> Not sure what permission you're referring to or what your curl script is trying to do but `/opt/homebrew/opt/curl/bin/curl http://www.google.com` works just fine on Tahoe from both iTerm2 and ghostty.

Mwwahahaha. Yep. Curling something neutral like google.com worked fine for me as well. That's how I was verifying that everything was OK.

Now try to do "curl https://192.168.0.1" (or whatever is your local router's IP). It will trigger this request: https://imgur.com/a/tMAApfB

The permission in question is called "Local Network", you can find it in the "Security" section in the control panel. Yeah, their names don't match.

Oh, and negative entries are NOT listed in that panel. So if you deny the request, there is NO indication of that. Anywhere. Logs will also be empty.

> This is IMO the correct behavior. If something asks for permission and it's not explicitly granted, then the default should always be denied.

The keyword is SILENTLY. The permission requests should be logged and made available in a central location, where they can be reviewed.

It's literal recursive WTF. When you start looking at it, it gets worse and worse.