Stratum v1.0.0-rc.30

Release candidate. Continues the Stratum 1.0 preview — recommended for evaluation and staging. Hold production rollouts for the stable v1.0.0 release.

Highlights

Dataplane continuity across agent restarts. The in-kernel packet filtering on tenant bridges — anti-spoofing, ACLs, and the firewall — now stays attached through an agent restart or update, closing the brief window where enforcement could lapse while the agent came back up. The attachment is safely re-adopted on start, and the whole mechanism fails cleanly back to the previous behavior on any kernel that doesn't support it.

Feedback on this release candidate is welcome — report issues through your account before the stable v1.0.0 cut.