Split from #10557, the person's ask: on a child cell (scottishbob's), every [looks] screenshot failed with net::ERR_INTERNET_DISCONNECTED.
Done:
[ ] A child cell's looks open its own app through the child forge's own listener (127.0.0.1), never the app's public URL, and get a picture.
[ ] A cell-suite test (skipped in FORGE_TEST_SOCKET mode, run by the forge's check) boots a child cell with one app and asserts its looks for / produce a picture, not a no picture line.
[ ] The cell gains no network: its reach list and egress are unchanged, and a test asserts that a host outside them is still refused from inside the cell.
Split from #10557, the person's ask: on a child cell (scottishbob's), every
[looks]screenshot failed withnet::ERR_INTERNET_DISCONNECTED.Done:
FORGE_TEST_SOCKETmode, run by the forge's check) boots a child cell with one app and asserts its looks for/produce a picture, not ano pictureline.bun testpasses before the push.