2026-08-29 15:00:17
π‘οΈ Transparent MITM interception with per-host TLS certificates from a custom CA, plus SSRF protection for private networks (RFC 1918, loopback, link-local, CGNAT, IPv6 ULA/NAT64/6to4) with DNS-rebinding prevention
βοΈ Prompt injection defense through JSON-encoded payloads, per-IP token bucket rate limiting (50 req/s, burst 100) and a circuit breaker that trips after 5 consecutive LLM failures, with deny or passthrough fallback