Network Surface
Where resilience and segmentation must be explicit
Support legitimate organizational connectivity requirements without promising universal bypass, invisibility, or undetectable access.
Network Surface
Where resilience and segmentation must be explicit
- 01 Transport adaptation Document allowed and blocked transport paths
- 02 Proxy-aware architecture Protocol and route selection
- 03 Encrypted relays Identity, encryption, and logging
- 04 Redundant paths State what cannot be guaranteed
- 05 Alternative routing Document allowed and blocked transport paths
- 06 Operational policy Protocol and route selection