Why a secret's placeholder arrived unchanged
The troubleshooting guide now covers a rule's near-miss (/ingest is not /ingest/), paths that read two ways, clients that ignore HTTPS_PROXY, and what the sandbox's own NO_PROXY lists; the security guide links to it.