Highlights
- Replaces connection-context IP tracking with structural online-presence ownership.
- Tracks direct sessions, SMUX/H2MUX streams, legacy Mux, XUDP attachments, reverse RVS slots, and authenticated WireGuard flows independently from carrier lifetime.
- Atomically hands presence between trusted physical IPs on XUDP rebind and WireGuard roaming.
- Preserves server-observed peer provenance across PROXY, TLS, REALITY, HTTP, and QUIC transports.
- Removes the package-global XUDP manager and adds generation-safe lifecycle cleanup.
Reliability
- Adds race/checkptr lifecycle coverage, critical interleaving stress, WireGuard authenticated interop and StatsService assertions, and complete Linux build-matrix validation.
- Preserves reverse RVS continuity while a draining carrier is replaced.
Configuration and wire formats remain compatible with v26.8.15. Roll back by replacing the binary with v26.8.15; no configuration migration is required.