Proxy Fail‑Closed Uploads

Validate that when the designated proxy is unavailable or fails pinning, browser uploads fail closed with no direct fallback and correct audit evidence.

Objectives

• Enforce fail‑closed posture when the proxy is down or presents an untrusted certificate.
• Deny uploads even under chunked or retried conditions; no direct egress.

Preconditions

• Proxy-only routing with pinning enabled.
• Test upload endpoint available.

Suite

ID	Canonical IDs	Flow	Procedure	Expected Outcome
INTEG-PROXY-FAIL-01	NET-EGRESS-09, NET-EGRESS-10, DM-WEB-04	Proxy Fail‑Closed Uploads	1) Stop proxy or present wrong CA. 2) Attempt browser upload (including chunked).	Denied; no direct fallback; audit shows proxyEnforced: true with reason: "proxyUnavailable" or "pinningFailed"; upload attempts denied with action: "deny".

Evidence Requirements

• network events with proxyEnforced, reason, alpn where applicable.
• dataMotion/web upload events with action, outcome, rule.id, integrity.hash.