HTTP hooks refuse to send when the sandboxed process's network trust settings diverge from the user's own

Before sending an HTTP hook, Claude Code now compares its own proxy, TLS-trust, and resolver configuration against the person's actual environment, checking a fixed list of relevant variables. If they diverge, the hook is refused rather than sent through a potentially mismatched network path.