kyleandClaude Opus 5.5
7b40686def
The owner's Honcho client, blocking, with TLS: default features off, feature tls. It adds only itself to the lock file (checksum a5ccccc2…, as checked against crates.io in review). cargo deny passes. The dependency and the egress to rift are documented; the egress table also lists the design model's probe of rift in a throwaway workspace. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
20 lines
2.1 KiB
Markdown
20 lines
2.1 KiB
Markdown
# Egress
|
|
|
|
Every outbound network call the project makes, at run time or in development. Nothing else is
|
|
allowed.
|
|
|
|
| When | From | To | What |
|
|
|---|---|---|---|
|
|
| Development | `cargo` | crates.io | Downloading the crates listed in `docs/dependencies.md` |
|
|
| Development | `make verify-device`, `tools/check-m3a-device.sh` | straylight's `llama-server` | Checks against the real model through a private `inferproxy`; the script also reads `/slots` with `curl` first |
|
|
| Development | `make audit` | github.com/rustsec/advisory-db | The RustSec advisory database, fetched by `cargo deny check advisories` |
|
|
| Run time (M2a) | `inferproxy` | the `llama-server` router on the host (`straylight:11434`) | Every inference request `loopd` makes, forwarded byte for byte |
|
|
| Run time (M3b) | `brokerd`'s egress proxy container, for one `http_fetch` call | only the hosts the call's grant names, on port 443, at public addresses | The tool's HTTPS request, end to end; the proxy sees only the host name |
|
|
| Run time (M4a) | `gatewayd` | the owner's Mattermost at `https://straylight.scylla-hammerhead.ts.net` (tailnet) | REST calls and one WebSocket: the owner's messages in, Boxmaker's answers out. Mattermost stores messages unencrypted in its database; the server is the owner's |
|
|
| Run time (M5c) | `memoryd`, through `roncho` | the owner's Honcho at `[honcho] url` (rift: `http://rift.scylla-hammerhead.ts.net:8000`, tailnet) | Finished turns (the speaker's message and the final reply), conclusions mirroring trusted memory writes and untrusted notes, deletions of those conclusions; from M5c-2, searches and dialectic questions. Nothing from a `secret` session or above `private`. Honcho runs its own models on the owner's hosts to derive conclusions (none on the fleet workspace); its server counts telemetry events but sends none (`telemetry_events_emitted_total`, 0 on 2026-09-27) |
|
|
| Development (M5c) | the design model, planning M5c-1 | rift's Honcho | Recording real responses for the tests' fake server, in the throwaway workspace `boxmaker-plan-probe` only, deleted afterwards |
|
|
|
|
The two run-time rows for M2a and M3b were missing until 2026-09-23; they were added with the M4a
|
|
spec.
|
|
|