Documentation
¶
Overview ¶
The LISTEN-ADDRESS CLASSIFIERS: the one place that answers "what does this bind actually expose", split out of main.go for the 1000-line file-size gate (scripts/check-file-size.sh) when hostname resolution was added.
They are together because they are ONE question asked three ways — is this loopback, is it a specific routable interface, is it publicly routable — and three boot refusals rest on the answers: -local-mode on a public bind, -local-trust-forwarder on a LAN bind, and plaintext HTTP on a LAN bind. Kept in one file so a future fourth caller finds the whole rule rather than the arm nearest to it.
Command wardynd is the Wardyn control plane: REST API, embedded web UI, policy engine, approval FSM, token broker, and audit ingest. Postgres is the ONLY required dependency. It contains zero target-specific code — sandboxes are dispatched through the runner.Runner interface (docker driver optional).
Source Files