',
+ RELEASES_SOURCE.read_text(),
+)
+if not release_match:
+ sys.exit(f"site/pages/releases.html has no dated release entry for {VERSION}")
+SOURCE_DATE = release_match.group(1)
def counts():
@@ -48,7 +56,7 @@ def counts():
COUNTS = counts()
-YEAR = str(datetime.date.today().year)
+YEAR = SOURCE_DATE[:4]
# The fonts are in site.css and served from this domain, so a page needs no third-party stylesheet and makes
# no request to Google to render itself. See the @font-face block at the top of site/site.css.
FONTS = ""
@@ -161,20 +169,21 @@ def one(match):
def last_changed(*paths):
- """The newest date among a generated page's inputs — or today, if any input is edited.
+ """The newest committed date among a page's inputs, bounded by the release source date.
A page is almost always rebuilt *before* the commit that changes it, so asking git alone answers with the
- previous commit's date, and the same build run after committing answers with today's. The site is then
+ previous commit's date, and the same build run after committing answers with the release date. The site is then
permanently one rebuild behind itself and CI fails on a one-line sitemap diff that nobody can see the cause
- of. An edited input is dated today, which is what the commit about to be made will say. Every page also embeds
- the version from project.yml, so a release bump is a real modification even when that page's own source is not.
+ of. An edited input therefore uses the dated release entry. Every page also embeds the version from project.yml,
+ so a release bump is a real modification even when that page's own source is not. The release date is also the
+ deterministic fallback when Git metadata is unavailable; filesystem mtimes must never affect published bytes.
"""
try:
arguments = [str(path) for path in paths]
dirty = subprocess.run(["git", "status", "--porcelain", "--", *arguments],
cwd=ROOT, capture_output=True, text=True, timeout=10)
if dirty.returncode == 0 and dirty.stdout.strip():
- return datetime.date.today().isoformat()
+ return SOURCE_DATE
dates = []
for path in paths:
out = subprocess.run(["git", "log", "-1", "--format=%cs", "--", str(path)],
@@ -182,10 +191,10 @@ def last_changed(*paths):
if out.returncode == 0 and out.stdout.strip():
dates.append(out.stdout.strip())
if dates:
- return max(dates)
+ return min(max(dates), SOURCE_DATE)
except Exception:
pass
- return max(datetime.date.fromtimestamp(pathlib.Path(path).stat().st_mtime).isoformat() for path in paths)
+ return SOURCE_DATE
def asset_hash(rel):
return hashlib.sha256((OUT / rel).read_bytes()).hexdigest()[:8]
diff --git a/scripts/rule_pack_catalog.py b/scripts/rule_pack_catalog.py
index 7fda5dc8..654246bd 100755
--- a/scripts/rule_pack_catalog.py
+++ b/scripts/rule_pack_catalog.py
@@ -43,6 +43,55 @@
PACK_ID = re.compile(r"official\.[A-Za-z0-9.-]+\Z")
HEX_SHA256 = re.compile(r"[0-9a-f]{64}\Z")
+# official.tracking is deliberately an evidence-backed allowlist. Hostname filtering cannot separate a provider's
+# product/control plane from collection paths on the same host, so every accepted entry must be a dedicated collector
+# or tracker-bootstrap endpoint reviewed alongside this policy. Adding a destination requires changing both files.
