ = nullptr;  // Owned by views hierarchy.
+  raw_ptr<Label, DanglingUntriaged> label1_ =
+      nullptr;  // Owned by views hierarchy.
+  raw_ptr<Label, DanglingUntriaged> label2_ =
+      nullptr;  // Owned by views hierarchy.
+  raw_ptr<Textfield, DanglingUntriaged> textfield_ =
+      nullptr;  // Owned by views hierarchy.
 };
 
 TEST_F(AXTreeSourceViewsTest, Basics) {
diff --git a/ui/views/accessibility/ax_virtual_view_unittest.cc b/ui/views/accessibility/ax_virtual_view_unittest.cc
index 24fb98a..fea8348a 100644
--- a/ui/views/accessibility/ax_virtual_view_unittest.cc
+++ b/ui/views/accessibility/ax_virtual_view_unittest.cc
@@ -109,10 +109,10 @@
     accessibility_events_.clear();
   }
 
-  raw_ptr<Widget> widget_;
-  raw_ptr<Button> button_;
+  raw_ptr<Widget, DanglingUntriaged> widget_;
+  raw_ptr<Button, DanglingUntriaged> button_;
   // Weak, |button_| owns this.
-  raw_ptr<AXVirtualView> virtual_label_;
+  raw_ptr<AXVirtualView, DanglingUntriaged> virtual_label_;
 
  private:
   std::vector<
diff --git a/ui/views/accessibility/view_ax_platform_node_delegate_unittest.cc b/ui/views/accessibility/view_ax_platform_node_delegate_unittest.cc
index ddb5816..81375cf 100644
--- a/ui/views/accessibility/view_ax_platform_node_delegate_unittest.cc
+++ b/ui/views/accessibility/view_ax_platform_node_delegate_unittest.cc
@@ -200,9 +200,9 @@
   const int DEFAULT_VIEW_ID = 0;
   const int NON_DEFAULT_VIEW_ID = 1;
 
-  raw_ptr<Widget> widget_ = nullptr;
-  raw_ptr<Button> button_ = nullptr;
-  raw_ptr<Label> label_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<Button, DanglingUntriaged> button_ = nullptr;
+  raw_ptr<Label, DanglingUntriaged> label_ = nullptr;
   ScopedAXModeSetter ax_mode_setter_;
 };
 
@@ -240,7 +240,7 @@
 
  private:
   std::unique_ptr<TestTableModel> model_;
-  raw_ptr<TableView> table_ = nullptr;  // Owned by parent.
+  raw_ptr<TableView, DanglingUntriaged> table_ = nullptr;  // Owned by parent.
 };
 
 class ViewAXPlatformNodeDelegateMenuTest
@@ -297,9 +297,9 @@
 
  private:
   // Owned by runner_.
-  raw_ptr<views::TestMenuItemView> menu_ = nullptr;
+  raw_ptr<views::TestMenuItemView, DanglingUntriaged> menu_ = nullptr;
 
-  raw_ptr<SubmenuView> submenu_ = nullptr;
+  raw_ptr<SubmenuView, DanglingUntriaged> submenu_ = nullptr;
   std::unique_ptr<TestMenuDelegate> menu_delegate_;
   std::unique_ptr<MenuRunner> runner_;
   UniqueWidgetPtr owner_;
diff --git a/ui/views/animation/bounds_animator_unittest.cc b/ui/views/animation/bounds_animator_unittest.cc
index eacc2af..ce3dfe7 100644
--- a/ui/views/animation/bounds_animator_unittest.cc
+++ b/ui/views/animation/bounds_animator_unittest.cc
@@ -199,7 +199,7 @@
 
  private:
   TestView parent_;
-  raw_ptr<TestView> child_;  // Owned by |parent_|.
+  raw_ptr<TestView, DanglingUntriaged> child_;  // Owned by |parent_|.
   std::unique_ptr<BoundsAnimator> animator_;
 };
 
diff --git a/ui/views/animation/bubble_slide_animator.h b/ui/views/animation/bubble_slide_animator.h
index bcdfa8c6..7a3449f 100644
--- a/ui/views/animation/bubble_slide_animator.h
+++ b/ui/views/animation/bubble_slide_animator.h
@@ -102,7 +102,7 @@
   // Determines where to animate the bubble to during an animation.
   gfx::Rect CalculateTargetBounds(const View* desired_anchor_view) const;
 
-  const raw_ptr<BubbleDialogDelegateView> bubble_delegate_;
+  const raw_ptr<BubbleDialogDelegateView, DanglingUntriaged> bubble_delegate_;
   base::ScopedObservation<Widget, WidgetObserver> widget_observation_{this};
   gfx::LinearAnimation slide_animation_{this};
 
diff --git a/ui/views/animation/bubble_slide_animator_unittest.cc b/ui/views/animation/bubble_slide_animator_unittest.cc
index 5558476..2f1bd47 100644
--- a/ui/views/animation/bubble_slide_animator_unittest.cc
+++ b/ui/views/animation/bubble_slide_animator_unittest.cc
@@ -112,8 +112,8 @@
 
  protected:
   std::unique_ptr<Widget> anchor_widget_;
-  raw_ptr<BubbleDialogDelegateView> bubble_ = nullptr;
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<BubbleDialogDelegateView, DanglingUntriaged> bubble_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
   raw_ptr<View> view1_;
   raw_ptr<View> view2_;
   raw_ptr<View> view3_;
diff --git a/ui/views/animation/ink_drop_host_unittest.cc b/ui/views/animation/ink_drop_host_unittest.cc
index 18377f9e..c550b4b 100644
--- a/ui/views/animation/ink_drop_host_unittest.cc
+++ b/ui/views/animation/ink_drop_host_unittest.cc
@@ -58,7 +58,7 @@
   TestInkDrop* last_created_inkdrop() const { return last_created_inkdrop_; }
 
  private:
-  raw_ptr<TestInkDrop> last_created_inkdrop_ = nullptr;
+  raw_ptr<TestInkDrop, DanglingUntriaged> last_created_inkdrop_ = nullptr;
 };
 
 class InkDropHostTest : public testing::Test {
diff --git a/ui/views/animation/test/ink_drop_highlight_test_api.h b/ui/views/animation/test/ink_drop_highlight_test_api.h
index 31d6d93..18ea10c 100644
--- a/ui/views/animation/test/ink_drop_highlight_test_api.h
+++ b/ui/views/animation/test/ink_drop_highlight_test_api.h
@@ -50,7 +50,7 @@
 
  private:
   // The InkDropHighlight to provide internal access to.
-  raw_ptr<InkDropHighlight> ink_drop_highlight_;
+  raw_ptr<InkDropHighlight, DanglingUntriaged> ink_drop_highlight_;
 };
 
 }  // namespace test
diff --git a/ui/views/animation/test/test_ink_drop_host.h b/ui/views/animation/test/test_ink_drop_host.h
index a37239fa..934cc98 100644
--- a/ui/views/animation/test/test_ink_drop_host.h
+++ b/ui/views/animation/test/test_ink_drop_host.h
@@ -59,8 +59,10 @@
   mutable int num_ink_drop_ripples_created_ = 0;
   mutable int num_ink_drop_highlights_created_ = 0;
 
-  mutable raw_ptr<const InkDropRipple> last_ink_drop_ripple_ = nullptr;
-  mutable raw_ptr<const InkDropHighlight> last_ink_drop_highlight_ = nullptr;
+  mutable raw_ptr<const InkDropRipple, DanglingUntriaged>
+      last_ink_drop_ripple_ = nullptr;
+  mutable raw_ptr<const InkDropHighlight, DanglingUntriaged>
+      last_ink_drop_highlight_ = nullptr;
 
   // When true, the InkDropRipple/InkDropHighlight instances will have their
   // timers disabled after creation.
diff --git a/ui/views/animation/test/test_ink_drop_ripple_observer.h b/ui/views/animation/test/test_ink_drop_ripple_observer.h
index 982f450..bea5cd1e 100644
--- a/ui/views/animation/test/test_ink_drop_ripple_observer.h
+++ b/ui/views/animation/test/test_ink_drop_ripple_observer.h
@@ -62,7 +62,7 @@
   InkDropState target_state_at_last_animation_ended_ = InkDropState::HIDDEN;
 
   // An InkDropRipple to spy info from when notifications are handled.
-  raw_ptr<InkDropRipple> ink_drop_ripple_;
+  raw_ptr<InkDropRipple, DanglingUntriaged> ink_drop_ripple_;
 };
 
 }  // namespace test
diff --git a/ui/views/bubble/bubble_frame_view.h b/ui/views/bubble/bubble_frame_view.h
index 469d0d0..ce28272 100644
--- a/ui/views/bubble/bubble_frame_view.h
+++ b/ui/views/bubble/bubble_frame_view.h
@@ -360,7 +360,7 @@
   raw_ptr<ProgressBar> progress_indicator_ = nullptr;
 
   // The optional header view.
-  raw_ptr<View> header_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> header_view_ = nullptr;
 
