- Add multi-instance Relay Pool operation with multiple active relay assignments, per-connection distribution, failover, and existing-stream pinning - Add the Relay Supervisor and managed Relay Worker for enrolling and operating relay instances on additional physical hosts - Add signed policy snapshots with revision checks, expiry enforcement, endpoint authorization, and workload-scoped grants - Add staged endpoint registration and source verification before activating new assignment generations - Add graceful drain, forced disconnect, active tunnel, registered endpoint, and pressure telemetry - Add signed one-instance-at-a-time updates for Relay Supervisor and Relay Worker binaries on amd64 and arm64 - Bundle digest-pinned Relay, Database Connector, and Secure Link Connector images in one signed Relay release manifest - Preserve protocol v1 and singleton compatibility for existing Gateway installations during migration to Relay Pool