What
In cloud sessions that route traffic through the agent proxy, Claude Code needs a certificate authority (the certificate that lets it trust secure connections through the proxy). At startup it now logs where that certificate came from and records it in its usage data. When the certificate comes from the environment, it runs an extra step to reconcile it. The step that fetches the certificate no longer saves the certificate file itself; that now happens in the code that asked for it.
Why
This changes how trust for secure connections is set up in proxied cloud sessions. If it fails, Claude Code logs "[agent-proxy] CA reconcile crashed".
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
When the certificate comes from the environment rather than being fetched is not clear.