leak-guard bans the .invalid TLD (grouped with private .internal/.local/etc); example.test is the RFC 6761 reserved test TLD — equally unreachable, not on the ban list — so the leak-guard CI check passes.
leak-guard bans the .invalid TLD (grouped with private .internal/.local/etc); example.test is the RFC 6761 reserved test TLD — equally unreachable, not on the ban list — so the leak-guard CI check passes.