Function applyRuntimeFirewallRules

applyRuntimeFirewallRules(
    firewallState: Pick<
        FirewallStateContainer,
        "setRateLimit"
        | "setGlobalRate"
        | "persist",
    >,
    config: GuardConfig,
    napplet: string,
): void
Install the guard profile's rates for an applet in the runtime firewall.

This is the pre-dispatch half of kernl's guard: ShellAdapter does not forward kehto's firewall hooks (D-001), but the runtime's own firewall still runs before every dispatch, so the profile's limits are pushed into it when a window binds. No policy is set: kehto's allow policy bypasses every rate, matcher and burst check, and the user's choices to deny or block live in the grants layer, not here.
Parameters
- firewallState: Pick<FirewallStateContainer, "setRateLimit" | "setGlobalRate" | "persist">
  bridge.runtime.firewallState.
- config: GuardConfig
  Current guard configuration.
- napplet: string
  Applet identity (dTag).
Returns void
Nothing; the firewall state is mutated and persisted.
Example
```
applyRuntimeFirewallRules(bridge.runtime.firewallState, guardConfig, summary.identity.dTag);
```