bootstrap_firewall::tests::the_opt_out_refuses_before_the_argument_guard_and_before_any_host_command
bootstrap_firewall::tests::verify_refuses_a_relative_binder_and_port_zero_under_either_opt_out_state
bootstrap_firewall::windows::tests::a_pair_written_on_one_subnet_does_not_verify_on_another_and_the_rewrite_is_named
bootstrap_firewall::windows::tests::a_different_scope_never_canonicalizes_into_the_one_that_was_written
bootstrap_firewall::tests::the_residual_cleanup_command_is_a_self_verifying_removal_that_creates_nothing
bootstrap_firewall::windows::tests::a_duplicate_of_one_name_is_ambiguous_while_the_two_name_pair_is_not
bootstrap_firewall::tests::the_opt_out_disables_mutation_for_every_value_including_empty_and_zero
bootstrap_firewall::windows::tests::a_half_carrying_the_other_halfs_scope_does_not_satisfy_the_pair
bootstrap_firewall::tests::an_invocation_outcome_separates_killed_from_failed_and_completed
bootstrap_firewall::windows::tests::a_host_with_no_connected_ipv4_omits_the_lan_half_and_says_so
bootstrap_firewall::windows::tests::a_rule_failing_hygiene_is_refused_even_when_its_scope_is_exactly_right
bootstrap_firewall::windows::tests::a_program_bearing_rule_does_not_satisfy_a_spec_that_wants_no_program_filter
bootstrap_firewall::windows::tests::a_scope_that_differs_is_rejected_at_the_pair_verdict_not_only_at_the_token
bootstrap_firewall::windows::tests::a_profile_set_compares_by_membership_not_by_rendering
bootstrap_firewall::windows::tests::a_store_holding_only_the_tailnet_half_is_not_a_reconciled_pair
bootstrap_firewall::windows::tests::a_write_that_could_not_be_verified_does_not_read_as_a_refused_write
bootstrap_firewall::tests::a_hung_firewall_child_is_killed_at_its_operation_budget
bootstrap_firewall::windows::tests::an_effective_pair_from_a_non_local_source_is_refused_by_name
bootstrap_firewall::windows::tests::an_empty_effective_store_does_not_verify
bootstrap_firewall::windows::tests::an_inactive_rule_with_codes_5_and_20_is_refused
bootstrap_firewall::windows::tests::an_ipv4_network_compares_by_value_in_prefix_or_mask_form
bootstrap_firewall::windows::tests::an_ok_multi_profile_rule_with_codes_5_and_1_is_enforced
bootstrap_firewall::windows::tests::an_ok_rule_with_code_1_is_enforced
bootstrap_firewall::windows::tests::an_unenforced_rule_is_refused_loudly_after_the_pair_matches
bootstrap_firewall::windows::tests::an_unrestricted_program_spelled_any_satisfies_a_spec_wanting_none
bootstrap_firewall::windows::tests::an_unrestricted_remote_does_not_satisfy_a_narrowed_spec
bootstrap_firewall::windows::tests::binder_text_accepts_only_an_absolute_nul_free_path
bootstrap_firewall::windows::tests::encoded_scripts_round_trip_as_utf16le_and_carry_the_ownership_identifiers
bootstrap_firewall::windows::tests::equivalent_netsecurity_spellings_compare_equal_to_what_was_written
bootstrap_firewall::windows::tests::malformed_enforcement_evidence_fails_deserialization
bootstrap_firewall::windows::tests::the_captured_pair_decides_reconciled_once_spellings_compare_semantically
bootstrap_firewall::windows::tests::the_lan_scope_is_the_network_prefix_and_every_widening_address_is_excluded
bootstrap_firewall::windows::tests::the_query_body_makes_one_store_pass_and_reads_no_persistent_store
bootstrap_firewall::windows::tests::the_spec_is_built_for_the_bound_port_and_a_stale_port_rule_does_not_satisfy_it
bootstrap_firewall::windows::tests::the_write_body_renders_an_adjacent_persistentstore_pair_scoped_to_the_derived_prefix
bootstrap_firewall::windows::tests::the_write_path_renders_both_halves_and_no_program_filter_by_default
bootstrap_firewall::windows::tests::unrestricted_rules_omit_the_package_parameter
bootstrap_firewall::windows::tests::a_rule_heavy_prewrite_query_still_reaches_reconcile_write