======================================================
  SurfGuardDns  P3.2  |  DNS blocker + tray + SafeSearch
======================================================

What's new in P3.2:
  - SafeSearch enforcement for Google / Bing / YouTube / DuckDuckGo
    (no cert install needed — we redirect to each search engine's own
    SafeSearch-only front-end IP)
  - Adult category enabled by default

Config (config.json):
  categories:
    malware     : ON   (Tier 1 - toast)
    trackers    : ON
    ads         : ON
    annoyances  : ON
    adult       : ON   (Tier 1 - toast)
  safeSearch    : true
  upstream      : 1.1.1.1 (overridden by upstream-dns.txt if present)

Toast rules:
  - Only for malware + adult categories
  - Max 1 toast per unique domain per hour
  - Max 5 toasts per minute total

--------------------------------------------------------
  FIRST-TIME INSTALL (do all three, once, as admin)
--------------------------------------------------------
1. 1-install-service.bat     background service (auto-start)
2. 2-set-dns-loopback.bat    captures current DNS + points Windows at us
3. 3-install-tray.bat        tray icon + toasts (per user, no admin)

--------------------------------------------------------
  TEST SAFESEARCH
--------------------------------------------------------
  Open Edge -> https://www.google.com/search?q=explicit
  Notice the SafeSearch toggle is greyed out / forced ON.
  YouTube: adult videos hidden or age-gated.
  Bing:    strict adult filter always on.

  Under the hood: your PC resolves www.google.com to
  216.239.38.120 (forcesafesearch.google.com) instead of
  the normal Google IP.

--------------------------------------------------------
  UNINSTALL (in order)
--------------------------------------------------------
4-reset-dns.bat            (restore DHCP DNS)
5-uninstall-service.bat
6-uninstall-tray.bat

--------------------------------------------------------
  FILES
--------------------------------------------------------
Service log:  %ProgramData%\SurfGuardDns\service.log
Activity:     %ProgramData%\SurfGuardDns\activity.jsonl
