Constant FORMATION_PEER_DOMAIN 

pub const FORMATION_PEER_DOMAIN: &str = "formation.invalid";

The reserved domain every virtual callee address sits under. .invalid never resolves (RFC 6761), so a request that escaped the runtime’s egress reaches nobody.