Per-execution runtime handed to execute/dryRunExecute as the third
argument. fetch is bound to the manifest's declared egress: every
actual request — redirect hops included — must resolve to a declared host
or it is denied (ConnectorPolicyError, policy 'egress-fetch') and
audited. This is the runtime half of the egress posture (the networkEgress
policy gates the declared list; this guard pins actual requests to it), so
actual ⊆ declared ⊆ org-allowed. A manifest with no egress gets a fetch
that denies everything. A vendor SDK carrying its own HTTP stack bypasses
the guard — route its traffic through this fetch (most SDKs accept a
fetch/transport option) or that connector's egress posture degrades to
declaration-only.
Per-execution runtime handed to
execute/dryRunExecuteas the third argument.fetchis bound to the manifest's declaredegress: every actual request — redirect hops included — must resolve to a declared host or it is denied (ConnectorPolicyError, policy 'egress-fetch') and audited. This is the runtime half of the egress posture (the networkEgress policy gates the declared list; this guard pins actual requests to it), so actual ⊆ declared ⊆ org-allowed. A manifest with noegressgets a fetch that denies everything. A vendor SDK carrying its own HTTP stack bypasses the guard — route its traffic through this fetch (most SDKs accept a fetch/transport option) or that connector's egress posture degrades to declaration-only.