Deny-by-default bwrap egress: api.anthropic.com plus the 17 hosts in
freedom-intelligence/docs/sources-egress.yaml. Workspace mirror rw.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 358047@bnt-lap001
Assistant-Session: fad68125-297a-449d-bfa7-cf9cdd49ca1d