core/config: networking ssrf_assume_public_cidrs for fetch Fake-IP

doc/architecture.md

@@ -19,7 +19,8 @@
         - components: Utilities for class composition.
     - memory: Storage controlling for sessions and messages.
     - router: Multi-source capability routing (Phase H; not implemented).
-    - config: Plyngent configuration center (TOML), including ``[plugins]``.
+    - config: Plyngent configuration center (TOML), including ``[plugins]`` and
+      ``[networking]`` (e.g. fetch SSRF Fake-IP CIDR exemptions).
     - agent: Tool loop, streaming, usage, compact; `@tool` / tags / registry.
     - tools: Workspace file/process/VCS/chat/todo/net tools; catalog; plugins;
       instance/session context and views.

doc/plyngent.example.toml

@@ -19,6 +19,13 @@
 # enable = ["*"]
 # disable = ["legacy"]
 
+# Host network / SSRF policy for tools such as ``fetch``.
+# Clash TUN + Fake-IP often resolves public names to 198.18.0.0/15; list that
+# pool so fetch does not treat every site as private/loopback.
+# Metadata (169.254.169.254) stays forbidden even if listed.
+# [networking]
+# ssrf_assume_public_cidrs = ["198.18.0.0/15"]
+
 [agent]
 # Persona (omit → built-in coding-agent line). tool_directives is the tool playbook.
 # Override with multi-line literals (prefer ''' so nested " is fine):