MCP gateway — the controller is now the single exposed entry point: agents reach any internal node's MCP surface via https://<controller>:18080/v1/mcp/<node-id> (TLS + admin bearer), forwarded over the node's outbound mTLS reverse stream. Test machines need zero inbound exposure. Byte-identical protocol semantics to direct access; HA-aware; audited and observable. Includes a post-release adversarial-review hardening round (response-size caps, full-chain timeouts, IPv6/LAN bind derivation, CORS, audit coverage).
MCP 网关——控制面成为唯一对外入口:agent 经 /v1/mcp/<节点ID> 沿节点 mTLS 反连通道直达内网测试机,测试网零入站暴露;协议语义与直连字节级一致。含对抗审查加固轮(响应封顶/整链超时/绑定地址派生/CORS/审计覆盖)。
Full changes: CHANGELOG. Docs: English | 简体中文. Verify with sha256sums.txt; binaries built with the production feature set (grpc,enroll,otel).