SCUA

News

UDP datagrams, as their own capability

July 12, 2026

SCUA can now send and receive datagrams. udp.connect(host, port) opens a socket locked to one peer; send and receive are ordinary calls on it.

The part we care about is the authority model. Datagrams are their own grant, --allow-udp=1.1.1.1:53, and the grant is never implied by --allow-net. Outbound HTTP and fire-and-forget packets are different powers with different abuse profiles, so a script granted one does not silently hold the other. Each partition also gets its own allowlist and its own rate budget, so a co-tenant cannot exhaust yours.

The use cases are the classic ones: DNS lookups, game-state pings, talking to hardware on the local network. Small messages, no connection ceremony, and now no ambient authority either.