Issues

• netd denials are anonymous: it verifies the caller's signature but never signs its own verdict

  bounded-systems/door-net#25 · Filter by author bdelanghe opened on Aug 17, 2026

• Signed-grant caveats are verified but never enforced: netd checks hosts against env config, not against the grant it just validated

  bounded-systems/door-net#24 · Filter by author bdelanghe opened on Aug 17, 2026

• netd.ts and squid.conf are documented as "same policy" but differ: netd.ts has no port restriction

  bounded-systems/door-net#23 · Filter by author bdelanghe opened on Aug 17, 2026

• netd cannot revoke: the allowlist is frozen at process start, and nothing tests revocation

  bounded-systems/door-net#22 · Filter by author bdelanghe opened on Aug 17, 2026

• netd assessed against the four egress-enforcement failure modes (from a measured Anthropic cloud allowlist defect)

  bounded-systems/door-net#21 · Filter by author bdelanghe opened on Aug 17, 2026