+TRACKING_ALLOWED_ENTRIES = {
+ ("api.eu.amplitude.com", "exact"),
+ ("api-eu.mixpanel.com", "exact"),
+ ("api-in.mixpanel.com", "exact"),
+ ("api-js.mixpanel.com", "exact"),
+ ("api.mixpanel.com", "exact"),
+ ("api.segment.io", "exact"),
+ ("api2.amplitude.com", "exact"),
+ ("browser-intake-ap1-datadoghq.com", "exact"),
+ ("browser-intake-ap2-datadoghq.com", "exact"),
+ ("browser-intake-datadoghq.com", "suffix"),
+ ("browser-intake-datadoghq.eu", "exact"),
+ ("browser-intake-ddog-gov.com", "exact"),
+ ("browser-intake-uk1-datadoghq.com", "exact"),
+ ("browser-intake-us2-ddog-gov.com", "exact"),
+ ("browser-intake-us3-datadoghq.com", "exact"),
+ ("browser-intake-us5-datadoghq.com", "exact"),
+ ("c.eu.heap-api.com", "exact"),
+ ("c.us.heap-api.com", "exact"),
+ ("cdn.eu.heap-api.com", "exact"),
+ ("cdn.heapanalytics.com", "exact"),
+ ("cdn.matomo.cloud", "exact"),
+ ("cdn.mxpnl.com", "exact"),
+ ("cdn.us.heap-api.com", "exact"),
+ ("clarity.ms", "suffix"),
+ ("edge.eu1.fullstory.com", "exact"),
+ ("edge.fullstory.com", "exact"),
+ ("eu-assets.i.posthog.com", "exact"),
+ ("eu.i.posthog.com", "exact"),
+ ("events.eu1.segmentapis.com", "exact"),
+ ("events.statsigapi.net", "exact"),
+ ("google-analytics.com", "suffix"),
+ ("googletagmanager.com", "suffix"),
+ ("lr-ingest.com", "suffix"),
+ ("lr-ingest.io", "suffix"),
+ ("lr-intake.com", "suffix"),
+ ("lrkt-in.com", "suffix"),
+ ("prodregistryv2.org", "suffix"),
+ ("r.logrocket.com", "exact"),
+ ("rs.eu1.fullstory.com", "exact"),
+ ("rs.fullstory.com", "exact"),
+ ("services.fullstory.com", "exact"),
+ ("us-assets.i.posthog.com", "exact"),
+ ("us.i.posthog.com", "exact"),
+}
+
class CatalogError(ValueError):
"""The catalog cannot be validated or canonicalized."""
@@ -163,7 +212,7 @@ def validate_der_signature(data, where):
fail(f"{where} has extra DER elements")
-def validate(catalog, *, require_signature=False):
+def validate(catalog, *, require_signature=False, enforce_tracking_policy=True):
exact_fields(catalog, ENVELOPE_FIELDS, "catalog")
integer(catalog["format"], "catalog.format", 1, 1)
payload = catalog["payload"]
@@ -232,6 +281,10 @@ def validate(catalog, *, require_signature=False):
match = string(entry["match"], f"{entry_where}.match")
if match not in ("exact", "suffix"):
fail(f"{entry_where}.match must be exact or suffix")
+ if (enforce_tracking_policy and pack_id == "official.tracking"
+ and (host, match) not in TRACKING_ALLOWED_ENTRIES):
+ fail(f"{entry_where}.host is not an approved dedicated tracking endpoint: "
+ f"{host!r} with {match} matching")
host_key = f"{host}|{match}"
if host_key in host_keys:
fail(f"{entry_where}.host and match are duplicated")
@@ -239,6 +292,8 @@ def validate(catalog, *, require_signature=False):
category = string(entry["category"], f"{entry_where}.category")
if category not in ("advertising", "tracking", "telemetry"):
fail(f"{entry_where}.category is unsupported")
+ if pack_id == "official.tracking" and category != "tracking":
+ fail(f"{entry_where}.category must be tracking for official.tracking")
if previous_key is not None and previous_key >= host_key:
fail(f"{pack_where}.entries are not strictly sorted by host|match")
previous_key = host_key
@@ -295,9 +350,9 @@ def text(value):
return u32(len(encoded)) + encoded
-def canonical_bytes(catalog):
+def canonical_bytes(catalog, *, enforce_tracking_policy=True):
"""Return canonical signed bytes, raising CatalogError for every invalid input."""
