From 186beafcff5db1765f773d87497ee36114bc1ce6 Mon Sep 17 00:00:00 2001
From: drew <drew@local>
Date: Thu, 20 Aug 2026 00:38:22 +0300
Subject: [PATCH] push after the egress ruleset

---
 svc/egress.go | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 svc/egress.go

diff --git a/svc/egress.go b/svc/egress.go
new file mode 100644
index 0000000..f1dbb99
--- /dev/null
+++ b/svc/egress.go
@@ -0,0 +1,4 @@
+package svc
+
+// PostEgress proves the pipeline still reaches R2 with policy drop on output.
+func PostEgress() string { return Verify("egress") }