The signer's security claim is that it cannot reach the network, not that it chooses not to. test/boundary.test.ts enforces that mechanically over both the import graph and the manifest.
