Module probe 

Bounded outside contact: the only two things the environment resolver does that it cannot finish on its own — run a program, and open a socket — each with a hard budget.

Both exist because a snapshot runs on a shell prompt. A toolchain shim that fetches a release on first use, a port held by a process that is wedged rather than dead: either would turn cd into a hang. Nothing here waits longer than it was given, and a probe that ran out of time reports unknown rather than a verdict it did not earn.

What is deliberately absent: name resolution. A host that is not an IP literal is not probed at all, so no snapshot can reach DNS, and therefore no snapshot can reach the network. The lease a Majordomus server publishes always names a loopback address.

Functions

authority

The host and port of an http://host:port[/path] URL.

bounded_output

Run a command and take its output, or give up after budget.

reachable

Does something accept a connection at url within budget?