   // A view to contain the footnote view, if it exists.
   raw_ptr<FootnoteContainerView, DanglingUntriaged> footnote_container_ =
diff --git a/ui/views/bubble/bubble_frame_view_unittest.cc b/ui/views/bubble/bubble_frame_view_unittest.cc
index 0060098..d62a456 100644
--- a/ui/views/bubble/bubble_frame_view_unittest.cc
+++ b/ui/views/bubble/bubble_frame_view_unittest.cc
@@ -79,8 +79,9 @@
   }
 
  private:
-  const raw_ptr<Widget> widget_;
-  raw_ptr<View> contents_view_ = nullptr;  // Owned by |widget_|.
+  const raw_ptr<Widget, DanglingUntriaged> widget_;
+  raw_ptr<View, DanglingUntriaged> contents_view_ =
+      nullptr;  // Owned by |widget_|.
   bool should_show_close_ = false;
 };
 
diff --git a/ui/views/color_chooser/color_chooser_view.h b/ui/views/color_chooser/color_chooser_view.h
index 7919a44..75d0115 100644
--- a/ui/views/color_chooser/color_chooser_view.h
+++ b/ui/views/color_chooser/color_chooser_view.h
@@ -88,16 +88,17 @@
 
   // Child views. These are owned as part of the normal views hierarchy.
   // The view of hue chooser.
-  raw_ptr<HueView> hue_ = nullptr;
+  raw_ptr<HueView, DanglingUntriaged> hue_ = nullptr;
 
   // The view of saturation/value choosing area.
-  raw_ptr<SaturationValueView> saturation_value_ = nullptr;
+  raw_ptr<SaturationValueView, DanglingUntriaged> saturation_value_ = nullptr;
 
   // The rectangle to denote the selected color.
-  raw_ptr<SelectedColorPatchView> selected_color_patch_ = nullptr;
+  raw_ptr<SelectedColorPatchView, DanglingUntriaged> selected_color_patch_ =
+      nullptr;
 
   // The textfield to write the color explicitly.
-  raw_ptr<Textfield> textfield_ = nullptr;
+  raw_ptr<Textfield, DanglingUntriaged> textfield_ = nullptr;
 
   SkColor initial_color_;
 };
diff --git a/ui/views/controls/animated_image_view_unittest.cc b/ui/views/controls/animated_image_view_unittest.cc
index 9f9c827..0e0c91d 100644
--- a/ui/views/controls/animated_image_view_unittest.cc
+++ b/ui/views/controls/animated_image_view_unittest.cc
@@ -88,7 +88,7 @@
   }
 
   Widget widget_;
-  raw_ptr<AnimatedImageView> view_;
+  raw_ptr<AnimatedImageView, DanglingUntriaged> view_;
 };
 
 TEST_F(AnimatedImageViewTest, PaintsWithAdditionalTranslation) {
diff --git a/ui/views/controls/button/button_unittest.cc b/ui/views/controls/button/button_unittest.cc
index b1da0c0..6ee9a95e 100644
--- a/ui/views/controls/button/button_unittest.cc
+++ b/ui/views/controls/button/button_unittest.cc
@@ -217,7 +217,7 @@
 
  private:
   std::unique_ptr<Widget> widget_;
-  raw_ptr<TestButton> button_;
+  raw_ptr<TestButton, DanglingUntriaged> button_;
   std::unique_ptr<TestButtonObserver> button_observer_;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
 };
diff --git a/ui/views/controls/button/checkbox_unittest.cc b/ui/views/controls/button/checkbox_unittest.cc
index 92116805..c46af855 100644
--- a/ui/views/controls/button/checkbox_unittest.cc
+++ b/ui/views/controls/button/checkbox_unittest.cc
@@ -51,7 +51,7 @@
 
  private:
   std::unique_ptr<Widget> widget_;
-  raw_ptr<Checkbox> checkbox_ = nullptr;
+  raw_ptr<Checkbox, DanglingUntriaged> checkbox_ = nullptr;
 };
 
 TEST_F(CheckboxTest, AccessibilityTest) {
diff --git a/ui/views/controls/button/image_button_factory_unittest.cc b/ui/views/controls/button/image_button_factory_unittest.cc
index f4712fe5..9f177c53 100644
--- a/ui/views/controls/button/image_button_factory_unittest.cc
+++ b/ui/views/controls/button/image_button_factory_unittest.cc
@@ -69,7 +69,8 @@
 
  private:
   std::unique_ptr<Widget> widget_;
-  raw_ptr<ImageButton> button_ = nullptr;  // owned by |widget_|.
+  raw_ptr<ImageButton, DanglingUntriaged> button_ =
+      nullptr;  // owned by |widget_|.
 };
 
 TEST_F(ImageButtonFactoryWidgetTest, SetImageFromVectorIconWithColor) {
diff --git a/ui/views/controls/button/label_button_label_unittest.cc b/ui/views/controls/button/label_button_label_unittest.cc
index 1c33754e..cd31043 100644
--- a/ui/views/controls/button/label_button_label_unittest.cc
+++ b/ui/views/controls/button/label_button_label_unittest.cc
@@ -77,7 +77,7 @@
   SkColor last_color_ = gfx::kPlaceholderColor;
   absl::optional<ui::ColorId> last_color_id_;
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<TestLabel> label_;
+  raw_ptr<TestLabel, DanglingUntriaged> label_;
 };
 
 // Test that LabelButtonLabel reacts properly to themed and overridden colors.
diff --git a/ui/views/controls/button/label_button_unittest.cc b/ui/views/controls/button/label_button_unittest.cc
index 770fa70..00ef21f 100644
--- a/ui/views/controls/button/label_button_unittest.cc
+++ b/ui/views/controls/button/label_button_unittest.cc
@@ -131,14 +131,14 @@
   }
 
  protected:
-  raw_ptr<TestLabelButton> button_ = nullptr;
+  raw_ptr<TestLabelButton, DanglingUntriaged> button_ = nullptr;
 
   SkColor themed_normal_text_color_ = 0;
   SkColor styled_normal_text_color_ = 0;
   SkColor styled_highlight_text_color_ = 0;
 
  private:
-  raw_ptr<Widget> test_widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> test_widget_ = nullptr;
 };
 
 TEST_F(LabelButtonTest, FocusBehavior) {
@@ -834,10 +834,10 @@
   std::unique_ptr<Widget> widget_;
 
   // The test target.
-  raw_ptr<LabelButton> button_ = nullptr;
+  raw_ptr<LabelButton, DanglingUntriaged> button_ = nullptr;
 
   // Weak ptr, |button_| owns the instance.
-  raw_ptr<test::TestInkDrop> test_ink_drop_ = nullptr;
+  raw_ptr<test::TestInkDrop, DanglingUntriaged> test_ink_drop_ = nullptr;
 };
 
 TEST_F(InkDropLabelButtonTest, HoverStateAfterMouseEnterAndExitEvents) {
@@ -908,9 +908,9 @@
         std::make_unique<TestLabelButton>());
   }
 
-  raw_ptr<TestLabelButton> button_ = nullptr;
-  raw_ptr<Widget> test_widget_ = nullptr;
-  raw_ptr<Widget> dummy_widget_ = nullptr;
+  raw_ptr<TestLabelButton, DanglingUntriaged> button_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> test_widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> dummy_widget_ = nullptr;
   Button::ButtonState style_of_inactive_widget_;
 };
 
diff --git a/ui/views/controls/button/menu_button_unittest.cc b/ui/views/controls/button/menu_button_unittest.cc
index 3ac7e99..30b76ae 100644
--- a/ui/views/controls/button/menu_button_unittest.cc
+++ b/ui/views/controls/button/menu_button_unittest.cc
@@ -126,10 +126,12 @@
   }
 
  private:
-  raw_ptr<Widget> widget_ = nullptr;          // Owned by self.
-  raw_ptr<TestMenuButton> button_ = nullptr;  // Owned by |widget_|.
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;  // Owned by self.
+  raw_ptr<TestMenuButton, DanglingUntriaged> button_ =
+      nullptr;  // Owned by |widget_|.
   std::unique_ptr<ui::test::EventGenerator> generator_;
-  raw_ptr<test::TestInkDrop> ink_drop_ = nullptr;  // Owned by |button_|.
+  raw_ptr<test::TestInkDrop, DanglingUntriaged> ink_drop_ =
+      nullptr;  // Owned by |button_|.
 };
 
 // A Button that will acquire a PressedLock in the pressed callback and
diff --git a/ui/views/controls/button/toggle_button_unittest.cc b/ui/views/controls/button/toggle_button_unittest.cc
index 18700af..0d78159 100644
--- a/ui/views/controls/button/toggle_button_unittest.cc
+++ b/ui/views/controls/button/toggle_button_unittest.cc
@@ -87,7 +87,7 @@
 
  private:
   std::unique_ptr<Widget> widget_;
-  raw_ptr<TestToggleButton> button_ = nullptr;
+  raw_ptr<TestToggleButton, DanglingUntriaged> button_ = nullptr;
   int counter_ = 0;
 };
 
diff --git a/ui/views/controls/combobox/combobox_unittest.cc b/ui/views/controls/combobox/combobox_unittest.cc
index 922407d36..9e2398cb 100644
--- a/ui/views/controls/combobox/combobox_unittest.cc
+++ b/ui/views/controls/combobox/combobox_unittest.cc
@@ -267,7 +267,7 @@
   UniqueWidgetPtr widget_;
 
