- **The DNS row opens up.** It now shows the resolvers macOS is configured to ask *and*
  the ones that actually answered — with operator, location, and transport — so a
  split-DNS setup finally reads as what it is. When your router forwards to a public
  provider, it says so.
- **⌘D copies a diagnostics report.** The whole dropdown as plain text, warnings
  included, ready to paste into a bug report. **⌥⌘C** copies both exit addresses at once,
  and the DNS submenu copies either resolver list as bare addresses.
- **⌘? opens a help window** explaining the menu bar symbol, Since vs Checked, the DNS
  sections, and every shortcut.
- **`whereamip diagnostics`** prints exactly what ⌘D copies — the CLI still does
  everything the menu bar does.
- **Honest VPN names.** Tunnels are named from the network service they register, so
  clients this app has never heard of get named too; a tunnel it can't identify now says
  "VPN (utun4)" instead of guessing a brand. If yours is unnamed, ⌘D contains what's
  needed to add it.
