Author here.

This came out of building a structured fuzzer around libnftnl and trying to understand where firewall semantics actually get fixed in the stack.

Curious how this lines up with others’ mental models of nftables.