- validate(catalog)
+ validate(catalog, enforce_tracking_policy=enforce_tracking_policy)
payload = catalog["payload"]
out = bytearray(text(DOMAIN))
out += u16(catalog["format"])
@@ -337,7 +392,7 @@ def no_duplicate_object(pairs):
return result
-def decode(raw, source, *, require_signature=False):
+def decode(raw, source, *, require_signature=False, enforce_tracking_policy=True):
if len(raw) > MAX_FILE_BYTES:
fail(f"{source} exceeds the {MAX_FILE_BYTES}-byte limit")
try:
@@ -346,19 +401,21 @@ def decode(raw, source, *, require_signature=False):
fail(f"{source} is not UTF-8")
except json.JSONDecodeError as error:
fail(f"{source} is not valid JSON: {error.msg} at line {error.lineno}, column {error.colno}")
- return validate(catalog, require_signature=require_signature)
+ return validate(catalog, require_signature=require_signature,
+ enforce_tracking_policy=enforce_tracking_policy)
-def load(path, *, require_signature=False):
+def load(path, *, require_signature=False, enforce_tracking_policy=True):
path = pathlib.Path(path)
try:
raw = path.read_bytes()
except OSError as error:
fail(f"cannot read {path}: {error.strerror}")
- return decode(raw, str(path), require_signature=require_signature)
+ return decode(raw, str(path), require_signature=require_signature,
+ enforce_tracking_policy=enforce_tracking_policy)
-def load_git(ref, path, *, require_signature=False):
+def load_git(ref, path, *, require_signature=False, enforce_tracking_policy=True):
repository = pathlib.Path(__file__).resolve().parent.parent
try:
result = subprocess.run(
@@ -368,7 +425,8 @@ def load_git(ref, path, *, require_signature=False):
fail("git could not read the previous catalog")
if result.returncode:
fail(f"git could not read previous catalog {ref}:{path}")
- return decode(result.stdout, f"{ref}:{path}", require_signature=require_signature)
+ return decode(result.stdout, f"{ref}:{path}", require_signature=require_signature,
+ enforce_tracking_policy=enforce_tracking_policy)
def serialized(catalog):
@@ -450,12 +508,13 @@ def command_compare(args):
def command_compare_previous(args):
current = load(args.current, require_signature=True)
- previous = (load(args.previous, require_signature=True) if args.previous else
- load_git(args.previous_ref, args.previous_path, require_signature=True))
+ previous = (load(args.previous, require_signature=True, enforce_tracking_policy=False) if args.previous else
+ load_git(args.previous_ref, args.previous_path, require_signature=True,
+ enforce_tracking_policy=False))
current_sequence = current["payload"]["sequence"]
previous_sequence = previous["payload"]["sequence"]
current_digest = hashlib.sha256(canonical_bytes(current)).hexdigest()
- previous_digest = hashlib.sha256(canonical_bytes(previous)).hexdigest()
+ previous_digest = hashlib.sha256(canonical_bytes(previous, enforce_tracking_policy=False)).hexdigest()
if current_sequence < previous_sequence:
fail(f"catalog sequence rolled back from {previous_sequence} to {current_sequence}")
if current_sequence == previous_sequence and current_digest != previous_digest:
@@ -484,7 +543,8 @@ def command_sign(args):
def command_verify(args):
- catalog = load(args.input, require_signature=True)
+ catalog = load(args.input, require_signature=True,
+ enforce_tracking_policy=not args.historical)
if args.current_app_version is not None:
current = version_tuple(args.current_app_version, "--current-app-version")
for pack in catalog["payload"]["packs"]:
@@ -509,7 +569,7 @@ def command_verify(args):
fail("catalog is expired")
if len(args.public_key) != len(args.expected_key_id):
fail("each --expected-key-id must have one corresponding --public-key")
- canonical = canonical_bytes(catalog)
+ canonical = canonical_bytes(catalog, enforce_tracking_policy=not args.historical)
for expected_value, public_key in zip(args.expected_key_id, args.public_key):
expected = string(expected_value, "--expected-key-id")
matches = [signature for signature in catalog["signatures"] if signature["keyID"] == expected]
@@ -570,6 +630,8 @@ def parser():
verify.add_argument("--current-app-version")
verify.add_argument("--extension-protocol", type=int)
verify.add_argument("--now", type=int, help="also require the signed acceptance window to contain this Unix time")
+ verify.add_argument("--historical", action="store_true",
+ help="verify an immutable prior catalog without applying the current endpoint policy")
verify.set_defaults(run=command_verify)
digest = commands.add_parser("digest", help="print each validated pack's entry digest")
digest.add_argument("input", type=pathlib.Path)
diff --git a/scripts/test-rule-pack-policy.sh b/scripts/test-rule-pack-policy.sh
new file mode 100755
index 00000000..6789fdc1
--- /dev/null
+++ b/scripts/test-rule-pack-policy.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+set -euo pipefail
+
+cd "$(dirname "$0")/.."
