v2.4.0 Release Notes

AI Governance & Site Blocking
- Organizations can now designate AI tools as sanctioned or restricted. When an employee navigates to a restricted AI app, the extension blocks the page and shows an interstitial where they can request access from their admin.
- Blocking rules are pushed from the Unpak desktop app via native messaging and enforced using the declarativeNetRequest API.
- Live tab enforcement: if an admin updates the blocked list, already-open tabs on restricted sites are immediately redirected.

New Permissions
- declarativeNetRequestWithHostAccess: enforces site-blocking rules on AI tool domains.
- storage: persists the sanctioned/restricted app list between service worker restarts.
- tabs: enables redirection to the blocked page and live updates of open tabs when policy changes.

Bug Fixes & Improvements
- Hardened enforcement sync to prevent duplicate or stale blocking rules.
- Improved reconnection reliability for native messaging.
- Performance improvements to content script initialization.