Fixed

Update rustix to 1.1.6 in the workspace and isolated audit lockfiles to address RUSTSEC-2026-0486. The Linux supply-chain graph digest is reconciled without changing package or edge counts.

Selected direct TCP replies now use a resolved inbound interface and normalize unfinished local outbound checksums before the private TCP bridge. Calibration requires acknowledgment of returned payload plus two-way transfer before recording reachability, and can retain exact route evidence when Npcap missed a diverted original packet. UDP route reports link the proxy control connection while keeping the relay tuple private. Auto scope help now describes launch-chain inspection.

Validated the signed direct route against controlled non-loopback IPv4 and IPv6 peers with exact bidirectional TCP exchange, unrelated sentinels, and diagnostics on and off. Reserve half of the finite packet work queue for selected traffic when unrelated candidate traffic surges, and wait for bounded packet-worker readiness before publishing the route. Require nonempty two-way UDP payload transfer before a direct route can qualify a positive reachability fact. Package certification now checks candidate ZIP and installed MSI help for the effective inspection scope and debug report.

Recognize the exact managed direct executable's target stage when qualifying its calibration observation window. The debug report joins route process generation through the bounded application correlation stream, and SOCKS5 CONNECT keeps its typed protocol classification separate from upstream detail so the application trailer can reconcile.

Managed Deep Capture packet scope now distinguishes unavailable socket attribution, unproved causal generation after its finite wait, and wait cooldown. The protected process trace records each retained flow-local omission interval and cause without treating withheld packets as captured packet truth.

The v0.11.0 public release and current documentation now name the same verified Windows downloads, direct-route commands, and published crate versions.