+temporary=$(mktemp -d "${TMPDIR:-/tmp}/flowlight-pack-policy.XXXXXX")
+trap 'rm -rf "$temporary"' EXIT
+
+python3 -I scripts/rule_pack_catalog.py validate rule-packs/official-source.json > "$temporary/valid-output"
+
+python3 -I - rule-packs/official-source.json "$temporary/unreviewed-host.json" <<'PY'
+import json
+import pathlib
+import sys
+
+source = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"))
+tracking = next(pack for pack in source["payload"]["packs"] if pack["manifest"]["id"] == "official.tracking")
+tracking["entries"][0]["host"] = "amplitude.com"
+tracking["entries"][0]["match"] = "suffix"
+pathlib.Path(sys.argv[2]).write_text(json.dumps(source, indent=2) + "\n", encoding="utf-8")
+PY
+
+if python3 -I scripts/rule_pack_catalog.py validate "$temporary/unreviewed-host.json" \
+ > "$temporary/unreviewed-output" 2>&1; then
+ echo "unreviewed tracking host was not rejected" >&2
+ exit 1
+fi
+grep -Fq "is not an approved dedicated tracking endpoint: 'amplitude.com' with suffix matching" \
+ "$temporary/unreviewed-output"
+
+python3 -I - rule-packs/official-source.json "$temporary/wrong-category.json" <<'PY'
+import json
+import pathlib
+import sys
+
+source = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"))
+tracking = next(pack for pack in source["payload"]["packs"] if pack["manifest"]["id"] == "official.tracking")
+tracking["entries"][0]["category"] = "advertising"
+pathlib.Path(sys.argv[2]).write_text(json.dumps(source, indent=2) + "\n", encoding="utf-8")
+PY
+
+if python3 -I scripts/rule_pack_catalog.py validate "$temporary/wrong-category.json" \
+ > "$temporary/category-output" 2>&1; then
+ echo "misclassified tracking endpoint was not rejected" >&2
+ exit 1
+fi
+grep -Fq "category must be tracking for official.tracking" "$temporary/category-output"
+
+echo "Rule-pack policy fixtures passed: reviewed collectors allowed, product and unreviewed hosts rejected."
diff --git a/site/packs/v1/official.json b/site/packs/v1/official.json
index ea4a1c66..de463d5f 100644
--- a/site/packs/v1/official.json
+++ b/site/packs/v1/official.json
@@ -4,9 +4,9 @@
"catalogID": "flowlight.official",
"channel": "official",
"sourceURL": "https://flowlight.xinbetween.com/packs/v1/official.json",
- "sequence": 1,
- "issuedAt": 1792368000,
- "expiresAt": 1823904000,
+ "sequence": 2,
+ "issuedAt": 1793253368,
+ "expiresAt": 1824789368,
"publisher": "Flowlight",
"packs": [
{
@@ -314,15 +314,15 @@
{
"manifest": {
"id": "official.tracking",
- "version": "1",
- "generatedAt": 1792220400,
- "entryCount": 23,
- "contentSHA256": "57bdd11c751ebc24a785d429afd7d6a9282bb93e4cbe42f6725bd387fef64386",
+ "version": "2",
+ "generatedAt": 1793253368,
+ "entryCount": 43,
+ "contentSHA256": "2fa7a05ad9aba7c8ffe5fea8f7f33ca63e32a5759a4f8efe976497d6132d47b9",
"minimumAppVersion": "0.15.0",
"minimumExtensionProtocol": 1,
"titleKey": "Cross-site tracking",
- "summaryKey": "Common analytics, session replay, and cross-site measurement hosts.",
- "caveatKey": "Some apps use the same providers for feature flags. They may fall back to built-in defaults when a host is unavailable.",
+ "summaryKey": "Dedicated analytics collection, session replay, and tracker bootstrap hosts.",
+ "caveatKey": "Product dashboards stay reachable. Shared-host collection paths and first-party tracking proxies cannot be separated by hostname blocking.",
"source": "Flowlight curated built-in list",
"license": "GPL-3.0",
"format": 1
@@ -330,141 +330,261 @@
"entries": [
{
"id": 1,
- "host": "amplitude.com",
- "match": "suffix",
+ "host": "api-eu.mixpanel.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 2,
- "host": "analytics.google.com",
- "match": "suffix",
+ "host": "api-in.mixpanel.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 3,
- "host": "assetsconfigcdn.org",
- "match": "suffix",
+ "host": "api-js.mixpanel.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 4,
- "host": "beyondwickedmapping.org",
- "match": "suffix",
+ "host": "api.eu.amplitude.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 5,
- "host": "browser-intake-datadoghq.com",
- "match": "suffix",
+ "host": "api.mixpanel.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 6,
- "host": "clarity.ms",
- "match": "suffix",
+ "host": "api.segment.io",
+ "match": "exact",
"category": "tracking"
},
{
"id": 7,
- "host": "featureassets.org",
- "match": "suffix",
+ "host": "api2.amplitude.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 8,
- "host": "featuregates.org",
- "match": "suffix",
+ "host": "browser-intake-ap1-datadoghq.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 9,