   // |combobox_| will be allocated InitCombobox() and then owned by |widget_|.
-  raw_ptr<TestCombobox> combobox_ = nullptr;
+  raw_ptr<TestCombobox, DanglingUntriaged> combobox_ = nullptr;
   std::unique_ptr<ComboboxTestApi> test_api_;
 
   // Combobox does not take ownership of the model, hence it needs to be scoped.
diff --git a/ui/views/controls/editable_combobox/editable_combobox_unittest.cc b/ui/views/controls/editable_combobox/editable_combobox_unittest.cc
index 987b4298..36290b9 100644
--- a/ui/views/controls/editable_combobox/editable_combobox_unittest.cc
+++ b/ui/views/controls/editable_combobox/editable_combobox_unittest.cc
@@ -134,16 +134,16 @@
   void OnContentChanged() { ++change_count_; }
 
   // The widget where the control will appear.
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
 
   // |combobox_| and |dummy_focusable_view_| are allocated in
   // |InitEditableCombobox| and then owned by |widget_|.
-  raw_ptr<EditableCombobox> combobox_ = nullptr;
-  raw_ptr<View> dummy_focusable_view_ = nullptr;
+  raw_ptr<EditableCombobox, DanglingUntriaged> combobox_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> dummy_focusable_view_ = nullptr;
 
   // We make |combobox_| a child of another View to test different removal
   // scenarios.
-  raw_ptr<View> parent_of_combobox_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> parent_of_combobox_ = nullptr;
 
   int change_count_ = 0;
 
diff --git a/ui/views/controls/editable_combobox/editable_password_combobox_unittest.cc b/ui/views/controls/editable_combobox/editable_password_combobox_unittest.cc
index cc01b31..87fff8f9 100644
--- a/ui/views/controls/editable_combobox/editable_password_combobox_unittest.cc
+++ b/ui/views/controls/editable_combobox/editable_password_combobox_unittest.cc
@@ -71,8 +71,8 @@
   }
 
  private:
-  raw_ptr<Widget> widget_ = nullptr;
-  raw_ptr<EditablePasswordCombobox> combobox_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<EditablePasswordCombobox, DanglingUntriaged> combobox_ = nullptr;
   base::MockCallback<Button::PressedCallback::Callback> eye_callback_;
 
   // Used for simulating eye button clicks.
diff --git a/ui/views/controls/image_view_unittest.cc b/ui/views/controls/image_view_unittest.cc
index 7b85838..4849484 100644
--- a/ui/views/controls/image_view_unittest.cc
+++ b/ui/views/controls/image_view_unittest.cc
@@ -90,7 +90,7 @@
   Widget* widget() { return &widget_; }
 
  private:
-  raw_ptr<ImageView> image_view_ = nullptr;
+  raw_ptr<ImageView, DanglingUntriaged> image_view_ = nullptr;
   Widget widget_;
 };
 
diff --git a/ui/views/controls/label_unittest.cc b/ui/views/controls/label_unittest.cc
index 73681817..3d73f21 100644
--- a/ui/views/controls/label_unittest.cc
+++ b/ui/views/controls/label_unittest.cc
@@ -133,7 +133,7 @@
   Label* label() { return label_; }
 
  private:
-  raw_ptr<Label> label_ = nullptr;
+  raw_ptr<Label, DanglingUntriaged> label_ = nullptr;
 };
 
 // Test fixture for text selection related tests.
diff --git a/ui/views/controls/link_fragment_unittest.cc b/ui/views/controls/link_fragment_unittest.cc
index b112349..e2811bdf 100644
--- a/ui/views/controls/link_fragment_unittest.cc
+++ b/ui/views/controls/link_fragment_unittest.cc
@@ -71,7 +71,7 @@
   }
 
  private:
-  std::array<raw_ptr<LinkFragment>, 3> fragments_;
+  std::array<raw_ptr<LinkFragment, DanglingUntriaged>, 3> fragments_;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
 };
 
diff --git a/ui/views/controls/link_unittest.cc b/ui/views/controls/link_unittest.cc
index f0e8d19..e42b7f3 100644
--- a/ui/views/controls/link_unittest.cc
+++ b/ui/views/controls/link_unittest.cc
@@ -54,7 +54,7 @@
   ui::test::EventGenerator* event_generator() { return event_generator_.get(); }
 
  public:
-  raw_ptr<Link> link_ = nullptr;
+  raw_ptr<Link, DanglingUntriaged> link_ = nullptr;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
 };
 
diff --git a/ui/views/controls/menu/menu_controller.h b/ui/views/controls/menu/menu_controller.h
index 8aa1472..fa91e570 100644
--- a/ui/views/controls/menu/menu_controller.h
+++ b/ui/views/controls/menu/menu_controller.h
@@ -309,7 +309,7 @@
     ~State();
 
     // The selected menu item.
-    raw_ptr<MenuItemView> item = nullptr;
+    raw_ptr<MenuItemView, DanglingUntriaged> item = nullptr;
 
     // Used to capture a hot tracked child button when a nested menu is opened
     // and to restore the hot tracked state when exiting a nested menu.
diff --git a/ui/views/controls/menu/menu_controller_unittest.cc b/ui/views/controls/menu/menu_controller_unittest.cc
index c3bcf991..6a7fae5 100644
--- a/ui/views/controls/menu/menu_controller_unittest.cc
+++ b/ui/views/controls/menu/menu_controller_unittest.cc
@@ -288,7 +288,7 @@
   gfx::Size CalculatePreferredSize() const override { return size(); }
 
  private:
-  raw_ptr<MenuController> controller_;
+  raw_ptr<MenuController, DanglingUntriaged> controller_;
 };
 
 }  // namespace
@@ -930,14 +930,15 @@
   }
 
   // Not owned.
-  raw_ptr<ReleaseRefTestViewsDelegate> test_views_delegate_ = nullptr;
+  raw_ptr<ReleaseRefTestViewsDelegate, DanglingUntriaged> test_views_delegate_ =
+      nullptr;
 
   std::unique_ptr<GestureTestWidget> owner_;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
   std::unique_ptr<TestMenuItemViewShown> menu_item_;
   std::unique_ptr<TestMenuControllerDelegate> menu_controller_delegate_;
   std::unique_ptr<TestMenuDelegate> menu_delegate_;
-  raw_ptr<MenuController> menu_controller_ = nullptr;
+  raw_ptr<MenuController, DanglingUntriaged> menu_controller_ = nullptr;
 };
 
 INSTANTIATE_TEST_SUITE_P(All, MenuControllerTest, testing::Bool());
diff --git a/ui/views/controls/menu/menu_host_root_view.h b/ui/views/controls/menu/menu_host_root_view.h
index 87b5c81..5d4171f 100644
--- a/ui/views/controls/menu/menu_host_root_view.h
+++ b/ui/views/controls/menu/menu_host_root_view.h
@@ -55,7 +55,7 @@
   MenuController* GetMenuControllerForInputEvents();
 
   // The SubmenuView we contain.
-  raw_ptr<SubmenuView> submenu_;
+  raw_ptr<SubmenuView, DanglingUntriaged> submenu_;
 };
 
 }  // namespace views
diff --git a/ui/views/controls/menu/menu_item_view_unittest.cc b/ui/views/controls/menu/menu_item_view_unittest.cc
index 3fe09d20..0612acf 100644
--- a/ui/views/controls/menu/menu_item_view_unittest.cc
+++ b/ui/views/controls/menu/menu_item_view_unittest.cc
@@ -408,7 +408,7 @@
 
  private:
   // Owned by MenuRunner.
-  raw_ptr<MenuItemView> menu_item_view_;
+  raw_ptr<MenuItemView, DanglingUntriaged> menu_item_view_;
 
   std::unique_ptr<test::TestMenuDelegate> menu_delegate_;
   std::unique_ptr<MenuRunner> menu_runner_;
diff --git a/ui/views/controls/menu/menu_model_adapter_unittest.cc b/ui/views/controls/menu/menu_model_adapter_unittest.cc
index 320642f..4d362e7 100644
--- a/ui/views/controls/menu/menu_model_adapter_unittest.cc
+++ b/ui/views/controls/menu/menu_model_adapter_unittest.cc
@@ -127,7 +127,7 @@
 
