Changelog

Per-site permission tiers (deny/read/full) enforced in the extension. reins policy shows and tightens policy; grants are popup-only. New bridge methods policy_get/policy_tighten; denied tabs are redacted in list_tabs. Default remains full access everywhere.

New reins extension command: install the extension without the Chrome Web Store. The npm package now bundles the extension build with a key-pinned, pre-allowlisted id — reins extension stages it at ~/.reins/extension for Chrome's Load unpacked, no reins allow step. See docs/SIDELOAD.md.