- "host": "fullstory.com",
- "match": "suffix",
+ "host": "browser-intake-ap2-datadoghq.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 10,
- "host": "google-analytics.com",
+ "host": "browser-intake-datadoghq.com",
"match": "suffix",
"category": "tracking"
},
{
"id": 11,
- "host": "googletagmanager.com",
- "match": "suffix",
+ "host": "browser-intake-datadoghq.eu",
+ "match": "exact",
"category": "tracking"
},
{
"id": 12,
- "host": "heapanalytics.com",
- "match": "suffix",
+ "host": "browser-intake-ddog-gov.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 13,
- "host": "lr-ingest.io",
- "match": "suffix",
+ "host": "browser-intake-uk1-datadoghq.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 14,
- "host": "matomo.cloud",
- "match": "suffix",
+ "host": "browser-intake-us2-ddog-gov.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 15,
- "host": "mixpanel.com",
- "match": "suffix",
+ "host": "browser-intake-us3-datadoghq.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 16,
- "host": "mxpnl.com",
- "match": "suffix",
+ "host": "browser-intake-us5-datadoghq.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 17,
- "host": "posthog.com",
- "match": "suffix",
+ "host": "c.eu.heap-api.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 18,
- "host": "prodregistryv2.org",
- "match": "suffix",
+ "host": "c.us.heap-api.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 19,
- "host": "segment.com",
- "match": "suffix",
+ "host": "cdn.eu.heap-api.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 20,
- "host": "segment.io",
- "match": "suffix",
+ "host": "cdn.heapanalytics.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 21,
- "host": "segmentapis.com",
- "match": "suffix",
+ "host": "cdn.matomo.cloud",
+ "match": "exact",
"category": "tracking"
},
{
"id": 22,
- "host": "statsig.com",
- "match": "suffix",
+ "host": "cdn.mxpnl.com",
+ "match": "exact",
"category": "tracking"
},
{
"id": 23,
- "host": "statsigapi.net",
+ "host": "cdn.us.heap-api.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 24,
+ "host": "clarity.ms",
"match": "suffix",
"category": "tracking"
+ },
+ {
+ "id": 25,
+ "host": "edge.eu1.fullstory.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 26,
+ "host": "edge.fullstory.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 27,
+ "host": "eu-assets.i.posthog.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 28,
+ "host": "eu.i.posthog.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 29,
+ "host": "events.eu1.segmentapis.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 30,
+ "host": "events.statsigapi.net",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 31,
+ "host": "google-analytics.com",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 32,
+ "host": "googletagmanager.com",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 33,
+ "host": "lr-ingest.com",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 34,
+ "host": "lr-ingest.io",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 35,
+ "host": "lr-intake.com",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 36,
+ "host": "lrkt-in.com",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 37,
+ "host": "prodregistryv2.org",
+ "match": "suffix",
+ "category": "tracking"
+ },
+ {
+ "id": 38,
+ "host": "r.logrocket.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 39,
+ "host": "rs.eu1.fullstory.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 40,
+ "host": "rs.fullstory.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 41,
+ "host": "services.fullstory.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 42,
+ "host": "us-assets.i.posthog.com",
+ "match": "exact",
+ "category": "tracking"
+ },
+ {
+ "id": 43,
+ "host": "us.i.posthog.com",
+ "match": "exact",
+ "category": "tracking"
}
]
}
@@ -474,7 +594,7 @@
{
"algorithm": "p256-sha256",
"keyID": "flowlight-rule-packs-2026-01",
- "value": "MEQCIHugfQ8odXRdT6TKDoM7j22LzsvRMKUrCAqOSAs4eB1GAiBR15TV4oaid3NW/qkq9QXoF++0G4IrckUmod1ClDhdTg=="
+ "value": "MEUCIGfUrVoocSM9MzBY8lza2UgWgJzS6o7fMS8A5MU0FoqkAiEA65tGvNTF6Lzmc/tyvTcOLDWZb9v9QIy3RpxsDYoL+6g="
}
]
}
diff --git a/site/pages/docs.html b/site/pages/docs.html
index 6b41be8c..3e283568 100644
--- a/site/pages/docs.html
+++ b/site/pages/docs.html
@@ -418,6 +418,12 @@ Managed ad and tracker packs
pack would otherwise refuse. The global Pause Blocking control pauses managed packs along with the rest of
connection blocking. Pack exceptions are narrower conveniences; ordinary rules remain the place for a deliberate policy that
should apply beyond one pack.
