What probably matters to youSection of the release
What
The sandbox status view now tells you if HTTPS interception is actually set up, and what to do when it isn't.
Details
Adds a "TLS inspection CA:" row rendering either "trusted" or "not trusted".
When the untrusted CA is the managed one, the row suggests "· run /sandbox install".
Otherwise it advises "· ask your administrator to trust the configured sandbox CA — see https://code.claude.com/docs/en/sandboxing".
Only computed when the sandbox TLS-terminate configuration is present; on Windows this means the CA source is not "unavailable". Otherwise the trust field is null and the row is hidden entirely.
Evidence
TLS inspection CA:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.