Helpers and utils for egress implementation in Forge apps

shut your node.js apps more gracefully

The Stratus Agent egress policy: which addresses a tool may reach, enforced on the connection rather than on the name it was asked for

Shared HTTP, retry, egress and redaction primitives for the Azure Pipelines task extensions.

Allowlist-based egress firewall bootstrap for development containers

Product-neutral model router, provider egress, wire dialect translation, streaming, catalog, and call provenance.

SATYA Expo SDK for native app attestation and TEE replay through device egress

A lightweight SDK for developing RoomComposite templates

SSRF-safe egress fetch for Kumiko: a single egress(policy) entry point that enforces external/internal/tenant-supplied host policy, DNS-rebinding-safe resolve-then-pin, and no external runtime dependencies.

Runtime security gate for DeepSeek Harness: egress host allowlist, secret redaction in tool results, and an append-only audit log

Outbound HTTP proxy helpers for routing fetch-based clients through the Introspection egress proxy or a standard forward proxy

Governed, per-session identity and brokered egress for AI agents

Fail-closed egress chokepoint for agent sandboxes — explicit HTTP and CONNECT proxying plus transparent DNAT interception with SNI and Host sniffing, policy and audit ports, and no TLS interception.

zeroness Egress Worker — default-deny outbound proxy that enforces Broker decisions and injects brokered identity.

The sandbox→context boundary as an exfiltration boundary — Quantitative-Information-Flow metering (Shannon / min-entropy / g-leakage + empirical canary extraction), an enforced egress gate (a return-whitelist of assert/count/choose/bucket/report decisions

Declaw provider for ComputeSDK - secure sandboxes with PII scanning, prompt-injection defense, and network egress filtering

@agentproto/egress — outbound traffic control for agent sandboxes. Mode registry (off / cooperative / strict / paranoid), provider allowlist, transport-agnostic proxy core, audit hooks. Cooperative mode delegates substitution to @agentproto/secrets so the

An egress-bootstrap generator for Yeoman

Language-agnostic CLI for Enclavia workload egress and diagnostics

Isolated sandboxes for AI agents and untrusted code: create, run commands, egress allowlist, pause/resume/fork, destroy. TypeScript SDK for CreateOS Sandbox.