pub fn enforce_auth_bind(
addr: SocketAddr,
auth: &Auth,
posture: &SecurityPosture,
) -> Result<()>Expand description
Fail-closed bind guard: refuse to expose an unauthenticated control plane on a non-loopback listener unless the posture explicitly allows it, and warn loudly for any auth-disabled listener.