consent-engine v0.6.7
feat: v0.6.7 — distinct UK jurisdiction (UK GDPR / PECR / ICO)
The UK is now its own jurisdiction instead of folding into EU/GDPR. A .co.uk
site, an en-GB site on a generic TLD (bbc.com), or a GB geolocation now renders
UK GDPR + PECR + ICO and the £17.5M / 4% turnover cap, not EU GDPR + CNIL + €20M.
- Detection: _UK_TLDS + _uk_signals() route GB sites to "UK" in
detect_jurisdiction ahead of the EU branch; GB removed from the EU country set;
country_to_jurisdiction("GB") -> "UK". - Exposure: UK entry in _JURISDICTION_EXPOSURE (turnover_cap; UK GDPR Art 83
£17.5M / £8.7M, PECR reg 6, ICO). No flagship UK cookie fine exists, so no
anchor is cited (the same honesty guardrail as Canada). - Report + deck: UK branches in applicable-law, statute kicker, exec-summary law
label, pixel-exposure callout, jurisdiction label; jurisdiction_copy("UK")
supplies UK GDPR / PECR / ICO phrasing; UK shares the EU opt-in GPC framing.
Validated: .co.uk + en-GB .com -> UK; synthetic UK report/deck shows UK GDPR /
PECR / ICO / £17.5M with zero CNIL / €20M / Sephora. 155 passed, 1 skipped;
ruff + mypy strict clean.
Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com