v0.33.8

tests/transport_config.rs

@@ -20,7 +20,10 @@ fn local_listener_backend_requires_explicit_risk_acceptance() {
 
     let error = compile(config.clone(), 1, &policy())
         .expect_err("local administration listener must be rejected by default");
-    assert!(error.to_string().contains("accept_local_listener_risk=true"));
+    // Backend compilation adds vhost/member context; inspect the full cause
+    // chain so the assertion still verifies the actual risk gate.
+    let detail = format!("{error:#}");
+    assert!(detail.contains("accept_local_listener_risk=true"), "{detail}");
 
     config.vhosts[0].backends[0].accept_local_listener_risk = true;
     compile(config, 2, &policy())