004-allowlisted-capture-proxy

Allowlisted capture proxy and transparent streams

Lifecycle approvedImplementation completeVerification unknownQualification unknown

Defines the per-attempt proxy that intercepts only explicitly allowlisted provider hosts, tunnels authentication endpoints and every other host without inspection, and transparently handles CONNECT, TLS, HTTP/1.1, HTTP/2, SSE, and WebSocket traffic with bounded parsing and backpressure.

Read the full pinned specification ↗

Relationships

depends on

depended on by

Claimed units

establishes

{
  "id": "wire-witness-proxy",
  "kind": "crate"
}

establishes

{
  "anchor": "allowlisted-capture-proxy",
  "file": "crates/wire-witness-proxy/src/lib.rs",
  "kind": "section"
}

Source headings

004: Allowlisted capture proxy and transparent streams
1. Purpose
2. Territory
3. Behavior
3.1 Routing and interception
3.2 Protocol ownership
3.3 Transparent streams
3.4 Bounded observation
4. Observable negative cases
5. Out of scope
Verification

Frozen anchors

No frozen anchors declared.