Goal
Add VPN egress control — interface binding (SO_BINDTODEVICE) plus kill-switch semantics — for Harmonia's network-facing acquisition path. This is the Gluetun replacement asserted in legacy-arr-salvage.md and carried in the archived backlog at priority Medium (projects/kanon/projects/harmonia/planning/archive/backlog.md).
Context
Dropped from tracking when the backlog was archived; no issue has covered it since. Relevant surfaces: ergasia (librqbit torrent session), eksetasis (indexer HTTP), syndesmos (external APIs).
Done-when
- Config-selectable interface binding for torrent and indexer traffic.
- Fail-closed behavior when the bound interface is absent, proven by test.
- Docs describe the threat model honestly: what is and is not covered.
Goal
Add VPN egress control — interface binding (
SO_BINDTODEVICE) plus kill-switch semantics — for Harmonia's network-facing acquisition path. This is the Gluetun replacement asserted inlegacy-arr-salvage.mdand carried in the archived backlog at priority Medium (projects/kanon/projects/harmonia/planning/archive/backlog.md).Context
Dropped from tracking when the backlog was archived; no issue has covered it since. Relevant surfaces:
ergasia(librqbit torrent session),eksetasis(indexer HTTP),syndesmos(external APIs).Done-when