Cross-domain consent
Share consent state across trusted HTTPS origins via postMessage. Guide: docs/CROSS-DOMAIN.md.
Example: https://shop.example.com
Security checklist
Only list explicit https:// origins — never *.
Both sites must load Nerd Consent with the same trusted list.
Runtime APIs: shareConsentWithTrustedOrigin, listenForSharedConsent.