Fixed

Ordinary Windows users no longer receive a false installation CA repair warning when the public root is healthy and the signer is correctly restricted. HTTPS CONNECT now recognizes equivalent inner authorities without an explicit default port, reports genuine cross-authority requests and header timeouts distinctly, and keeps HTTPS compatibility tied to completed HTTPS evidence.

Current documentation and frozen replay authority now identify the independently verified v0.10.10 files and all ten published crates. Installation CA provisioning, first-install cleanup of identified pre-S185 state, managed route release and ordinary observation timing are described as shipped, while v0.10.9 limitations remain historical.