No-egress policy
AgentInspect-surface no-default-network policy.
No-egress policy
AgentInspect surfaces perform no default network I/O. Local MCP uses stdio; Evidence and verify-safe operate on local paths. This is not an application-wide compliance certification.