UC-020: Destination Allowlist Violation

Layer: A — Surface Containment Threat: Untrusted Connector Drift / Excessive Scope

Scenario

A tool call attempts to reach a destination (URL, host, endpoint) that is not in the configured destination allowlist.

Expected Behavior

• Destination not in allowlist → DENY
• Default deny on unlisted destinations
• Deny takes precedence over allow for overlapping patterns

Pass Criteria

• Verdict: DENY
• Receipt: signed deny receipt with destination violation
• No network request to the unauthorized destination