> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nika.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# net

> Contract, placement, related fields and source examples for this Nika YAML field.

[Language reference](/reference/language/overview) / `net`

## Meaning and placement

### → permits

The schema declares this field at the location below.

| Property             | Declaration                          |
| -------------------- | ------------------------------------ |
| Requirement          | Optional in this object              |
| Schema location      | `/properties/permits/properties/net` |
| type                 | "object"                             |
| additionalProperties | false                                |

**In the same object:** [env](/reference/language/words/env) · [exec](/reference/language/words/exec) · [fs](/reference/language/words/fs) · [tools](/reference/language/words/tools)

[Schema source (use the pointer above)](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/schemas/workflow.schema.json)

## In a source template

Excerpt from `templates/api-upload-and-create.nika.yaml`, source lines 54–63. This is a fragment, not a runnable workflow.

```yaml illustration theme={"system"}
  # NOT grant the capability to reach anyone. The host is the separate, required
  # half — an unlisted host is refused at RUN, mid-flight, with the bytes
  # already on the wire.
  net: { http: ["api.example.com"] }   # SLOT: the host from const.api_base
  fs:
    # A `multipart:` file part names a path, and that read crosses the boundary
    # like any other: measured, without this entry the call dies `NIKA-SEC-004 ·
    # ./out/assets/asset-1.png resolves outside the declared permits.fs.read
    # boundary`. One exact file, never the tree it sits in. The drift detector
    # models a multipart part as a read (2026-07-29) — the former NIKA-DRIFT-001
```

### Templates containing this field

| Template                                    | Source                                                                                                                                            |
| ------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| `templates/api-upload-and-create.nika.yaml` | [Line 57](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/templates/api-upload-and-create.nika.yaml#L57) |
| `templates/etl-state.nika.yaml`             | [Line 56](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/templates/etl-state.nika.yaml#L56)             |
| `templates/gate-and-act.nika.yaml`          | [Line 34](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/templates/gate-and-act.nika.yaml#L34)          |
| `templates/human-gated-ship.nika.yaml`      | [Line 67](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/templates/human-gated-ship.nika.yaml#L67)      |
| `templates/website-brief.nika.yaml`         | [Line 43](https://github.com/supernovae-st/nika-spec/blob/c5ebbb7b862b68bc6cf7235efba61173b844afc6/templates/website-brief.nika.yaml#L43)         |

These are literal key occurrences in the source files, not an execution or conformance claim. [How to instantiate a template](/guides/templates).

## Contract and implementation

This page projects the named specification revision. Check [released engine status](/reference/status) and [the validation workflow](/guides/agent-authoring) before running a file. An optional field is not evidence that every engine supports every value.

Canonical identity: `language:word:net`. Spec revision: [`c5ebbb7b862b`](https://github.com/supernovae-st/nika-spec/tree/c5ebbb7b862b68bc6cf7235efba61173b844afc6).

[How documentation stays connected](/reference/knowledge-system).