Peter Steinberger 8dc129424c fix(proxy): keep WebChat and Codex loopback calls direct (#154013) ...

* fix(proxy): keep native runtime loopback requests direct

In 9.4, 8169aacdda added the native Codex loopback inference relay
while managed proxy routing still cleared NO_PROXY.

Use Proxyline's shared bypass policy and supply loopback exclusions to
native children. Explicit proxy/block modes remain unchanged. Doctor
reports failed loopback probes with recovery commands.

Fixes #153930. Reported by @eefreenyc.

* fix(proxy): align loopback diagnostics and client regression coverage

Keep default loopback routing direct after canary readiness and assert
that external requests still reach the proxy. Attribute readiness failures
to the proxy only in explicit proxy mode.

Keep the TUI client and proxy lifecycle in one module generation after
mock resets, assert the full block-mode recovery message exactly once,
and verify the inherited policy at Gateway WebSocket construction.

Include the existing test-only outbound custody repair from c159663b12
(#154123), preserving nested maintenance, physical exclusion, native
writability, failure causes, and migration receipts without longer budgets.

Related: #153930

* test(proxy): remove userinfo from Doctor fixture

2026-09-20 21:42:01 -07:00

..

THREAT-MODEL-ATLAS

docs: split THREAT-MODEL-ATLAS threat catalog by ATLAS tactic (#143517)

2026-09-10 09:01:27 +09:00

CONTRIBUTING-THREAT-MODEL.md

…

formal-verification.md

docs: fix 16 secops-owned audit findings across gateway, cli, and security pages (#144030)

2026-09-10 20:28:21 +08:00

incident-response.md

docs: close remaining cross-link gaps across concepts, gateway, and security (#143923)

2026-09-10 18:34:34 +08:00

network-proxy.md

fix(proxy): keep WebChat and Codex loopback calls direct (#154013)

2026-09-20 21:42:01 -07:00

THREAT-MODEL-ATLAS.md

docs: split THREAT-MODEL-ATLAS threat catalog by ATLAS tactic (#143517)

2026-09-10 09:01:27 +09:00