ASSURANCE
Privacy and egress controls.
Built-in data movement is quiet by default and explicit when enabled.
Inspect
python scanner.py privacy status
python scanner.py runtime statusConstrain
{"allowed_destinations":["http://127.0.0.1:8001"]}Boundary
NetworkBroker governs mediated paths, not arbitrary external code; host firewall controls still matter.