Function undoable 

pub fn undoable(
    call: &ConnectorCall<'_>,
    sandbox: &SandboxLimits,
    taint: &TaintSet,
) -> GateOutcome

The door: a call that reaches this machine’s own desktop passes when the floor trusts that connector and the run’s arguments came from inside the city; otherwise it is refused.

Taint outranks trust. A trusted connector still refuses a call a run derived from fetched content, because what the floor trusted was the connector, not whatever a web page asked it to type.