     ItemType type;
     std::u16string label;
-    raw_ptr<ui::MenuModel> submenu;
+    raw_ptr<ui::MenuModel, DanglingUntriaged> submenu;
     bool enabled;
     bool visible;
     bool alerted = false;
diff --git a/ui/views/controls/menu/menu_runner_unittest.cc b/ui/views/controls/menu/menu_runner_unittest.cc
index 4fad9b6..e1b43f7 100644
--- a/ui/views/controls/menu/menu_runner_unittest.cc
+++ b/ui/views/controls/menu/menu_runner_unittest.cc
@@ -114,7 +114,7 @@
 
  private:
   // Owned by menu_runner_.
-  raw_ptr<views::TestMenuItemView> menu_item_view_ = nullptr;
+  raw_ptr<views::TestMenuItemView, DanglingUntriaged> menu_item_view_ = nullptr;
 
   std::unique_ptr<TestMenuDelegate> menu_delegate_;
   std::unique_ptr<MenuRunner> menu_runner_;
@@ -364,7 +364,7 @@
   }
 
   raw_ptr<MenuRunner> runner_;
-  raw_ptr<Widget> owner_;
+  raw_ptr<Widget, DanglingUntriaged> owner_;
 };
 
 }  // namespace
@@ -414,8 +414,8 @@
   }
 
  private:
-  raw_ptr<Widget> widget_ = nullptr;
-  raw_ptr<EventCountView> event_count_view_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<EventCountView, DanglingUntriaged> event_count_view_ = nullptr;
   std::unique_ptr<MenuLauncherEventHandler> consumer_;
 };
 
@@ -595,7 +595,8 @@
 
  private:
   // Not owned
-  raw_ptr<ReleaseRefTestViewsDelegate> test_views_delegate_ = nullptr;
+  raw_ptr<ReleaseRefTestViewsDelegate, DanglingUntriaged> test_views_delegate_ =
+      nullptr;
 };
 
 base::WeakPtr<internal::MenuRunnerImpl>
diff --git a/ui/views/controls/message_box_view_unittest.cc b/ui/views/controls/message_box_view_unittest.cc
index 7efce49..81d7f4a 100644
--- a/ui/views/controls/message_box_view_unittest.cc
+++ b/ui/views/controls/message_box_view_unittest.cc
@@ -45,7 +45,7 @@
   }
 
   std::unique_ptr<MessageBoxView> message_box_;
-  raw_ptr<const LayoutProvider> provider_;
+  raw_ptr<const LayoutProvider, DanglingUntriaged> provider_;
 };
 
 TEST_F(MessageBoxViewTest, CheckMessageOnlySize) {
diff --git a/ui/views/controls/native/native_view_host_aura_unittest.cc b/ui/views/controls/native/native_view_host_aura_unittest.cc
index e14a495..a49416e1 100644
--- a/ui/views/controls/native/native_view_host_aura_unittest.cc
+++ b/ui/views/controls/native/native_view_host_aura_unittest.cc
@@ -44,7 +44,7 @@
 
   struct EventDetails {
     EventType type;
-    raw_ptr<aura::Window> window;
+    raw_ptr<aura::Window, DanglingUntriaged> window;
     gfx::Rect bounds;
     bool operator!=(const EventDetails& rhs) {
       return type != rhs.type || window != rhs.window || bounds != rhs.bounds;
@@ -623,7 +623,7 @@
   }
 
  private:
-  raw_ptr<aura::Window> window_ = nullptr;
+  raw_ptr<aura::Window, DanglingUntriaged> window_ = nullptr;
 };
 
 TEST_F(NativeViewHostAuraTest, ShouldDescendIntoChildForEventHandling) {
diff --git a/ui/views/controls/progress_bar_unittest.cc b/ui/views/controls/progress_bar_unittest.cc
index d04957a..75581d2 100644
--- a/ui/views/controls/progress_bar_unittest.cc
+++ b/ui/views/controls/progress_bar_unittest.cc
@@ -40,7 +40,7 @@
     ViewsTestBase::TearDown();
   }
 
-  raw_ptr<ProgressBar> bar_;
+  raw_ptr<ProgressBar, DanglingUntriaged> bar_;
   std::unique_ptr<Widget> widget_;
 
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
diff --git a/ui/views/controls/resize_area_unittest.cc b/ui/views/controls/resize_area_unittest.cc
index 70194a0a..f91e2955 100644
--- a/ui/views/controls/resize_area_unittest.cc
+++ b/ui/views/controls/resize_area_unittest.cc
@@ -94,7 +94,7 @@
 
  private:
   std::unique_ptr<TestResizeAreaDelegate> delegate_;
-  raw_ptr<views::Widget> widget_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> widget_ = nullptr;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
 
   // The number of ui::ET_GESTURE_SCROLL_UPDATE events seen by
diff --git a/ui/views/controls/scroll_view_unittest.cc b/ui/views/controls/scroll_view_unittest.cc
index d833d94..cd93f8ad 100644
--- a/ui/views/controls/scroll_view_unittest.cc
+++ b/ui/views/controls/scroll_view_unittest.cc
@@ -114,7 +114,7 @@
 
  private:
   base::ScopedObservation<View, ViewObserver> observer_{this};
-  raw_ptr<View> deleted_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> deleted_view_ = nullptr;
 };
 
 }  // namespace test
@@ -415,7 +415,7 @@
     quit_closure_.Reset();
   }
 
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
 
   // Disable scrollbar hiding (i.e. disable overlay scrollbars) by default.
   bool use_overlay_scrollers_ = false;
diff --git a/ui/views/controls/scrollbar/scrollbar_unittest.cc b/ui/views/controls/scrollbar/scrollbar_unittest.cc
index d7e9be5..45423f1 100644
--- a/ui/views/controls/scrollbar/scrollbar_unittest.cc
+++ b/ui/views/controls/scrollbar/scrollbar_unittest.cc
@@ -47,7 +47,7 @@
 
   // We save the last values in order to assert the correctness of the scroll
   // operation.
-  raw_ptr<views::ScrollBar> last_source;
+  raw_ptr<views::ScrollBar, DanglingUntriaged> last_source;
   bool last_is_positive;
   bool last_is_page;
   int last_position;
@@ -104,7 +104,7 @@
   UniqueWidgetPtr widget_;
 
   // This is the Views scrollbar.
-  raw_ptr<ScrollBar> scrollbar_ = nullptr;
+  raw_ptr<ScrollBar, DanglingUntriaged> scrollbar_ = nullptr;
 
   // Keep track of the size of the track. This is how we can tell when we
   // scroll to the middle.
diff --git a/ui/views/controls/separator_unittest.cc b/ui/views/controls/separator_unittest.cc
index 4f29e07..ad93872b 100644
--- a/ui/views/controls/separator_unittest.cc
+++ b/ui/views/controls/separator_unittest.cc
@@ -35,7 +35,7 @@
   void ExpectDrawAtLeastOnePixel(float image_scale);
 
   std::unique_ptr<Widget> widget_;
-  raw_ptr<Separator> separator_;
+  raw_ptr<Separator, DanglingUntriaged> separator_;
 
   SkColor expected_foreground_color_ = gfx::kPlaceholderColor;
 
diff --git a/ui/views/controls/slider_unittest.cc b/ui/views/controls/slider_unittest.cc
index 4a7e59b..eac0a8d 100644
--- a/ui/views/controls/slider_unittest.cc
+++ b/ui/views/controls/slider_unittest.cc
@@ -74,9 +74,9 @@
   // The epoch of the last time SliderDragEnded was called.
   int last_drag_ended_epoch_ = -1;
   // The sender from the last SliderDragStarted call.
-  raw_ptr<views::Slider> last_drag_started_sender_ = nullptr;
+  raw_ptr<views::Slider, DanglingUntriaged> last_drag_started_sender_ = nullptr;
   // The sender from the last SliderDragEnded call.
-  raw_ptr<views::Slider> last_drag_ended_sender_ = nullptr;
+  raw_ptr<views::Slider, DanglingUntriaged> last_drag_ended_sender_ = nullptr;
 };
 
 TestSliderListener::TestSliderListener() = default;
@@ -160,7 +160,7 @@
 
  private:
   // The Slider to be tested.
-  raw_ptr<Slider> slider_ = nullptr;
+  raw_ptr<Slider, DanglingUntriaged> slider_ = nullptr;
 
   // Populated values for discrete slider.
   base::flat_set<float> values_;
diff --git a/ui/views/controls/styled_label.h b/ui/views/controls/styled_label.h
index 8884e55..2757c861 100644
--- a/ui/views/controls/styled_label.h
+++ b/ui/views/controls/styled_label.h
@@ -77,7 +77,7 @@
 
     // A custom view shown instead of the underlying text. Ownership of custom
     // views must be passed to StyledLabel via AddCustomView().
-    raw_ptr<View> custom_view = nullptr;
+    raw_ptr<View, DanglingUntriaged> custom_view = nullptr;
   };
 
