Classify resolved addresses at the pinned transport; model control-plane and audit boundaries

[0thernet]

The web gateway's pinned transport trusted the resolver's own public/non-public classification; a resolver that under-reported (or that returned a public name for a private address) would let a retrieval URL reach a private target. The gateway now classifies every resolved address itself and refuses non-public ones, with golden vectors generated by the standard-library Python oracle. The lane also models the helper owner's live-owner and lost-race handling, connection shutdown, the web gateway's durable audit boundary, and the operation-authority sequencer over the production code.

Claims moved (8)

Claim	Layer	Evidence
public-address classification	vectors	verification/vectors/addresses.json (6,375 generated cases) compared against the TypeScript in scripts/verification-vectors.test.ts
helper-owner live-owner / lost-race	stateful-model	stateful schedule model over the production helper sequencer
connections shutdown	stateful-model	stateful model over Connections
web gateway durable audit boundary	stateful-model	model over the production audit store
operation authority	stateful-model	stateful model over the production sequencer
pinned-https resolver independence	vectors + tests	resolver classifier bypass pins
managed-confirm drift	source mutant	managed-confirm-keeps-drifted-plan
grant digest closure	source mutant	grant-digest-ignores-closure

Evidence and how the evidence fails when broken

• Vectors. verification/vectors/generate.py (stdlib-only) emits every generated address family edge — documentation ranges, IPv6 forms, mapped/embed cases, malformed inputs — and scripts/verification-vectors.test.ts asserts the TypeScript agrees byte-for-byte.
• Source mutants (13 added). pinned-https-trusts-resolver-classifier, public-address-admits-all-ipv6, helper-owner-ignores-live-owner, helper-owner-ignores-lost-race, web-gateway-dispatch-without-audit, web-gateway-output-despite-failed-audit, web-gateway-returns-redirect, activity-recovery-keeps-started, helper-shutdown-skips-settle, helper-shutdown-aborts-after-settle, connections-close-keeps-attempts, managed-confirm-keeps-drifted-plan, grant-digest-ignores-closure — each must fail exactly its named test on the seeded nightly run.
• Stateful models. Each model generates bounded action/fault schedules over the production reducer or port (not a reimplementation) and asserts the safety and conditional-progress laws; failing seeds and shrink paths are recorded in verification/seeds/corpus.json.

Defects found

• The pinned transport trusted the resolver's public/non-public answer — a resolver-level confusion could reach a private address. src/public-address.ts (new) now classifies resolved addresses itself and src/pinned-https.ts/src/runtime.ts refuse non-public targets; src/public-address.test.ts (+124) plus the generated vectors pin the boundary.

Package budget

src/public-address.ts and the pinned-https/runtime touch ship in the package; bun run verify:package on this head is the budget check. Verification vectors and models stay out of the package.

CI cost

The vectors test compares the full generated corpus each run; the stateful models are helper-heavy bounded schedules. The 13 new mutants run only in the nightly source-mutation job (outside Required).

Not covered

• Classification covers the generated vector corpus and the documented edge families; novel address syntax outside the corpus is covered only by the strict parser's reject-by-default path.
• Local validation on this host was partial under heavy load: typecheck and the claims render/check pass post-merge; helper-heavy stateful suites and the full mutant set are delegated to the Required/nightly CI runs on this head.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ghostget	Ready	Preview	Sep 25, 2026 4:34am UTC