Repository navigation

Default-secure: localhost bind, enforce mode, apple-container backend - #1

Merged

persimmon16 merged 5 commits into

feat/apple-containerfrom

security/secure-defaults

Apr 1, 2026

Commits on Apr 1, 2026
- Bind gateway to 127.0.0.1 by default
  persimmon16
  committed
  2123be9
- Bind bridge daemon to 127.0.0.1 by default
  persimmon16
  committed
  d630e10
- Default L7 policy enforcement to Enforce instead of Audit
  persimmon16
  committed
  70a4614
- Default sandbox backend to apple-container
  persimmon16
  committed
  e531080
- Update test to match new Enforce default for L7 policy
  persimmon16
  committed
  f933311