The property suite used Hegel, so it needed its own Go module to keep
Hegel's dependencies out of kit. That meant a second go.mod to keep tidy,
two extra CI steps, and tests that lint and the regular test run skipped.
Rapid is already a kit test dependency and shrinks failing cases. With it,
the properties run as ordinary package tests and go through lint. The
address generator draws from prefixes at the policy boundaries, so the
default 100 cases still reach the loopback, private, and CGNAT edges.
The embedconfig.Origin wrapper check is dropped from this suite. The
embedconfig compatibility tests already pin the wrapper's output, and
endpointpolicy tests should not depend on embedconfig.
Generated with Claude Code (claude-opus-5-5)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Integration clients can share one rule for trusted private-network HTTP, including container DNS names, and report errors under their own name.
Use
endpointpolicy.CanonicalEndpoint(rawURL, trustPrivateNetwork, "catalog"). The existingembedconfigfunctions delegate to it and retain their current output and errors.Closes #341