- Add multi-instance Relay Pool operation with multiple active relay assignments, per-connection distribution, failover, and existing-stream pinning
- Add the Relay Supervisor and managed Relay Worker for enrolling and operating relay instances on additional physical hosts
- Add signed policy snapshots with revision checks, expiry enforcement, endpoint authorization, and workload-scoped grants
- Add staged endpoint registration and source verification before activating new assignment generations
- Add graceful drain, forced disconnect, active tunnel, registered endpoint, and pressure telemetry
- Add signed one-instance-at-a-time updates for Relay Supervisor and Relay Worker binaries on amd64 and arm64
- Bundle digest-pinned Relay, Database Connector, and Secure Link Connector images in one signed Relay release manifest
- Preserve protocol v1 and singleton compatibility for existing Gateway installations during migration to Relay Pool