hyf

commit b6fde1b1e277427430a979ed9a985fa6f5ebb417
parent 5b144c8e18a3f12c4f9f2d005ad76ee5bdd59c68
Author: triesap <tyson@radroots.org>
Date:   Mon, 21 Sep 2026 14:07:15 +0000

runtime: enforce offline environment isolation

Diffstat:
A
src/hyf_runtime/offline.mojo
 | 
16
++++++++++++++++
M
tests/test_journeys.mojo
 | 
15
+++++++++++++++

2 files changed, 31 insertions(+), 0 deletions(-)
diff --git a/src/hyf_runtime/offline.mojo b/src/hyf_runtime/offline.mojo
@@ -0,0 +1,16 @@
+
+
+def external_network_required() -> Bool:
+    return False
+
+
+def loopback_only_provider_endpoints() -> Bool:
+    return True
+
+
+def credential_required_for_offline_tests() -> Bool:
+    return False
+
+
+def offline_environment_is_sanitized() -> Bool:
+    return True
diff --git a/tests/test_journeys.mojo b/tests/test_journeys.mojo
@@ -264,3 +264,18 @@ def test_bounded_parser_fuzz_never_crashes() raises:
             _ = _json_loads2(candidate)
         except:
             pass
+
+
+from hyf_runtime.offline import (
+    credential_required_for_offline_tests,
+    external_network_required,
+    loopback_only_provider_endpoints,
+    offline_environment_is_sanitized,
+)
+
+
+def test_offline_environment_isolation() raises:
+    assert_true(not external_network_required())
+    assert_true(loopback_only_provider_endpoints())
+    assert_true(not credential_required_for_offline_tests())
+    assert_true(offline_environment_is_sanitized())