Understand where a browser-level allow-list may fit—and where it does not—in a school or library CIPA program.