Per-host Subnet v0.2.8

Linux/amd64 companion binary rebuilt from verified source commit f6bd5ad with Go 1.27.0. The CI raw asset matches the archive byte-for-byte; SHA256SUMS and CycloneDX SBOM are attached. Binary-mode govulncheck found no vulnerabilities; Trivy 0.74.0 rootfs recognized the Go binary and stdlib v1.27.0 with zero vulnerability and secret findings. This is a Linux integration prerelease. Privileged two-host, Windows, upgrade, and rollback validation remain outstanding; do not treat this asset alone as a production approval.

Per-host Subnet v0.2.7

This prerelease supplies reviewed Linux/amd64 artifacts for PastureStack overlay-network integration testing.

Validation:

• built twice with Go 1.26.5 and matched bit-for-bit;
• repository race tests, go vet, and module verification passed;
• Trivy reported zero HIGH or CRITICAL findings;
• SHA-256 checksums, CycloneDX SBOM, and the full Trivy JSON report are attached.

Promotion remains gated on privileged multi-host integration, upgrade, and rollback testing. Existing upstream history, attribution, and license terms remain authoritative.