WolfStack v25.0.3

v25.0.3: activate the dormant WolfNet-IP conflict check in add_node (completes AstroMando #3 batch)

The wolfnet-IP conflict check in add_node has silently never fired:
/api/agent/status returns an externally-tagged AgentMessage ({"StatusReport":
{…}}), but the check read wolfnet_ips from the TOP level, so remote_wolfnet_ips
was always empty. Now reads it from the StatusReport envelope (same fix as the
node_id/hostname reads added in v25.0.2).

Activating a long-dormant join-rejection gate carefully: the new
wolfnet_ip_conflicts() helper rejects ONLY when a reported IP is routed (per the
cluster-wide WOLFNET_ROUTES IP→owner cache) to a CONFIRMED DIFFERENT node. An IP
the cluster still attributes to the joining node's OWN offline stale entries (a
reimaged node reusing its static IP) is its own footprint, not a conflict; an IP
with no known owner is left alone (fail-open). So it can never falsely reject the
reimage rejoin that #3 exists to support, yet now catches a genuine duplicate-IP
misconfiguration. Pure helper + unit test.

---

Verifying this release

Each binary is signed via cosign keyless OIDC (no key distribution — signing identity is the GitHub Actions workflow itself, anchored to the Sigstore Fulcio CA and the Rekor transparency log) and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfstack-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/WolfStack/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfstack-x86_64

Verify the build provenance:

gh attestation verify wolfstack-x86_64 --repo wolfsoftwaresystemsltd/WolfStack

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

• wolfstack-x86_64 / wolfstack-aarch64 — static musl binaries (Linux x86_64 and ARM64 / Raspberry Pi 4+).
• wolfstack-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
• SHA256SUMS — checksums for both binaries.

For per-version history see CHANGELOG.md.