v0.8.0 — encrypted transport

LUMABRI_ENCRYPT turns on an authenticated encrypted transport (X25519 + Ed25519 identity handshake, ChaCha20-Poly1305 frames), closing the last of bokiko's four network findings. Opt-in; plaintext unchanged when off. Crypto verified against RFC 8439/7748 vectors. Trust-on-first-use without a pinned key; mandatory mode and a security-advisory review are the follow-ups.

v0.7.0 — authenticated peer registration

A peer's name is now bound to its own Ed25519 key: the tracker refuses a registration under an existing name with a different key, closing peer-name takeover. Protocol break: a swarm upgrades together. Also since v0.6.0: WAN speculative verification, hedged requests, cross-checkpoint CAS, key rotation, NAT relay for EXEC. 19 suites + 2 unit tests green. The plaintext-transport hardening remains open.

v0.6.0 — protocol v2

Signed checkpoint identity, crash-safe mirror, hardened accept path, continuous discovery, and readahead that stops at the dense/expert line. Protocol break: a swarm must upgrade all at once. 15 test suites green.