Configuration

Key	Default	Meaning
`mode`	`monitor`	`off` registers nothing. `monitor` evaluates and audits without acting. `enforce` denies and redacts.
`egress.allowHosts`	`[]` in schema, a starter list in the bundle	Permitted hosts. `.example.com` covers the apex and* every subdomain. An empty list means denylist-only.
`egress.denyHosts`	`[]`	Always denied. Beats `allowHosts` and `allowLoopback`.
`egress.allowLoopback`	`true`	Exempts `localhost`, `127.0.0.0/8`, `::1`, `*.localhost`.
`egress.onViolation`	`deny`	`ask` routes to `ctx.approval` instead — and degrades to deny when no approval service is mounted.
`redact.builtins`	`true`	Private keys, vendor API keys, JWTs, bearer headers, `KEY=value` assignments.
`redact.extraPatterns`	`[]`	Extra regex sources, compiled with the global flag.
`redact.placeholder`	`[redacted:{name}]`	`{name}` is the pattern that matched.
`audit.path`	`$DSH_HOME/egress-guard.jsonl`	JSONL, one decision per line.
`audit.logAllowed`	`false`	Also record calls that named a host and passed — this is how you build an allowlist out of real traffic.

dsh-egress-guard