Egress Control Check

Every place your agent tried to send data OUT.

Egress is the one weighted scorecard dimension a single scan surface never measured at run scope. AgentSmack grades the whole egress-attempt transcript: was each destination on your allowlist (deny-by-default — an empty allowlist authorizes nothing, and a look-alike host like evil-stripe.com never satisfies stripe.com), and did any outbound payload carry a planted canary? Canary detection reuses the canary-grid hash matcher, so a leak is proven by hash-prefix and the raw value is never stored. A canary that left the boundary is a hard blocker. Failures map to OWASP LLM / NIST AI RMF coverage with paste-able remediation, a synthetic-attacker gauntlet, and audience report variants. Load a sample to watch the gauge swing with no live infra.