The village's business with the internet is to gather, not provide. Reading happens only from the approved sites below — like every AI platform's browse list. Sending anything out is rarer still: a closed-by-default route per service, opened one at a time. A worker wanting a new site or route files an ask on your Bridge; only you can approve. Every crossing is receipted. Your API tokens are stamped on at the gate, server-side — the AI never holds them.