Function resolve 

async fn resolve(
    url: &Url,
    grant: &Grant,
    pkg_name: &str,
    deadline: Instant,
) -> Result<(String, Vec<SocketAddr>), AccessError>

The host’s addresses, looked up within deadline (the request’s own timeout covers DNS too), each checked against grant.