Why. A child forge's cell may reach only model and package-registry hosts (src/spawn/cell.ts, src/core/capacity.ts), so an app a customer builds in their forge cannot take a payment. Customers' apps taking money is the point of the app template's payments.
What. A curated payments host list (default: api.stripe.com; a setting like children.registryEgress) that a child's cell may reach only for apps that declare the host in forge.jsonegress. Nothing open-ended; the child's crew sandbox gets none of it.
Acceptance. In a child cell: an app declaring api.stripe.com reaches it; an app that does not, cannot; the crew sandbox cannot. docs/APPS.md says so.
Why. A child forge's cell may reach only model and package-registry hosts (
src/spawn/cell.ts,src/core/capacity.ts), so an app a customer builds in their forge cannot take a payment. Customers' apps taking money is the point of the app template's payments.What. A curated
paymentshost list (default:api.stripe.com; a setting likechildren.registryEgress) that a child's cell may reach only for apps that declare the host inforge.jsonegress. Nothing open-ended; the child's crew sandbox gets none of it.Acceptance. In a child cell: an app declaring
api.stripe.comreaches it; an app that does not, cannot; the crew sandbox cannot.docs/APPS.mdsays so.