During May 2025, work focused on the containers/gvisor-tap-vsock repository, where a new EC2 Metadata Service Access Flag was implemented to control TCP traffic routing to the AWS EC2 metadata service via gvproxy. This feature, developed in Go, defaults to blocking access, maintaining the previous security posture while providing an explicit opt-in path for AWS Nitro Enclaves to reach IMDSv2. The approach emphasized clear integration boundaries and enhanced security for cloud infrastructure environments. No major bugs were addressed during this period, with efforts centered on system programming, networking, and planning for further testing, documentation, and monitoring of the new functionality.