What's wrong with this entry?
Anonymous. No account, no email.
New sandbox option for macOS that allows access to com.apple.trustd.agent within the sandbox. This is needed for Go-based CLI tools (gh, gcloud, terraform, etc.) to verify TLS certificates when using httpProxyPort with a MITM proxy and custom CA.
Evidence
Network isolation setting (search for "enableWeakerNetworkIsolation", "Reduces security")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.