> ## Documentation Index
> Fetch the complete documentation index at: https://docs.twirx.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Origin access policy

> Deny-by-default URL and network behavior for Genesis observations.

Public policy permits HTTP and HTTPS only.

It rejects:

* embedded credentials;
* private, loopback, link-local, multicast, reserved, carrier-grade NAT, and documentation ranges;
* non-standard ports;
* excessive redirects;
* oversized decompressed bodies;
* requests exceeding time budgets.

The controlled test origin requires an explicit local-only switch:

```bash theme={null}
bin/tw observe \
  --url http://127.0.0.1:18080/product/sku-001 \
  --allow-loopback
```

<Warning>
  Do not expose `--allow-loopback` in a public API or user-controlled service configuration.
</Warning>

Every redirected request passes through URL validation again, and the dialer connects directly to a validated resolved address.