data-exfiltration 1

Deterministic network egress gate for DeepSeek Harness: web fetches and searches are checked against a destination allowlist before they run — content scanning guards what agents read, this guards where data may flow