docs: add design for enforcing host network. #415

	name: build
	on:
	pull_request:
	branches:
	- main
	- release-*

	# cancel the in-progress workflow when PR is refreshed.
	concurrency:
	group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref \|\| github.sha }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	build:
	name: build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 1
	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	- name: run make build
	run: make build
	- name: make build installer
	run: make build-installer
	- name: run build multifile installer
	run: make build-multifile-installer
	- name: Check for uncommitted changes
	run: make check-all-committed
	- name: Show the uncommitted "git diff"
	if: ${{ failure() }}
	run: git diff ; false

Provide feedback