   // Sizing information for laying out the label based on a particular width.
diff --git a/ui/views/controls/styled_label_unittest.cc b/ui/views/controls/styled_label_unittest.cc
index dae57fc..d9f6d84 100644
--- a/ui/views/controls/styled_label_unittest.cc
+++ b/ui/views/controls/styled_label_unittest.cc
@@ -104,7 +104,7 @@
   }
 
  private:
-  raw_ptr<StyledLabel> styled_;
+  raw_ptr<StyledLabel, DanglingUntriaged> styled_;
   std::unique_ptr<Widget> widget_;
 };
 
diff --git a/ui/views/controls/table/table_view_unittest.cc b/ui/views/controls/table/table_view_unittest.cc
index 9f6b3b13..89bb9f9 100644
--- a/ui/views/controls/table/table_view_unittest.cc
+++ b/ui/views/controls/table/table_view_unittest.cc
@@ -140,7 +140,7 @@
   }
 
  private:
-  raw_ptr<TableView> table_;
+  raw_ptr<TableView, DanglingUntriaged> table_;
 };
 
 namespace {
@@ -589,7 +589,7 @@
   std::unique_ptr<TestTableModel2> model_;
 
   // Owned by |parent_|.
-  raw_ptr<TableView> table_ = nullptr;
+  raw_ptr<TableView, DanglingUntriaged> table_ = nullptr;
 
   std::unique_ptr<TableViewTestHelper> helper_;
 
diff --git a/ui/views/controls/textfield/textfield_test_api.h b/ui/views/controls/textfield/textfield_test_api.h
index e367241..27b6a55 100644
--- a/ui/views/controls/textfield/textfield_test_api.h
+++ b/ui/views/controls/textfield/textfield_test_api.h
@@ -74,7 +74,7 @@
   void SetDisplayOffsetX(int x) const;
 
  private:
-  raw_ptr<Textfield> textfield_;
+  raw_ptr<Textfield, DanglingUntriaged> textfield_;
 };
 
 }  // namespace views
diff --git a/ui/views/controls/textfield/textfield_unittest.cc b/ui/views/controls/textfield/textfield_unittest.cc
index d1e27b265..6e8e7ba4 100644
--- a/ui/views/controls/textfield/textfield_unittest.cc
+++ b/ui/views/controls/textfield/textfield_unittest.cc
@@ -141,7 +141,7 @@
 
  private:
   bool consume_ = true;
-  raw_ptr<Textfield> textfield_;
+  raw_ptr<Textfield, DanglingUntriaged> textfield_;
 };
 
 class MockInputMethod : public ui::InputMethodBase {
diff --git a/ui/views/controls/textfield/textfield_unittest.h b/ui/views/controls/textfield/textfield_unittest.h
index bf3b9e2c..dc750e3 100644
--- a/ui/views/controls/textfield/textfield_unittest.h
+++ b/ui/views/controls/textfield/textfield_unittest.h
@@ -150,15 +150,15 @@
   // We need widget to populate wrapper class.
   std::unique_ptr<Widget> widget_;
 
-  raw_ptr<TestTextfield> textfield_ = nullptr;
+  raw_ptr<TestTextfield, DanglingUntriaged> textfield_ = nullptr;
   std::unique_ptr<TextfieldTestApi> test_api_;
-  raw_ptr<TextfieldModel> model_ = nullptr;
+  raw_ptr<TextfieldModel, DanglingUntriaged> model_ = nullptr;
 
   // The string from Controller::ContentsChanged callback.
   std::u16string last_contents_;
 
   // For testing input method related behaviors.
-  raw_ptr<MockInputMethod> input_method_ = nullptr;
+  raw_ptr<MockInputMethod, DanglingUntriaged> input_method_ = nullptr;
 
   // Indicates how many times OnBeforeUserAction() is called.
   int on_before_user_action_ = 0;
@@ -171,7 +171,7 @@
 
   ui::ClipboardBuffer copied_to_clipboard_ = ui::ClipboardBuffer::kMaxValue;
   std::unique_ptr<ui::test::EventGenerator> event_generator_;
-  raw_ptr<View> event_target_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> event_target_ = nullptr;
 };
 
 }  // namespace test
diff --git a/ui/views/controls/theme_tracking_image_view_unittest.cc b/ui/views/controls/theme_tracking_image_view_unittest.cc
index 1e7f50a3f..70afe24 100644
--- a/ui/views/controls/theme_tracking_image_view_unittest.cc
+++ b/ui/views/controls/theme_tracking_image_view_unittest.cc
@@ -67,7 +67,7 @@
 
  private:
   std::unique_ptr<Widget> widget_;
-  raw_ptr<ThemeTrackingImageView> view_ = nullptr;
+  raw_ptr<ThemeTrackingImageView, DanglingUntriaged> view_ = nullptr;
 
   bool is_dark_ = false;
 };
diff --git a/ui/views/controls/tree/tree_view_unittest.cc b/ui/views/controls/tree/tree_view_unittest.cc
index e4f67c07..42f9c4da 100644
--- a/ui/views/controls/tree/tree_view_unittest.cc
+++ b/ui/views/controls/tree/tree_view_unittest.cc
@@ -149,7 +149,7 @@
   PrefixSelector* selector() { return tree_->GetPrefixSelector(); }
 
   ui::TreeNodeModel<TestNode> model_;
-  raw_ptr<TreeView> tree_;
+  raw_ptr<TreeView, DanglingUntriaged> tree_;
   UniqueWidgetPtr widget_;
 
  private:
diff --git a/ui/views/controls/webview/web_dialog_view_unittest.cc b/ui/views/controls/webview/web_dialog_view_unittest.cc
index 00dec92e..c546d32 100644
--- a/ui/views/controls/webview/web_dialog_view_unittest.cc
+++ b/ui/views/controls/webview/web_dialog_view_unittest.cc
@@ -139,8 +139,8 @@
   std::unique_ptr<content::TestBrowserContext> browser_context_;
   // These are raw pointers (vs unique pointers) because the views
   // system does its own internal memory management.
-  raw_ptr<views::Widget> widget_ = nullptr;
-  raw_ptr<WebDialogView> web_dialog_view_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<WebDialogView, DanglingUntriaged> web_dialog_view_ = nullptr;
   base::RepeatingClosure quit_closure_;
 
   std::unique_ptr<TestWebDialogViewWebDialogDelegate> web_dialog_delegate_;
diff --git a/ui/views/controls/webview/webview.h b/ui/views/controls/webview/webview.h
index 42ccdb8..2c69bd3f 100644
--- a/ui/views/controls/webview/webview.h
+++ b/ui/views/controls/webview/webview.h
@@ -203,7 +203,7 @@
   bool is_letterboxing_ = false;
   raw_ptr<content::BrowserContext> browser_context_;
   bool allow_accelerators_ = false;
-  raw_ptr<View> crashed_overlay_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> crashed_overlay_view_ = nullptr;
   bool is_primary_web_contents_for_window_ = false;
 
   // Minimum and maximum sizes to determine WebView bounds for auto-resizing.
diff --git a/ui/views/controls/webview/webview_unittest.cc b/ui/views/controls/webview/webview_unittest.cc
index d4afd02..7f71510 100644
--- a/ui/views/controls/webview/webview_unittest.cc
+++ b/ui/views/controls/webview/webview_unittest.cc
@@ -213,8 +213,8 @@
   std::unique_ptr<views::WebView::ScopedWebContentsCreatorForTesting>
       scoped_web_contents_creator_;
 
-  raw_ptr<Widget> top_level_widget_ = nullptr;
-  raw_ptr<WebView> web_view_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> top_level_widget_ = nullptr;
+  raw_ptr<WebView, DanglingUntriaged> web_view_ = nullptr;
 };
 
 // Tests that attaching and detaching a WebContents to a WebView makes the
diff --git a/ui/views/corewm/tooltip_controller_unittest.cc b/ui/views/corewm/tooltip_controller_unittest.cc
index d0dc27d..3e6dd08d 100644
--- a/ui/views/corewm/tooltip_controller_unittest.cc
+++ b/ui/views/corewm/tooltip_controller_unittest.cc
@@ -235,7 +235,7 @@
   }
 
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<TooltipTestView> view_ = nullptr;
+  raw_ptr<TooltipTestView, DanglingUntriaged> view_ = nullptr;
   std::unique_ptr<TooltipControllerTestHelper> helper_;
   std::unique_ptr<ui::test::EventGenerator> generator_;
 
@@ -1136,7 +1136,7 @@
 
  protected:
   // Owned by |controller_|.
-  raw_ptr<TestTooltip> test_tooltip_;
+  raw_ptr<TestTooltip, DanglingUntriaged> test_tooltip_;
   std::unique_ptr<TooltipControllerTestHelper> helper_;
   std::unique_ptr<ui::test::EventGenerator> generator_;
 
