Intercepting Egress in Node/TypeScript Agent Evals: fetch, undici, DNS, spawn, and the Audit Log That Fails the Run

A hands-on guide to severing live network egress from Node/TypeScript agent evaluations by intercepting fetch, undici, DNS resolution, and child_process spawn, and wiring those interceptions into an audit log that fails the run the moment a real-world side effect occurs.