{"version":"2.1.274","anchor":"agent-proxy-can-install-its-ca-into-the-system-trust-store","canonical_anchor":"agent-proxy-can-install-its-ca-into-the-system-trust-store","heading":"Agent proxy can install its CA into the system trust store 'directly' via a new anchor\/layout path, not just via a refresh helper","tier":"internal","area":"Elsewhere","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274\/e\/agent-proxy-can-install-its-ca-into-the-system-trust-store","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274","markdown":"### Agent proxy can install its CA into the system trust store 'directly' via a new anchor\/layout path, not just via a refresh helper\n\nClaude Code's local proxy can now install its security certificate into the system trust store directly, not just via a refresh helper\n\n**What**\n\nClaude Code runs a local agent proxy that needs its certificate authority (CA) trusted by the system so it can inspect secure connections. Installing that certificate into the system trust store now tries a new 'direct' method first, writing the certificate to an anchor location, before falling back to the previous approach of refreshing it through a helper command. Diagnostic telemetry now records which method succeeded (`direct` or `refresh`) and gives more detailed failure reasons, such as `direct_failed_step`, `direct_skipped`, and `hook_incomplete`.\n\n**Why**\n\nA more direct installation path can make trusting the proxy's certificate more reliable, and the added detail makes it easier to see why installation failed when it does.\n\n- Area: Elsewhere\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}