Stable v2.6.57
- fix(hardening): heal root-owned subdomains/ container on agent start
- fix(import): detach re-migration paths from the HTTP request context
- fix(notifications): only alert on sustained resource throttling, not a spike
- fix(dkim): serve the bare TXT value, not rspamadm's BIND zone output
- fix(constraints): DB-governor nonneg checks belong to packages, not reseller_plans
- feat(packages): DB query/CPU governor — queries-per-hour + statement timeout
- feat(mail): TLS-RPT per domain (RFC 8460) DNS publishing
- feat(packages): inode quota limit (MaxInodes) enforced via setquota
- feat(notifications): bridge failed systemd units into the notification center
- feat(notifications): per-event delivery channels (in-app / email / webhook)