fix(npu): expose advisory gateway on docker bridge

openvino-advisory-gateway/tests/test_gateway.py

@@ -34,6 +34,18 @@ def test_authority_envelope_is_advisory_and_forbids_side_effects() -> None:
     assert env["npu_proof"] == {"required": True, "ok": True, "npu_busy_delta_us": 123}
 
 
+def test_bind_host_requires_explicit_docker_bridge_approval() -> None:
+    gateway.validate_bind_host("127.0.0.1")
+
+    with pytest.raises(ValueError, match="without --allow-docker-bridge"):
+        gateway.validate_bind_host("172.19.0.1")
+
+    gateway.validate_bind_host("172.19.0.1", allow_docker_bridge=True)
+
+    with pytest.raises(ValueError, match="approved bridge IP"):
+        gateway.validate_bind_host("0.0.0.0", allow_docker_bridge=True)
+
+
 def test_classify_calls_sidecar_and_logs_metadata_only(tmp_path: Path) -> None:
     calls: list[tuple[str, dict]] = []