Summary
Replaces the content-script Allow once path with strict Cancel/Redact decisions.
Adds local, session-scoped protection pause state for consumer mode.
Adds policy fields so enterprise redaction/blocking cannot be bypassed by pause, including fail-closed behavior.
Bumps release metadata to v1.6.0.
Impact
Consumer users can pause protection temporarily when policy permits it. Enterprise users remain governed by managed policy: destination blocks, destination redaction, HTTP-secret enforcement, and fail-closed policy all override pause.

Validation
node tests/enterprise_policy.test.js
node tests/typed_interception.test.js
node tests/content_file_drop_interception.test.js
node tests/content_allow_once_interaction.test.js
node tests/build_targets.test.js
npm test