Expand description
Plain HTTPS bundle transport.
The URL is re-validated through the shared SSRF guard on every call rather than only at profile-parse time, so a profile reloaded from a mutable source cannot smuggle a link-local address past the boot path. Redirects are not followed: a 3xx would let the origin move the download to a host the guard never saw.
Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.