@@ -1238,11 +1238,11 @@
 
  protected:
   // Owned by |controller_|.
-  raw_ptr<TestTooltip> test_tooltip_ = nullptr;
+  raw_ptr<TestTooltip, DanglingUntriaged> test_tooltip_ = nullptr;
   std::unique_ptr<TooltipControllerTestHelper> helper_;
   std::unique_ptr<ui::test::EventGenerator> generator_;
   std::unique_ptr<views::Widget> widget_;
-  raw_ptr<TooltipTestView> view_;
+  raw_ptr<TooltipTestView, DanglingUntriaged> view_;
 
  private:
   std::unique_ptr<TooltipController> controller_;
diff --git a/ui/views/event_monitor_unittest.cc b/ui/views/event_monitor_unittest.cc
index 4cd2ca11..321c6be7 100644
--- a/ui/views/event_monitor_unittest.cc
+++ b/ui/views/event_monitor_unittest.cc
@@ -60,7 +60,7 @@
   }
 
  protected:
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
   std::unique_ptr<ui::test::EventGenerator> generator_;
   TestEventObserver observer_;
 };
diff --git a/ui/views/focus/focus_manager_unittest.cc b/ui/views/focus/focus_manager_unittest.cc
index 7560bb4..09388a4 100644
--- a/ui/views/focus/focus_manager_unittest.cc
+++ b/ui/views/focus/focus_manager_unittest.cc
@@ -454,7 +454,7 @@
   }
 
  private:
-  raw_ptr<views::View> view_to_focus_ = nullptr;
+  raw_ptr<views::View, DanglingUntriaged> view_to_focus_ = nullptr;
 };
 }  // namespace
 
@@ -1219,10 +1219,10 @@
   }
 
  protected:
-  raw_ptr<FocusManager> parent_focus_manager_ = nullptr;
-  raw_ptr<FocusManager> bubble_focus_manager_ = nullptr;
+  raw_ptr<FocusManager, DanglingUntriaged> parent_focus_manager_ = nullptr;
+  raw_ptr<FocusManager, DanglingUntriaged> bubble_focus_manager_ = nullptr;
 
-  raw_ptr<BubbleDialogDelegateView> bubble_ = nullptr;
+  raw_ptr<BubbleDialogDelegateView, DanglingUntriaged> bubble_ = nullptr;
 };
 
 // Test that when an accelerator is sent to a bubble that isn't registered,
diff --git a/ui/views/focus/focus_traversal_unittest.cc b/ui/views/focus/focus_traversal_unittest.cc
index 44a0ba3..7df8b220 100644
--- a/ui/views/focus/focus_traversal_unittest.cc
+++ b/ui/views/focus/focus_traversal_unittest.cc
@@ -230,11 +230,11 @@
     ReverseChildrenFocusOrderImpl(parent);
   }
 
-  raw_ptr<TabbedPane> style_tab_ = nullptr;
-  raw_ptr<BorderView> search_border_view_ = nullptr;
+  raw_ptr<TabbedPane, DanglingUntriaged> style_tab_ = nullptr;
+  raw_ptr<BorderView, DanglingUntriaged> search_border_view_ = nullptr;
   DummyComboboxModel combobox_model_;
-  raw_ptr<PaneView> left_container_;
-  raw_ptr<PaneView> right_container_;
+  raw_ptr<PaneView, DanglingUntriaged> left_container_;
+  raw_ptr<PaneView, DanglingUntriaged> right_container_;
 
  private:
   // Implementation of `ReverseChildrenFocusOrder`. |seen_views| should not be
diff --git a/ui/views/interaction/element_tracker_views_unittest.cc b/ui/views/interaction/element_tracker_views_unittest.cc
index 28ad427c..a122ee96 100644
--- a/ui/views/interaction/element_tracker_views_unittest.cc
+++ b/ui/views/interaction/element_tracker_views_unittest.cc
@@ -106,7 +106,7 @@
   const ElementEventType event_type_;
   ui::ElementTracker::Subscription subscription_;
   int event_count_ = 0;
-  raw_ptr<View> last_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> last_view_ = nullptr;
 };
 
 ElementTrackerViews::ViewList ElementsToViews(
diff --git a/ui/views/interaction/interaction_sequence_views_unittest.cc b/ui/views/interaction/interaction_sequence_views_unittest.cc
index 41ea61d..e2b7159 100644
--- a/ui/views/interaction/interaction_sequence_views_unittest.cc
+++ b/ui/views/interaction/interaction_sequence_views_unittest.cc
@@ -176,10 +176,10 @@
   }
 
   std::unique_ptr<Widget> widget_;
-  raw_ptr<View> contents_ = nullptr;
-  raw_ptr<Widget> bubble_widget_ = nullptr;
-  raw_ptr<LabelButton> label_button_ = nullptr;
-  raw_ptr<LabelButton> no_id_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> contents_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> bubble_widget_ = nullptr;
+  raw_ptr<LabelButton, DanglingUntriaged> label_button_ = nullptr;
+  raw_ptr<LabelButton, DanglingUntriaged> no_id_view_ = nullptr;
   std::unique_ptr<ui::SimpleMenuModel> menu_model_;
   std::unique_ptr<MenuRunner> menu_runner_;
   ui::SafeElementReference menu_element_;
diff --git a/ui/views/interaction/interaction_test_util_views_unittest.cc b/ui/views/interaction/interaction_test_util_views_unittest.cc
index 1c9b0ed..35d7310 100644
--- a/ui/views/interaction/interaction_test_util_views_unittest.cc
+++ b/ui/views/interaction/interaction_test_util_views_unittest.cc
@@ -203,10 +203,10 @@
  protected:
   std::unique_ptr<ui::test::InteractionTestUtil> test_util_;
   std::unique_ptr<Widget> widget_;
-  raw_ptr<View> contents_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> contents_ = nullptr;
   std::unique_ptr<ui::SimpleMenuModel> menu_model_;
   std::unique_ptr<MenuRunner> menu_runner_;
-  raw_ptr<MenuItemView> menu_item_ = nullptr;
+  raw_ptr<MenuItemView, DanglingUntriaged> menu_item_ = nullptr;
 };
 
 TEST_P(InteractionTestUtilViewsTest, PressButton) {
diff --git a/ui/views/interaction/interactive_views_test_unittest.cc b/ui/views/interaction/interactive_views_test_unittest.cc
index 01820b5..30883e1 100644
--- a/ui/views/interaction/interactive_views_test_unittest.cc
+++ b/ui/views/interaction/interactive_views_test_unittest.cc
@@ -128,12 +128,12 @@
       base::MockCallback<Button::PressedCallback::Callback>>;
 
   std::unique_ptr<Widget> widget_;
-  raw_ptr<FlexLayoutView> contents_;
-  raw_ptr<TabbedPane> tabs_;
-  raw_ptr<FlexLayoutView> buttons_;
-  raw_ptr<LabelButton> button1_;
-  raw_ptr<LabelButton> button2_;
-  raw_ptr<ScrollView> scroll_;
+  raw_ptr<FlexLayoutView, DanglingUntriaged> contents_;
+  raw_ptr<TabbedPane, DanglingUntriaged> tabs_;
+  raw_ptr<FlexLayoutView, DanglingUntriaged> buttons_;
+  raw_ptr<LabelButton, DanglingUntriaged> button1_;
+  raw_ptr<LabelButton, DanglingUntriaged> button2_;
+  raw_ptr<ScrollView, DanglingUntriaged> scroll_;
   ButtonCallbackMock button1_callback_;
   ButtonCallbackMock button2_callback_;
 };
diff --git a/ui/views/layout/animating_layout_manager_unittest.cc b/ui/views/layout/animating_layout_manager_unittest.cc
index 2999e3b7..69c313d 100644
--- a/ui/views/layout/animating_layout_manager_unittest.cc
+++ b/ui/views/layout/animating_layout_manager_unittest.cc
@@ -258,9 +258,10 @@
   const bool enable_animations_;
   ProposedLayout layout1_;
   ProposedLayout layout2_;
-  raw_ptr<View> view_;
+  raw_ptr<View, DanglingUntriaged> view_;
   std::vector<TestView*> children_;
-  raw_ptr<AnimatingLayoutManager> animating_layout_manager_ = nullptr;
+  raw_ptr<AnimatingLayoutManager, DanglingUntriaged> animating_layout_manager_ =
+      nullptr;
   base::test::TaskEnvironment task_environment_;
   std::unique_ptr<gfx::AnimationContainerTestApi> container_test_api_;
   RenderModeLock render_mode_lock_;
@@ -4211,7 +4212,7 @@
   static const FlexSpecification kScaleToMinimumSnapToZero;
 
  private:
-  raw_ptr<FlexLayout> flex_layout_;
+  raw_ptr<FlexLayout, DanglingUntriaged> flex_layout_;
   FlexRule flex_rule_;
 };
 
@@ -5186,10 +5187,10 @@
 
   using WidgetAutoclosePtr = std::unique_ptr<Widget, WidgetCloser>;
 
-  raw_ptr<AnimatingLayoutManager> layout_manager_ = nullptr;
-  raw_ptr<View> child_view_ = nullptr;
-  raw_ptr<View> parent_view_ = nullptr;
-  raw_ptr<View> layout_view_ = nullptr;
+  raw_ptr<AnimatingLayoutManager, DanglingUntriaged> layout_manager_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> child_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> parent_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> layout_view_ = nullptr;
   std::unique_ptr<View> parent_view_ptr_;
   std::unique_ptr<View> layout_view_ptr_;
   WidgetAutoclosePtr widget_;
diff --git a/ui/views/layout/fill_layout_unittest.cc b/ui/views/layout/fill_layout_unittest.cc
index a110adf..6c14b39 100644
--- a/ui/views/layout/fill_layout_unittest.cc
+++ b/ui/views/layout/fill_layout_unittest.cc
@@ -58,7 +58,7 @@
   }
 
