- Option doc: 'Default points at the in-host tuwunel (shared netns)' → updated to reflect that c0re forwards the gateway URL at runtime - DNS oneshot comment: 'inert in shared-netns mode' → removed since isolation is always on; oneshot always runs