Wires mycelium-security@v0.1.0 helper into every outbound HTTP path. Three-layer defense: sanitize URL chars/scheme, assert public IP (post-DNS, blocks RFC1918 + cloud-metadata + IPv6 link-local + unique-local), block 3xx redirects. SSRF integration tests cover the 5-attack matrix (backslash / embedded-creds / IPv6-link-local / DNS-private-rebind / AWS-metadata-endpoint) + redirect block. See https://github.com/adelaidasofia/mycelium-security for the helper.