Module outbound_url 

Shared URL admission for public source configuration and evidence links.

Functions

https_url 🔒

Parses canonical HTTPS URLs without embedded credentials or ambiguous control characters. Actual outbound connections must additionally enforce the transport’s resolved-address policy.

web_url 🔒

Admits ordinary public website links while excluding executable schemes and credentials. This does not authorize a fetch; discovery continues to require the HTTPS transport policy.