0.2.3 made repoKey optional in DidPeer.onAnnounce, but DidPeerRouter._onAnnounce gated on it too and dispatches FIRST, so a peer running the stateless virtual device (serve-membrane projectRepoCore:false) had its announce dropped before it reached the DidPeer. Verified live: tabertron's wj62 flipped stateless, stayed healthy and kept serving, but this membrane showed its front live=false and never re-fronted it. 0.2.4 fixes the router gate and additionally drops a now-frozen repo-core replica when a peer announces repoKey:null, so getRepo falls through to the verified get-repo-car derive path instead of failing its data-root assertion forever. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>