Compose the guard: ingress flood control, then the visibility gate, then the
focus-aware firewall, then kehto's bridge.
What is enforced where (D-020): kehto binds NAP traffic to a MessagePort
the bridge owns. Window-level messages, of which only napplet.hello is
legitimate, are held or dropped by handleWindowMessage. Port traffic
reaches observe through kehto's filterNappletMessage, whose answer
kehto follows: dispatch, hold until releaseDeferred, or drop. Hidden
windows' envelopes are held and onRelease is called when the window is
visible again. Quarantine revokes the window inside the filter, and kehto
discards what it held. The runtime firewall configured by
applyRuntimeFirewallRules adds the profile's per-class rates to every
envelope it dispatches, held ones included.
Compose the guard: ingress flood control, then the visibility gate, then the focus-aware firewall, then kehto's bridge.
What is enforced where (D-020): kehto binds NAP traffic to a
MessagePortthe bridge owns. Window-level messages, of which onlynapplet.hellois legitimate, are held or dropped byhandleWindowMessage. Port traffic reachesobservethrough kehto'sfilterNappletMessage, whose answer kehto follows: dispatch, hold untilreleaseDeferred, or drop. Hidden windows' envelopes are held andonReleaseis called when the window is visible again. Quarantine revokes the window inside the filter, and kehto discards what it held. The runtime firewall configured byapplyRuntimeFirewallRulesadds the profile's per-class rates to every envelope it dispatches, held ones included.