network/ltechnologies.onionphone.securemessenger.core.network/NetworkGuard

NetworkGuard

@Singleton

class NetworkGuard @Inject constructor(proxyManager: ProxyManager)

Fail-closed gate for every network path in the app. No socket, HTTP client, or WebView may be created without first passing assertNetworkAllowed — this is the single choke point that enforces the "Tor-only, no clearnet fallback" guarantee described in docs/ARCHITECTURE.md.

Constructors

NetworkGuard

@Inject

constructor(proxyManager: ProxyManager)

Functions

assertNetworkAllowed

fun assertNetworkAllowed()

Throws NetworkBlockedException if the Tor SOCKS proxy is not currently reachable.

createFailClosedSocket

fun createFailClosedSocket(): Socket

Returns a plain Socket, but only after the killswitch check passes.