Week of April 20: fused indexing, Agent intake, and anoncap

Performance

• Fused postindex manifest rows into PacketStats scans and enabled safe ranged execution for repeated postindex work.
• Added upload indexing timing breakdowns, sharkd transport timing, and manifest hydration diagnostics.
• Reduced supplemental signal probes and reused PacketStats protocol rows during indexing.

Agent

• Added Agent case context intake for scenario, measurement point, appliance, and symptom details.
• Added cooperative cancellation status for eligible heavy analysis tasks.
• Kept PCAP starter risks visible across navigation and repaired Codex transcript history rendering.

Anoncap

• Refreshed the anoncap marketing flow, download page, feature matrix, public-share presets, adaptive slicing defaults, and coherent fileset documentation.
• Added protocol coverage regressions and clearer pro comparison rows for field-aware anonymization.

Security and on-prem

• Added admin AI usage controls, entitlement controls, on-prem license tooling, active runtime image release behavior, and SAML certificate fingerprint configuration.
• Restricted Agent debug payloads to admins and gated analyzer telemetry behind explicit opt-in.