[chris-beckman]

Explicit native HTTP routing can retain a permitted nominal URL while selecting a different dial recipient. Add a behavioral regression test requiring an authored denial of that explicit recipient to prevent DNS, connections and requests, even when the local fixture socket has independent capability authority. Removing that denial restores exact response bytes and logical Host/request URI across two actions.

The test uses a real local receiver, connection observations and hermetic DNS for literal-address and hostname mappings. It does not claim public-network, TLS, proxy, grant-reuse or full command-entry qualification. Mac focused execution reproduced both baseline failures on d027a11 (tree ffb919c2ced07b7a24e33120d838b6bfe1ab208e): denied address and hostname routes each opened one connection and delivered one request; the hostname route also performed DNS. Authorized recovery assertions did not fail. Batch 8fbf9e1baef241c8a780ffcd1998f920. Independent code-only test review accepted. This PR remains draft pending combined production correction and test review.

Depends on #2066 → #2080 → #2083 → #2084 → #2086 → #2090 → #2092 → #2093.

[chris-beckman]

This branch's content is already included in #2097 (the combined UA02 stack) — the branch has no commits beyond it. Reopen or branch from feat/ua02-combined if there's more to add.