The install tool now states the consent boundary directly: it should only run after the user asks to install the exact catalog id. This is the recommended plugin release; the catalog, installer, and three-platform test coverage are unchanged from v0.2.0.