Honesty Boundary

This is a toy HTTP Host routing example, not production server configuration.

highlighted = computed this step

What this toy model checks

The trust boundary parses one request, recomputes the Host header, and recomputes the winning row.

\text{recompute before rendering}

DNS and TCP may get bytes to a server. The Host header can still choose which site that server serves.

\text{one server, many names}

NOTE: toy HTTP request only; not TLS name indication, proxies, newer HTTP versions, routing policy, auth, cookies, or production web server config.

\text{toy HTTP Host routing only}

The exact Host header chooses the exact virtual-host row; nothing is guessed in the browser or in client code.

\text{Host header selects net-docs}