Summary. 2.0.1 makes the extension work on Firefox (2.0.0 blocked every
in-scope AI request there), closes the remaining ways a request could leave the
browser unscreened, and stops the popup and toolbar badge reporting "Active" on
anything short of a real screened request. For reviewers: the Firefox
data-collection declaration is none, the privacy policy is the
extension-specific one, the only outbound requests are to loopback, and the
source is published under a view-only licence.

Fixed
- Firefox: every in-scope AI request was blocked because the content-script
relay expected a promise from chrome.runtime.sendMessage; both messaging
dialects are now handled, and settings (including admin policy) are read the
same way.
- Attachments an AI web app uploads to object storage on another host were
never seen; a cross-origin object write from a covered page is now held and
screened, with no host permission added.
- The popup and badge could show "Screening: Active" from a connection alone, a
reachability probe, or a fail-open send; "Active" now requires a real
screened-request receipt.
- Frames with no URL of their own (about:blank, srcdoc, blob:) and
subdomains of catalog hosts got no hooks; the manifest now covers them.
- A blocked request looked like the site breaking and often carried wrong
advice; every block now names Sonomos, its kind, and a remedy that is true.
- Popup status no longer claims the desktop app is down before asking, and the
enforce timeout is back to 45 s.
- On a managed profile, a request fired before the admin policy arrived was
screened even for an excluded provider; and a redacted resend of
fetch(new Request(url), init) dropped init.

Added
- Source published as sonomoshq/Locke-Extension under a view-only licence.
- data_collection_permissions: { required: ["none"] } under
browser_specific_settings.gecko.
- The allowedProviders managed policy is enforced (subtractive).
- In-scope navigator.sendBeacon and fetchLater() requests carrying a body
are refused rather than sent unscreened.
- The popup reports how many items of personal information were redacted this
session and how many requests went out under the user's fail-open setting.

Changed
- Privacy policy URL is now https://sonomos.ai/locke/privacy.
- Injection host list resynced from the catalog: removed phind.com,
www.phind.com, chat.lechat.fr, leo.brave.com, brave.com,
grok.x.ai; added copilot.microsoft.com, grok.com, duck.ai,
assistant.kagi.com.
- Store packages ship PNG icons only and exclude build inputs; the Firefox
package drops the Chrome-only storage.managed_schema pointer.
- Publishing is a manual workflow_dispatch, not a side effect of merging.