standdown v0.2.0

Minor release. The published 0.1.1 predated several shipped features now on main; this is the first release to include them.

Added

• selfExemptionScope: 'policy' | 'session' on the session, webext, and content surfaces. 'session' persists a network-precise self-exemption for a host (Dupe ignore_param semantics) that re-applies to that network's later signals; default 'policy' stays per-navigation. New exports ExemptionRecord, SelfExemptScope. Exemptions are recorded only when no stand-down is active and never lift one, preserving fail-toward-standing-down; they persist through the store layer and drop on a new browser session.
• detection.disableHosts — per-host hard-disable primitive, immune to session exemptions.
• Degraded marker on non-stand-down decisions made under partial coverage, distinguishing "no attribution found" from "couldn't fully observe."

Changed

• Impact and Rakuten packs set to session-only durations; documented session-or-min semantics.
• Bundled policy packs aligned with production ground truth; dropped the unenforced prompt-cap field.
• README merchandises the guarantees up front, documents the black-box conformance grader, and shows the affiliate networks the bundled packs cover. Cookie matching documented as name-only.

Notes

• The audit/ conformance harness and CI policy-conformance suite were added this cycle but do not ship in the npm package (files: dist, README.md, LICENSE, POLICIES.md).

Full changelog: CHANGELOG.md