Syn 0.5.0: signed LAN enrollment

Syn 0.5.0 adds signed LAN discovery and protected enrollment for native Agents. Discovery establishes the pinned operator’s identity before the Agent sends an encrypted pledge. The operator stores the pledge in a pending inbox and approves candidate reservation separately from the Agent’s chosen identity. An exact retry can recover the prior result after interruption.

Potbot’s existing sandbox keeps the Agent’s keys inside the sandbox. The host relays public discovery information and encrypted packets. See the enrollment guide.

Release pin	Value
Source commit	e0f92a8abb8839dd711a92a3f5a0ba070744e6a1
Manifest SHA-256	f1315407ffd23c1497ee613a9dea18d4c0f75f152f49e6e4b0b4c773e021674a
Release authority SHA-256	a47f15e010613c0a839a48f2035b8f71d6f9e46ee3df07ed58487079d56ae216

Verify the manifest signature and all package hashes against independent pins before installing. The seven assets include the runtime and client wheels, their source distributions, the hashed dependency lock, the manifest and its detached signature.