+ Block collection, not the product. Cross-site tracking entries use documented dedicated collection, replay and
+ tracker-bootstrap hosts, while provider dashboards, login, billing, documentation and administration stay reachable. When a
+ collection path shares the product hostname — for example analytics.google.com/g/collect or a Matomo tenant's
+ /matomo.php — hostname blocking must allow it. HTTPS inspection can apply an explicit URL rule only when that path is
+ visible; a pinned or otherwise opaque TLS connection cannot be separated safely. First-party tracking proxies are not discoverable
+ from a vendor-host list.
This is hostname-level network blocking, not content filtering. A Network Extension can refuse a connection,
but it cannot edit what a browser or app draws. Packs therefore cannot remove first-party ads, DOM or layout gaps left behind by
blocked content, browser overlays, scripted popups, or native app windows. ECH, QUIC, encrypted DNS, direct-IP connections and
diff --git a/site/pages/index.html b/site/pages/index.html
index 5509d049..60bb2a8f 100644
--- a/site/pages/index.html
+++ b/site/pages/index.html
@@ -185,9 +185,10 @@
Monitor how AI agents use the network
With the Network Extension, apply one to every app or only selected apps; preview it against retained traffic,
see grouped, explainable activity, and add pack-specific exceptions for an app. Ordinary allow rules remain the universal
escape hatch, global Pause Blocking applies, and essential system traffic stays allowed.
- They block by hostname, so they cannot remove first-party ads, DOM or layout gaps, browser overlays, scripted popups, or
- native app windows. ECH, QUIC, encrypted DNS, direct IPs and shared CDNs can limit coverage. Cosmetic popup filtering needs
- a later browser extension that can change the page.
+ They block dedicated collection hosts while keeping analytics dashboards and administration reachable. Shared-host
+ collection paths and first-party tracking proxies cannot always be separated safely; ECH, QUIC, encrypted DNS, direct IPs
+ and shared CDNs also limit coverage. Packs cannot remove first-party ads, page gaps, overlays or popups — cosmetic filtering
+ needs a browser extension that can change the page.
Safari · Advertising matched doubleclick.net · 18 connections grouped
diff --git a/site/pages/releases.html b/site/pages/releases.html
index 3c43c86f..7e19edd4 100644
--- a/site/pages/releases.html
+++ b/site/pages/releases.html
@@ -13,7 +13,20 @@
What's new
- 0.15.10 October 28, 2026 Latest 0.15.11 October 28, 2026 Latest
+ Block tracking traffic without blocking the product. The Tracking pack now targets documented dedicated
+ collection, replay, and tracker-bootstrap hosts while leaving provider dashboards, login, billing, documentation, and
+ administration reachable.Keep broad vendor domains out. Exact collector rules replace shared product and feature-configuration
+ suffixes across Amplitude, FullStory, Heap, Matomo, Mixpanel, PostHog, Segment, Statsig, and other providers.Make the boundary durable and explicit. Catalog policy fixtures reject unreviewed tracking destinations,
+ matcher tests cover product and collector hosts, and the docs explain shared-host TLS paths and first-party proxy limits.
+
+
+
+
Make the full test target warning-free. Concurrency captures, redundant actor awaits, and intentionally ignored
database insert IDs now compile cleanly with current Xcode.