- Add a fault-domain-aware Relay Pool with local and remote relay instances, enrollment, health, drain, resume, rebalance, and staged assignment activation - Add global and workload-level Relay Spread controls with inherited, fixed-count, and all-ready-relays distribution behind a single Secure Link - Balance new workload connections across active relay assignments while preserving existing TCP and WebSocket streams during drain and failover - Add signed Relay Pool policies, scoped grants, source probes, assignment generations, policy expiry handling, and durable update state - Add one-instance-at-a-time Relay Pool updates with automatic drain, worker and supervisor verification, resume, and failure pause - Migrate existing singleton Relay installations in place without recreating Secure Links or changing their public topology - Add support for multiple service addresses per managed node - Add PEM and PKCS#12 certificate exports and restore certificate export actions - Preserve unsaved route settings during background refresh and consistently highlight modified configuration blocks - Improve Relay settings with stable instance ordering, workload spread controls, responsive sizing, and clearer local-node status - Synchronize realtime resource mutations, recreated environments, generated images, inference settings, OpenRouter balances, and accounting updates