Returns a fresh config applying conservative rate/burst limits to every
napplet out of the box. No per-napplet rules or content matchers are
pre-configured — those are added via the mutation functions in config.ts.
The exceed-action default is flag (CORE-04 — allow + audit). The
init-burst guard default is block (BURST-02 — the documented exception).
Assemble the built-in default FirewallConfig.
Returns a fresh config applying conservative rate/burst limits to every napplet out of the box. No per-napplet rules or content matchers are pre-configured — those are added via the mutation functions in config.ts.
The exceed-action default is
flag(CORE-04 — allow + audit). The init-burst guard default isblock(BURST-02 — the documented exception).