[blessdyb]

Summary

• add three official, disabled-by-default network ad/tracker packs with global or selected-app scope
• enforce validated, indexed snapshots atomically in the Network Extension with fail-open reconnect and precedence guarantees
• add reviewed activation, retained-traffic preview, scoped exceptions, aggregated activity, localization, and network-only documentation
• bind consent to exact pack content and preserve exactly-once, provenance-complete activity across retries and updates

Verification

• xcodebuild test: 686 tests, 0 failures
• localization: 1,588/1,588 keys in all 10 locales
• static site: 53 pages, 0 problems
• final local build launched with a visible 1600×994 window
• strict deep code signature verification passed
• embedded Network Extension: 0.15.0/23

🤖 Generated with Claude Code