Syn 0.3.1

Syn 0.3.1 fixes native Secret Service connection lifetime for persistent operator and Agent custody. Owned D-Bus sockets and selectors now close after successful and failed operations, including unlock and session-lock probes. The Agent’s 128-descriptor limit, no-prompt background behavior, identity derivation, journal anchors and wire profiles remain unchanged.

The native regression reproduced exhaustion after 62 reads before the fix. The corrected wheel completed 600 real credential operations with garbage collection disabled and four descriptors before and after; two-Agent native restart and isolation checks also passed. Protected staging repeated application/PostgreSQL, portable-client, four native operator and two Agent gates on this exact source, then independently downloaded and verified all seven signed draft assets.

Consumers must retain independent source, manifest and release-authority pins. Publication alone does not qualify an installed node. Official Python 3.12/3.13 deployment results are recorded separately in the dated patch record. Cog admission, general messaging, group rotation and recovery retain their later milestones. No hardware attestation or automatic identity replacement is introduced.

Staging and signed draft readback · Architecture and dated qualification

Source: bb5f458fab11de6de408d19f53cc21524a1f7735
Manifest SHA-256: 10da08e7b0af7d32c48a3087e873c2e448e846e2e3aac6ad56df81330267b4f1
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset official package set. Earlier released assets remain immutable.