Week of June 22: steadier Agent reporting and transport evidence

Made upload report triage more reliable when an analysis moves from upload into Agent, including deferred report emails and handoff edge cases.
Improved Agent replay recovery so reopened investigations preserve richer evidence previews without duplicate streamed events.
Rendered cached decode ranges, enriched connection pages, record list cells, and tool output summaries more clearly in Agent evidence cards.
Added a bottom thinking state for quiet Agent runs so long-running analysis still shows visible progress.

Added Citrix transport quality analysis to help teams spot ICA session health issues and navigate directly to relevant protocol signals.
Fixed queued DNS and TLS metadata materialization so large-capture readiness and starter briefs have more complete post-index context.
Tightened capture completion and derived readiness gates to avoid showing stale or premature analysis states.

Fixed analyzer breadcrumb navigation races and upload report progress badge states in active investigation workflows.
Corrected nested structured answer summaries and cached evidence rendering so timeline content is easier to scan.
Improved report email task durability when a worker is interrupted during deferred Agent report delivery.

Documented corporate upstream proxy setup and refreshed on-prem egress approval guidance.
Hardened the iron-proxy integration, including SES static credential handling and generated proxy guard configuration.
Added a safer SaaS frontend-only publish switch and backend build metadata handling for release operations.

Updated IDS fidelity and telco anoncap sweep coverage, including the public anoncap capability matrix.
Pinned the Wireshark build to include the latest anoncap fix used by PacketSafari processing.

Surfaced demo account expiration in the app account menu and profile view.
Refreshed frontend dependency policy and release markers through the beta.70 SaaS candidate series.