   // The test target.
-  raw_ptr<FillLayout> layout_ = nullptr;
+  raw_ptr<FillLayout, DanglingUntriaged> layout_ = nullptr;
 
   std::unique_ptr<View> host_;
 };
diff --git a/ui/views/test/combobox_test_api.h b/ui/views/test/combobox_test_api.h
index ef07a10..9650f2f 100644
--- a/ui/views/test/combobox_test_api.h
+++ b/ui/views/test/combobox_test_api.h
@@ -41,7 +41,7 @@
   ui::MenuModel* menu_model();
 
  private:
-  raw_ptr<Combobox> combobox_;
+  raw_ptr<Combobox, DanglingUntriaged> combobox_;
 };
 
 }  // namespace test
diff --git a/ui/views/test/focus_manager_test.h b/ui/views/test/focus_manager_test.h
index f1e0f97f..ee5e2e8 100644
--- a/ui/views/test/focus_manager_test.h
+++ b/ui/views/test/focus_manager_test.h
@@ -55,7 +55,7 @@
   void SetAccessiblePanes(const std::vector<View*>& panes);
 
  private:
-  raw_ptr<View> contents_view_;
+  raw_ptr<View, DanglingUntriaged> contents_view_;
   raw_ptr<FocusChangeListener> focus_change_listener_ = nullptr;
   raw_ptr<WidgetFocusChangeListener> widget_focus_change_listener_ = nullptr;
   std::vector<View*> accessible_panes_;
diff --git a/ui/views/test/menu_test_utils.h b/ui/views/test/menu_test_utils.h
index 74d3be9..21145991 100644
--- a/ui/views/test/menu_test_utils.h
+++ b/ui/views/test/menu_test_utils.h
@@ -72,7 +72,7 @@
   int show_context_menu_count_ = 0;
 
   // The value of the last call to ShowContextMenu.
-  raw_ptr<MenuItemView> show_context_menu_source_ = nullptr;
+  raw_ptr<MenuItemView, DanglingUntriaged> show_context_menu_source_ = nullptr;
 
   // ID of last executed command.
   int execute_command_id_ = 0;
@@ -81,13 +81,13 @@
   int on_menu_closed_called_count_ = 0;
 
   // The value of the last call to OnMenuClosed.
-  raw_ptr<MenuItemView> on_menu_closed_menu_ = nullptr;
+  raw_ptr<MenuItemView, DanglingUntriaged> on_menu_closed_menu_ = nullptr;
 
   // The number of times WillHideMenu was called.
   int will_hide_menu_count_ = 0;
 
   // The value of the last call to WillHideMenu.
-  raw_ptr<MenuItemView> will_hide_menu_ = nullptr;
+  raw_ptr<MenuItemView, DanglingUntriaged> will_hide_menu_ = nullptr;
 
   bool is_drop_performed_ = false;
 
diff --git a/ui/views/test/widget_test.h b/ui/views/test/widget_test.h
index 8319064e..8d2b839 100644
--- a/ui/views/test/widget_test.h
+++ b/ui/views/test/widget_test.h
@@ -232,7 +232,7 @@
 
  private:
   raw_ptr<Widget> widget_;
-  raw_ptr<View> contents_view_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> contents_view_ = nullptr;
   int window_closing_count_ = 0;
   gfx::Rect initial_bounds_ = gfx::Rect(100, 100, 200, 200);
   bool can_close_ = true;
diff --git a/ui/views/touchui/touch_selection_controller_impl_unittest.cc b/ui/views/touchui/touch_selection_controller_impl_unittest.cc
index 8213c8a..24ffdae9 100644
--- a/ui/views/touchui/touch_selection_controller_impl_unittest.cc
+++ b/ui/views/touchui/touch_selection_controller_impl_unittest.cc
@@ -369,10 +369,10 @@
         views::Widget::ClosedReason::kUnspecified);
   }
 
-  raw_ptr<Widget> textfield_widget_ = nullptr;
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> textfield_widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
 
-  raw_ptr<Textfield> textfield_ = nullptr;
+  raw_ptr<Textfield, DanglingUntriaged> textfield_ = nullptr;
   std::unique_ptr<TextfieldTestApi> textfield_test_api_;
   std::unique_ptr<ViewsTouchEditingControllerFactory> views_tsc_factory_;
   std::unique_ptr<aura::test::TestCursorClient> test_cursor_client_;
diff --git a/ui/views/view.h b/ui/views/view.h
index 4d4bb5c..eec8861 100644
--- a/ui/views/view.h
+++ b/ui/views/view.h
@@ -115,7 +115,7 @@
 
   bool is_add = false;
   // New parent if |is_add| is true, old parent if |is_add| is false.
-  raw_ptr<View> parent = nullptr;
+  raw_ptr<View, DanglingUntriaged> parent = nullptr;
   // The view being added or removed.
   raw_ptr<View> child = nullptr;
   // If this is a move (reparent), meaning AddChildViewAt() is invoked with an
@@ -126,7 +126,7 @@
   // being removed.
   // For the add part of move, |move_view| is the old parent of the View being
   // added.
-  raw_ptr<View> move_view = nullptr;
+  raw_ptr<View, DanglingUntriaged> move_view = nullptr;
 };
 
 using PropertyChangedCallback = ui::metadata::PropertyChangedCallback;
diff --git a/ui/views/view_unittest.cc b/ui/views/view_unittest.cc
index e28c22f..3d4476a 100644
--- a/ui/views/view_unittest.cc
+++ b/ui/views/view_unittest.cc
@@ -1151,7 +1151,7 @@
   Widget* operator->() { return widget_; }
 
  private:
-  raw_ptr<Widget> widget_;
+  raw_ptr<Widget, DanglingUntriaged> widget_;
 };
 
 }  // namespace
@@ -4577,7 +4577,7 @@
   void SchedulePaintOnParent(View* view) { view->SchedulePaintOnParent(); }
 
  private:
-  raw_ptr<Widget> widget_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
   base::test::ScopedFeatureList scoped_feature_list_;
 };
 
@@ -6346,14 +6346,14 @@
   int child_view_added_times_ = 0;
   int child_view_removed_times_ = 0;
 
-  raw_ptr<View> child_view_added_parent_ = nullptr;
-  raw_ptr<View> child_view_added_ = nullptr;
-  raw_ptr<View> child_view_removed_ = nullptr;
-  raw_ptr<View> child_view_removed_parent_ = nullptr;
-  raw_ptr<View> view_visibility_changed_ = nullptr;
-  raw_ptr<View> view_visibility_changed_starting_ = nullptr;
-  raw_ptr<View> view_bounds_changed_ = nullptr;
-  raw_ptr<View> view_reordered_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> child_view_added_parent_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> child_view_added_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> child_view_removed_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> child_view_removed_parent_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> view_visibility_changed_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> view_visibility_changed_starting_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> view_bounds_changed_ = nullptr;
+  raw_ptr<View, DanglingUntriaged> view_reordered_ = nullptr;
 };
 
 TEST_F(ViewObserverTest, ViewParentChanged) {
diff --git a/ui/views/widget/desktop_aura/desktop_drag_drop_client_ozone.h b/ui/views/widget/desktop_aura/desktop_drag_drop_client_ozone.h
index 310ad1d..a4e96a0a 100644
--- a/ui/views/widget/desktop_aura/desktop_drag_drop_client_ozone.h
+++ b/ui/views/widget/desktop_aura/desktop_drag_drop_client_ozone.h
@@ -138,7 +138,7 @@
   aura::Window* root_window() { return root_window_; }
 
  private:
-  const raw_ptr<aura::Window> root_window_;
+  const raw_ptr<aura::Window, DanglingUntriaged> root_window_;
 
   const raw_ptr<ui::WmDragHandler> drag_handler_;
 
diff --git a/ui/views/widget/desktop_aura/desktop_native_widget_aura_unittest.cc b/ui/views/widget/desktop_aura/desktop_native_widget_aura_unittest.cc
index a8dd4c1..ba1bcbc 100644
--- a/ui/views/widget/desktop_aura/desktop_native_widget_aura_unittest.cc
+++ b/ui/views/widget/desktop_aura/desktop_native_widget_aura_unittest.cc
@@ -423,7 +423,8 @@
     ViewsTestBase::TearDown();
   }
 
-  raw_ptr<TestDesktopNativeWidgetAura> desktop_native_widget_;
+  raw_ptr<TestDesktopNativeWidgetAura, DanglingUntriaged>
+      desktop_native_widget_;
 };
 
