Tag

egress

4 entries, including 1 pattern.

1. Pattern8 Oct

   Task-Bound Artifact Fetch

   Translate an external agent's file reference into a narrowly authorized fetch and a receipt for the bytes actually consumed.

   • agents
   • a2a
   • authorization
   • egress
2. 8 Oct

   The artifact pointed somewhere else

   An agent's file result can make the receiving assistant fetch under its own network identity. Treat artifact references as requests for access, not as files already received.

   • agents
   • a2a
   • authorization
   • egress
3. 24 Sept

   Validated is not pinned

   A hostname that passed an SSRF check can still dial a different address on the next lookup.

   • isolation
   • agents
   • egress
   • threat-model
4. 23 Sept

   URL validation is not egress

   A deny-list in the fetch helper is not a network policy. The agent host still reaches what the process can reach.

   • isolation
   • agents
   • egress
   • threat-model