Functional streaming release bound to 09428d9. Signed HMAC ingestion returns 202 only after broker acknowledgement. The CPU worker publishes acknowledged compact results, commits offsets only after result delivery, and is proven with a real Redpanda API-to-worker E2E. Includes wheel, sdist, CycloneDX SBOM and verified checksums. Replay protection is single-instance by design; locked dependency advisories and heavy CUDA image build time remain documented limitations.