v8.5.0

8.5.0 (2026-10-01)

Features

• core: vouch for every device on a host with a machine identity (19c2dec), closes #343

Bug Fixes

• core: drop a hub-only device from the directory once the trust that admitted it is withdrawn (618aebb)
• core: judge every membership proof an advert carries so a device keeps each voucher's record (8ccc142)
• core: load an issuer identity with its owning module's full record guard (7903eac)
• core: refuse a gateway_trust id that is not a full device-id (bf7a9d0)
• core: report an unidentifiable machine proof instead of failing list_agents (2576f06)
• core: write issuer identity files atomically and refuse an unusable one (f5efa5e)

Refactoring

• core: share issuer identity persistence between the principal and a new machine identity (fed059b)

Documentation

• core: count trusted machines in the hub session gate (8cf2576)
• core: state that the machine key is per OS account on a host (ea52fc0)

Styles

• core: keep a single blank line between the transport's election and device fields (4c843a5)
• core: punctuate the admitDevice doc comment and a trust test title without dashes (45dad83)