TL;DR. golang.org/x/net/idna.Lookup.ToASCII runs UTS-46 NFKC mapping 0-9. A pre-IDNA net.ParseIP check rejects the NO_PROXY lists, TLS-SNI routers, and cookie-domain validators that TrimRight + ParseAddr golang.org/x/net/http/httpproxy, the canonical safe pattern, and two I ran into this one while writing a Go HTTP client for a private project. I idna.Lookup.ToASCII canonicalising the host The sha
Enterprise identity used to have a fairly stable center of gravity. A user authenticated. An application received a token. The token carried scopes or claims. The backend enforced what that application was allowed to do. That model was never trivial, but it was legible. Agents are making it less so. An AI agent is not just another software client. It can plan, delegate, chain tools, invoke other a