You'll notice
Agent proxy startup keeps retrying the CA bundle fetch with backoff instead of giving up on the first failure.
Agent proxy startup (CCR relay) now fetches and merges the CA bundle through a budgeted, retryable helper, with a 5-second budget on the first attempt and 15 seconds on later attempts. A background retry loop keeps retrying with backoff until it succeeds, the generation changes, or shutdown occurs, instead of giving up after the first CA fetch failure.