THRALL v0.5.3 — Tool for Hierarchical Replication And Identity Linking

THRALL is a control plane. This release removes the last places where the project looked like it also shipped a peer.

The peer is now entirely yours to run

• Deleted Containerfile.syncthing and quadlet/syncthing.container.
• The pipeline no longer builds or pushes a peer image.
• The control-plane unit no longer depends on syncthing.service.
• Added tests/no_peer_artifacts.rs: the build fails if a peer image, a peer unit, or a peer publish step ever reappears.

A peer is stock Syncthing that you run on every hub. The README documents the deployment recipe, and CI checks that recipe against the upstream image so the documentation cannot drift from what actually works.

Naming

• Removed the st-mesh-mgr name from the sources, the quadlet unit, the repository description, and the historical commit message.
• Renamed the roster file from mesh-mgr.db to roster.db, in the daemon, the default fleet template, and the documentation.

Docs

README.md and the landing page are rebuilt around what a visitor actually cares about: the outcome, the guarantee, and how to get it running. Every claim in the trust table is enforced by a failing test.

Note for operators

Existing deployments are unaffected: a fleet that sets portal.database_path explicitly keeps using the file it names. Rename the file at your convenience.