What's shipped.

Chrome only lets an extension clear a permission override for every site at once, never one site at a time. This release adds a record of exactly which sites Custodian has touched per permission type, so it can clear the type-wide override and immediately reapply protection to every site except the one you're freeing. Whitelisting a site, or running "Fix stuck permissions" from the popup, now reverses past resets instead of only preventing future ones. Full breakdown is on the How it works page.

A single toggle for people who want the opposite default. Normal mode clears everything except your whitelist. Shield Mode clears nothing except sites you've explicitly marked clean. Switching modes doesn't retroactively clear or restore anything, it only changes how future tab closes are handled.

A per-tab, on-demand toggle that blocks a tab's outgoing navigations, fetch and XHR requests, scripts, images, and WebSockets, using declarativeNetRequest scoped to that tab's ID. It does not touch any other tab and does not block WebRTC, which negotiates outside the request pipeline this hooks into. This is a real block with a stated edge, not full air-gapping.

Greylist works like a temporary whitelist entry: skip a site for now, and it falls back to Custodian's normal behavior once the timer runs out. Alongside it, Custodian now uses plain pattern matching, no model, nothing sent anywhere, to notice sites you visit often enough that it offers, once, to whitelist them. Dismiss it and it won't ask again for that site.

First release. Close the last tab for a site, wait out a cancelable five-second grace period, and Custodian clears that site's cookies, storage, and cache, resets any permissions it customized, and writes a receipt of exactly what happened. No accounts, no telemetry, nothing sent anywhere.