consent-engine v0.6.0
feat: v0.6.0 accuracy sprint — 6 CMP introspectors + 100 vendors + false-positive cleanup
- Fix CMP/session/CDN false positives in vendor findings table
(legacy OneTrust cookies on Truyo sites, JSESSIONID, AKA_A2, _abck, AWSALB) - Add 5 more CMP runtime introspectors (Cookiebot, CookieYes, Didomi,
Usercentrics, Truyo) — total now 6 of the top market-share CMPs - New extract_cmp_runtime() dispatcher routes to right extractor
- Add 10 new CMP detection rules: CookieFirst, TermsFeed, WireWheel,
Termageddon, PrivacyConsent, Cassie, CookiePro, Tealium, InMobi, Sirdata - Add 9 new consent-event recognizers: Truyo, Ketch, Shopify, Tealium,
Sourcepoint, TrustArc, CookieFirst, Klaro, iubenda - Expand vendor library +18 enterprise vendors with full legal annotations:
Adobe Marketing Cloud trio, Hotjar, Microsoft Clarity, Mixpanel, Heap,
Amplitude, Segment, HubSpot, Marketo, Pardot, Klaviyo, Drift, Intercom,
Zendesk, LiveRamp, LiveIntent - vendors.json: 82 → 100, CMP introspectors: 1 → 6, event recognizers: 9 → 18
Smoke: oreillyauto.com vendor findings 9 → 5 (all 5 are real violations);
legacy OneTrust cookies surface in Open Gaps. 70 tests pass, ruff + mypy
strict-clean.
Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com