Syn 0.4.0: native private pub-sub and Cog identity contracts

Syn 0.4.0 adds authenticated private pub-sub between genuinely enrolled native Agent nodes, for Potbot's identity-bound Cog admission and heartbeats.

• Canonical Syn owns native group-key custody, encryption, selected-leaf signatures, membership and replay checks. The privileged local relay carries signed ciphertext over private sockets and opens no IP listener.
• The public SDK verifies fresh replies from the selected live node. Relay acceptance, signed peer reception and permission to execute remain separate contracts.
• Potbot binds one-use grants to the current task, input, installed operation, release and native node session; existing image, lease, budget, audit and confirmed-stop requirements remain mandatory.

The first messaging profile is bounded, volatile and local to Linux x86-64/WSL2. It does not establish durable delivery, consensus, cross-host behavior or production Cog-host qualification. Upgrades/recovery and general rollout retain their separate gates. Existing identities and releases are unchanged.

Source: 6205baf95b87193133d45c749a0fe5d5b577581f
Manifest SHA-256: a406356fba844a28c04870e45299ccd83e406b5dbe8b7a55741db6d5a6cd1088
Release authority SHA-256: a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

The two wheels, two source distributions, hashed dependency lock, canonical manifest and detached signature form the seven-asset package set. Select independent trusted pins and verify all bytes before installation. Package publication and official installed-node acceptance are separate states.

See the private pub-sub contract and paired Potbot admission guide. The dated release record will retain published-byte and official-package qualification evidence.