Privacy boundary

Observe only what the contract needs.

The Browser Connection card calls only the fixed /v1/control/self endpoint. It does not probe arbitrary targets, inspect an Agent runtime, or upload Evidence.

Returned to the self caller

The Control self response may include the complete client IP from Cloudflare's CF-Connecting-IP header, plus allowlisted protocol and edge fields. It is returned only to the caller of that request and is not written into CLI Evidence facts.

Deliberately omitted

NetOkay Worker application code has no persistence or analytics bindings and does not write client_ip into Evidence facts. Platform-level logging and retention are outside this application contract and are not asserted here. Missing fields remain Unknown.