Linux amd64 CNI IPAM compatibility build using Go 1.27.1. When bridgeSubnet is expressed as a network address, v0.1.5 deterministically selects the bridge plugin's first usable gateway when present; explicit host addresses still win and unresolved multi-address bridges still fail closed.
Main commit 4676b32 passed CodeQL and the source/product security gate (run 34822550799), including race tests, root/metadata coverage gates, govulncheck v1.6.0, and reproducible Linux builds. The supplied CycloneDX SBOM records Go 1.27.1 and dependencies; Trivy 0.74.0 found no known vulnerabilities in that SBOM on 2026-09-14. The published binary SHA256 matches the independently built CI product. A live Ubuntu 26.04 native-nftables two-host Flat network passed container restart and host reboot checks for host ports, cross-host traffic, Metadata, DNS, and Server egress. This binary release does not by itself upgrade the packaged Flat runtime or Catalog.