Found in mission 010. `HL_HOST=127.0.0.1 IDENT_PORT=8398 ./bin/hybriel project.hl` then `ss -ltnp` shows `0.0.0.0:8398`: WebFramework.hl:472 builds `new NativeWebSocketServer(port = port)` without a host. Expected: honour HL_HOST (as the binary's operatorBind / hl:web v1 did). Workaround: pass `http = new NativeWebSocketServer(port = port, host = …)` to the WebFramework constructor. Security relevant: apps meant to sit behind nginx are reachable directly.