What probably matters to youSection of the release
What
Doctor gained a check that surfaces sandbox mask-credential warnings as individual issues with a concrete fix, instead of leaving them as a single stderr line at startup.
Details
runs only when sandboxing is enabled and a mask warning is present
splits the warning on " · " and turns each part into its own issue
covers empty injectHosts, masks degrading to deny on macOS, and TLS termination not being enabled
Evidence
TLS termination is never enabled in scrub-only mode
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