 TEST_F(DesktopNativeWidgetAuraWithNoDelegateTest, GetHitTestMaskTest) {
@@ -631,8 +632,8 @@
 
  private:
   views::Widget widget_;
-  raw_ptr<views::Widget> top_level_widget_ = nullptr;
-  raw_ptr<aura::Window> owned_window_ = nullptr;
+  raw_ptr<views::Widget, DanglingUntriaged> top_level_widget_ = nullptr;
+  raw_ptr<aura::Window, DanglingUntriaged> owned_window_ = nullptr;
   bool owner_destroyed_ = false;
   bool owned_window_destroyed_ = false;
   aura::test::TestWindowDelegate child_window_delegate_;
diff --git a/ui/views/widget/native_widget_aura_unittest.cc b/ui/views/widget/native_widget_aura_unittest.cc
index 72587a88..9c0ad27 100644
--- a/ui/views/widget/native_widget_aura_unittest.cc
+++ b/ui/views/widget/native_widget_aura_unittest.cc
@@ -966,7 +966,7 @@
     ViewsTestBase::TearDown();
   }
 
-  raw_ptr<TestNativeWidgetAura> native_widget_;
+  raw_ptr<TestNativeWidgetAura, DanglingUntriaged> native_widget_;
 };
 
 TEST_F(NativeWidgetAuraWithNoDelegateTest, GetHitTestMaskTest) {
diff --git a/ui/views/widget/native_widget_unittest.cc b/ui/views/widget/native_widget_unittest.cc
index 663d4c9..2df3f21 100644
--- a/ui/views/widget/native_widget_unittest.cc
+++ b/ui/views/widget/native_widget_unittest.cc
@@ -30,7 +30,7 @@
   internal::NativeWidgetPrivate* get() const { return native_widget_; }
 
  private:
-  raw_ptr<internal::NativeWidgetPrivate> native_widget_;
+  raw_ptr<internal::NativeWidgetPrivate, DanglingUntriaged> native_widget_;
 };
 
 class NativeWidgetTest : public ViewsTestBase {
diff --git a/ui/views/widget/widget_unittest.cc b/ui/views/widget/widget_unittest.cc
index 1ae66541..75d3eb6 100644
--- a/ui/views/widget/widget_unittest.cc
+++ b/ui/views/widget/widget_unittest.cc
@@ -2110,12 +2110,12 @@
  private:
   raw_ptr<Widget> active_ = nullptr;
 
-  raw_ptr<Widget> widget_closed_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_closed_ = nullptr;
   raw_ptr<Widget> widget_activated_ = nullptr;
-  raw_ptr<Widget> widget_deactivated_ = nullptr;
-  raw_ptr<Widget> widget_shown_ = nullptr;
-  raw_ptr<Widget> widget_hidden_ = nullptr;
-  raw_ptr<Widget> widget_bounds_changed_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_deactivated_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_shown_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_hidden_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_bounds_changed_ = nullptr;
 
   raw_ptr<Widget> widget_to_close_on_hide_ = nullptr;
 };
@@ -2841,7 +2841,8 @@
     }
   };
 
-  raw_ptr<DesktopAuraTestValidPaintWidget> paint_widget_ = nullptr;
+  raw_ptr<DesktopAuraTestValidPaintWidget, DanglingUntriaged> paint_widget_ =
+      nullptr;
 };
 
 TEST_F(DesktopAuraPaintWidgetTest, DesktopNativeWidgetNoPaintAfterCloseTest) {
@@ -3207,8 +3208,8 @@
     }
   }
 
-  raw_ptr<EventCountView> event_count_view_;
-  raw_ptr<Widget> widget_;
+  raw_ptr<EventCountView, DanglingUntriaged> event_count_view_;
+  raw_ptr<Widget, DanglingUntriaged> widget_;
 };
 
 }  // namespace
@@ -3267,7 +3268,7 @@
   }
 
  private:
-  raw_ptr<Widget> widget_;
+  raw_ptr<Widget, DanglingUntriaged> widget_;
 };
 
 class ClosingView : public View {
diff --git a/ui/views/widget/window_reorderer.h b/ui/views/widget/window_reorderer.h
index 7709ebf..460aa4d7 100644
--- a/ui/views/widget/window_reorderer.h
+++ b/ui/views/widget/window_reorderer.h
@@ -49,7 +49,7 @@
   // The window and the root view of the native widget which owns the
   // WindowReorderer.
   raw_ptr<aura::Window> parent_window_;
-  raw_ptr<View> root_view_;
+  raw_ptr<View, DanglingUntriaged> root_view_;
 
   // Reorders windows as a result of the kHostViewKey being set on a child of
   // |parent_window_|.
diff --git a/ui/views/widget/window_reorderer_unittest.cc b/ui/views/widget/window_reorderer_unittest.cc
index 33d871e..97d1662 100644
--- a/ui/views/widget/window_reorderer_unittest.cc
+++ b/ui/views/widget/window_reorderer_unittest.cc
@@ -50,7 +50,7 @@
   }
 
  private:
-  raw_ptr<aura::Window> parent_ = nullptr;
+  raw_ptr<aura::Window, DanglingUntriaged> parent_ = nullptr;
 };
 
 // Test that views with layers and views with associated windows are reordered
diff --git a/ui/views/window/custom_frame_view_unittest.cc b/ui/views/window/custom_frame_view_unittest.cc
index 47fdba57..f743ebc 100644
--- a/ui/views/window/custom_frame_view_unittest.cc
+++ b/ui/views/window/custom_frame_view_unittest.cc
@@ -66,10 +66,10 @@
   std::unique_ptr<WidgetDelegate> widget_delegate_;
 
   // Parent container for |custom_frame_view_|
-  raw_ptr<Widget> widget_;
+  raw_ptr<Widget, DanglingUntriaged> widget_;
 
   // Owned by |widget_|
-  raw_ptr<CustomFrameView> custom_frame_view_;
+  raw_ptr<CustomFrameView, DanglingUntriaged> custom_frame_view_;
 };
 
 void CustomFrameViewTest::SetUp() {
diff --git a/ui/views/window/dialog_client_view_unittest.cc b/ui/views/window/dialog_client_view_unittest.cc
index d0525cb..7f8d20a4 100644
--- a/ui/views/window/dialog_client_view_unittest.cc
+++ b/ui/views/window/dialog_client_view_unittest.cc
@@ -180,8 +180,8 @@
 
   // The dialog Widget.
   std::unique_ptr<test::TestLayoutProvider> layout_provider_;
-  raw_ptr<Widget> widget_ = nullptr;
-  raw_ptr<DialogDelegateView> delegate_ = nullptr;
+  raw_ptr<Widget, DanglingUntriaged> widget_ = nullptr;
+  raw_ptr<DialogDelegateView, DanglingUntriaged> delegate_ = nullptr;
 
   gfx::Size preferred_size_;
   gfx::Size min_size_;
diff --git a/ui/views/window/dialog_delegate_unittest.cc b/ui/views/window/dialog_delegate_unittest.cc
index 263f190..336c8f12 100644
--- a/ui/views/window/dialog_delegate_unittest.cc
+++ b/ui/views/window/dialog_delegate_unittest.cc
@@ -153,7 +153,7 @@
 
  private:
   std::unique_ptr<views::Widget> parent_widget_;
-  raw_ptr<TestDialog> dialog_ = nullptr;
+  raw_ptr<TestDialog, DanglingUntriaged> dialog_ = nullptr;
 };
 
 }  // namespace
diff --git a/ui/wm/core/cursor_manager_unittest.cc b/ui/wm/core/cursor_manager_unittest.cc
index 552a053..61fb30e 100644
--- a/ui/wm/core/cursor_manager_unittest.cc
+++ b/ui/wm/core/cursor_manager_unittest.cc
@@ -51,7 +51,7 @@
       : delegate_(new TestingCursorManager),
         cursor_manager_(base::WrapUnique(delegate_.get())) {}
 
-  raw_ptr<TestingCursorManager> delegate_;
+  raw_ptr<TestingCursorManager, DanglingUntriaged> delegate_;
   wm::CursorManager cursor_manager_;
 };
 
diff --git a/ui/wm/core/focus_controller_unittest.cc b/ui/wm/core/focus_controller_unittest.cc
index 4b1b8a3..2f91e80 100644
--- a/ui/wm/core/focus_controller_unittest.cc
+++ b/ui/wm/core/focus_controller_unittest.cc
@@ -281,7 +281,7 @@
 
  private:
   raw_ptr<aura::Window> root_;
-  raw_ptr<aura::Window> window_;
+  raw_ptr<aura::Window, DanglingUntriaged> window_;
   const bool delete_on_activating_;
   const bool delete_window_losing_active_;
   bool did_delete_;
@@ -322,7 +322,7 @@
 
  private:
   raw_ptr<aura::Window> root_;
-  raw_ptr<aura::Window> window_;
+  raw_ptr<aura::Window, DanglingUntriaged> window_;
   bool did_delete_;
 };
 
@@ -370,7 +370,7 @@
   }
 
  private:
-  raw_ptr<aura::Window> target_;
+  raw_ptr<aura::Window, DanglingUntriaged> target_;
   aura::WindowTracker tracker_;
 };