Why HTTPS_PROXY Cannot Prevent Agent Egress: Three Kernel-Level Gaps

Setting HTTPS_PROXY provides false security: agents can bypass it through subprocess environment clearing, direct socket APIs, and transports like gRPC and QUIC that ignore the environment variable entirely. The kernel enforces none of these restrictions by default. True egress control requires kernel-level enforcement via nftables or Kubernetes NetworkPolicy.