v1.0.0-beta.1

First public beta of the Cenvero Stratum platform. Establishes the bare-metal control plane, the in-kernel data path, and hardware-bound licensing.

Added

• Two managed bridges (cnv-mgmt-br0, cnv-user-br0) owned from boot, with a kernel module that detects out-of-band changes to owned interfaces so the agent can reconcile them.
• In-kernel data path: NIC-level filtering plus bridge MAC and IP↔MAC anti-spoof (ARP and IPv6-NDP).
• Hardware-bound licensing: firmware/SMBIOS binding, fails closed on non-bare-metal.

Known issues

• Gateway-mode forwarding (NAT/FIB) is incomplete — compute mode only for now.
• CRL polling logs a verification warning before activation (cosmetic).