== Enclave dedicated-IP egress demo ==

ports (ENCLAVE_PORTS):  http:8000=8000,tcp:7777=7777
egress (NAN_EGRESS): (not set — egress is OFF on this enclave)

[1][2] skipped (no NAN_EGRESS)
[3] transparent fetch (unmodified std::net):        internet sees 2a01:4f9:c013:9b52:248a:c1ab:5b18:a461

[4] loopback dial 127.0.0.1:8080: DENIED (Permission denied (os error 2)) — raw network closed ✓
[4b] same dial via connect_timeout: phantom Ok, first I/O fails (Socket not connected (os error 53)) — denial holds

On an egress-enabled enclave with the phase-2 toolchain: [1] == [2] == [3],
[4] denied — one stable IPv6 identity in both directions (this page is served
on that same address via the tcp6-relay), with no way to egress off-identity.