Ariadne 0.1.7: system-wide collision policy is runtime-switchable

Feature. The daemon now hot-reloads C:\ProgramData\Ariadne\policy.json every
5 s (fs.stat mtime check, only opens the file when it actually changed) and
flips its DNS collision policy between bcnr-first and icann-first in place.
Every browser on the machine follows within seconds -- no daemon restart,
no reinstall, no UAC. The next Ariadne panel in Theseus will edit this file
directly; a text editor works too.

install.ps1 seeds the file with the current -Policy default on FIRST install
only (an upgrade never clobbers a user's later flip) and grants BUILTIN\Users
Modify on it so an unprivileged app can rewrite it. Invalid values keep the
last good policy (logged). File deleted -> daemon falls back to the CLI
policy the scheduled task was registered with.

Also fixes an intermittent "config unreadable" on daemon startup when
ariadne.config.json had a UTF-8 BOM -- same class of PS-writes-BOM bug 0.1.6
fixed in the TLD-sync path, this time in bnsd.js's own config loader.

Verified live on this box with a second daemon running on port 15353:
  bnsd policy: bcnr-first -> icann-first (from C:\ProgramData\Ariadne\policy.json)
  bnsd policy: icann-first -> bcnr-first (from C:\ProgramData\Ariadne\policy.json)
  bnsd policy: ... has invalid policy 'cash-first' -- keeping bcnr-first
ACL check: BUILTIN\Users has Modify on policy.json, non-elevated write succeeds.

Deployed
- dl.silentmode.st/AriadneResolver-Setup-0.1.7.exe
- s3://bns/silentmode/dl/AriadneResolver-Setup-0.1.7.exe
- silentmode.st manifest advertises 0.1.7
- sha256 742f8005c2dfb47929287c009cddf7738f0d12bd56fb8f8a837df3e9b435f47f

Theseus UI wiring for this file NOT touched -- settings-preload.js has 31
lines of uncommitted work from another session; a Theseus panel selector
belongs in that session's next commit so it doesn't collide.

releases-manifest.json

@@ -22,14 +22,14 @@
     {
       "id": "ariadne-resolver",
       "product": "Ariadne Resolver (Windows)",
-      "version": "0.1.6",
-      "date": "2026-09-27",
+      "version": "0.1.7",
+      "date": "2026-09-28",
       "platform": "win-x64",
       "signed": false,
       "signingAuthority": null,
-      "changes": "New TLDs reach other browsers without a reinstall. The resolver daemon now keeps the routing rules and the local root certificate in step with the BNS registry on its own: 90 seconds after start and every six hours it fetches the registry's routable TLDs, adds the routing rules that are missing and drops the ones that no longer apply, and when the certified set has actually changed it rotates the root certificate, trusts the new one in the Windows store and removes the old one. A rotation is rare (only when a TLD appears or disappears) and is logged; Firefox reads trusted roots at startup, so restart it once after a rotation. Includes 0.1.5 (every live registry TLD routed and certified, collision TLDs left to ICANN, daemon allow-list taken from the installed root). Upgrades in place.",
+      "changes": "Collision policy is now runtime-switchable machine-wide. The daemon hot-reloads C:\\ProgramData\\Ariadne\\policy.json every 5 seconds -- change {\"policy\":\"bcnr-first\"} to \"icann-first\" (or back) and every browser on the machine flips within seconds, no restart or reinstall. Install seeds the file with the current -Policy default and grants BUILTIN\\Users Modify on it, so an unprivileged app (Theseus's Ariadne panel, a text editor) can rewrite it without a UAC prompt. Invalid values keep the last good policy. Also fixes an intermittent \"config unreadable\" at daemon start when the config file had a UTF-8 BOM (same class of bug 0.1.6 fixed in the TLD-sync path). Includes 0.1.6 (daemon self-syncs routing + CA to the BNS registry every 6 hours). Upgrades in place.",
       "files": {
-        "AriadneResolver-Setup-0.1.6.exe": "e7fbe35d6e2c72e4a25db636502b7b5a2df1cf32039f7e1649154b40601a7865"
+        "AriadneResolver-Setup-0.1.7.exe": "742f8005c2dfb47929287c009cddf7738f0d12bd56fb8f8a837df3e9b435f47f"
       }
     },
     {

releases/index.html

@@ -72,12 +72,12 @@
   </div>
 
   <div class="rel">
-    <h2>Ariadne Resolver — Windows <span style="color:var(--acid)">0.1.6</span></h2>
-    <div class="meta">Windows 64-bit · unsigned · bundled Node runtime · 2026-09-27 · <b>0.1.6 — new TLDs work without a reinstall</b> — New TLDs reach other browsers without a reinstall. The resolver daemon now keeps the routing rules and the local root certificate in step with the BNS registry on its own: 90 seconds after start and every six hours it fetches the registry's routable TLDs, adds the routing rules that are missing and drops the ones that no longer apply, and when the certified set has actually changed it rotates the root certificate, trusts the new one in the Windows store and removes the old one. A rotation is rare (only when a TLD appears or disappears) and is logged; Firefox reads trusted roots at startup, so restart it once after a rotation. Includes 0.1.5 (every live registry TLD routed and certified, collision TLDs left to ICANN, daemon allow-list taken from the installed root). Upgrades in place.</div>
+    <h2>Ariadne Resolver — Windows <span style="color:var(--acid)">0.1.7</span></h2>
+    <div class="meta">Windows 64-bit · unsigned · bundled Node runtime · 2026-09-28 · <b>0.1.7 — collision policy is runtime-switchable machine-wide</b> — Pick <code style="display:inline">bcnr-first</code> or <code style="display:inline">icann-first</code> for the whole machine by writing <code style="display:inline">C:\ProgramData\Ariadne\policy.json</code>; the daemon hot-reloads it every 5 seconds and every browser on the box flips with it — no restart, no reinstall, no UAC. Install seeds the file with the current install-time default and grants <code style="display:inline">BUILTIN\Users</code> Modify so Theseus (or a text editor) can rewrite it unprivileged. Invalid values keep the last good policy. Also fixes a "config unreadable" at daemon start when the config file had a UTF-8 BOM. Includes 0.1.6 (daemon self-syncs routing + CA to the BNS registry every 6 hours). Upgrades in place.</div>
 
     <div class="file">
-      <div class="n"><a href="https://dl.silentmode.st/AriadneResolver-Setup-0.1.6.exe">AriadneResolver-Setup-0.1.6.exe</a> — ~24 MB</div>
-      <code>e7fbe35d6e2c72e4a25db636502b7b5a2df1cf32039f7e1649154b40601a7865</code>
+      <div class="n"><a href="https://dl.silentmode.st/AriadneResolver-Setup-0.1.7.exe">AriadneResolver-Setup-0.1.7.exe</a> — ~24 MB</div>
+      <code>742f8005c2dfb47929287c009cddf7738f0d12bd56fb8f8a837df3e9b435f47f</code>
     </div>
   </div>