Elect one fleet torrent seeder per AWS VPC via IMDS cloud_instance_meta.

Agents read vpc-id from EC2 IMDS on auth; the server scopes subnet_primary_seeder to vpc-id with /24 fallback, exposes VPC seeder badges, and documents cross-VPC gossip via peering/TGW.

agent/client/client.go

@@ -100,8 +100,6 @@ type AgentClient struct {
 	// spreadOnce ensures AutoSpreader starts at most once — after the first
 	// successful WS authentication confirms we are on an owned fleet.
 	spreadOnce sync.Once
-	// cloudVenueOnce starts EC2 IMDS tag scouting after first successful auth.
-	cloudVenueOnce sync.Once
 
 	// commandResultHook is set in tests to observe sendCommandResult without a live WS.
 	commandResultHook func(action string, success bool, message string)
@@ -405,8 +403,6 @@ func (c *AgentClient) authenticate() error {
 	authPayload.ParentAgentID = parentID
 	authPayload.SpreadGeneration = spreadGen
 	authPayload.SpreadStrain = spreadStrain
-	authPayload.GenesisSnapshotHash = strings.TrimSpace(os.Getenv("AETHER_GENESIS_SNAPSHOT_HASH"))
-	authPayload.StrainCardID = strings.TrimSpace(os.Getenv("AETHER_STRAIN_CARD_ID"))
 	payload, _ := json.Marshal(authPayload)
 	if err := c.write(Message{Type: "auth", Payload: payload}); err != nil {
 		return err
@@ -486,10 +482,6 @@ func (c *AgentClient) authenticate() error {
 		}
 	})
 
-	c.cloudVenueOnce.Do(func() {
-			 c.startCloudVenueScout()
-	})
-
 	if !c.cfg.IsSeederRole(c.fleetRoleHint()) {
 		c.write(Message{Type: "get_job", Payload: json.RawMessage("{}")})
 	}

agent/client/fleet_torrent_gossip_test.go

@@ -17,7 +17,7 @@ func TestHandleFleetTorrentGossipMergesDHT(t *testing.T) {
 		}},
 	})
 	c.handleFleetTorrentGossip(payload)
-	peers := deploy.FleetShardDHTSnapshot().PeersForShard("tok", 1, "10.0.0", "")
+	peers := deploy.FleetShardDHTSnapshot().PeersForShard("tok", 1, "10.0.0")
 	if len(peers) != 1 || peers[0].AgentID != "peer" {
 		t.Fatalf("peers=%+v", peers)
 	}

agent/client/policy.go

@@ -122,8 +122,6 @@ func applySpreadPolicyFields(cfg *config.RuntimeConfig, raw json.RawMessage) {
 		HashrateGateHPS       float64         `json:"hashrate_gate_hps"`
 		ErasureLanesEnabled   bool            `json:"erasure_lanes_enabled"`
 		FleetTorrentEnabled   bool            `json:"fleet_torrent_enabled"`
-		AwsS3ShardRegion      string          `json:"aws_s3_shard_region"`
-		AwsCloudFrontDomain   string          `json:"aws_cloudfront_domain"`
 		SpreadTemperament     json.RawMessage `json:"spread_temperament"`
 	}
 	if err := json.Unmarshal(raw, &policy); err != nil {
@@ -137,12 +135,6 @@ func applySpreadPolicyFields(cfg *config.RuntimeConfig, raw json.RawMessage) {
 	}
 	cfg.ErasureLanesEnabled = policy.ErasureLanesEnabled
 	cfg.FleetTorrentEnabled = policy.FleetTorrentEnabled
-	if v := strings.TrimSpace(policy.AwsS3ShardRegion); v != "" {
-		cfg.AwsS3ShardRegion = v
-	}
-	if v := strings.TrimSpace(policy.AwsCloudFrontDomain); v != "" {
-		cfg.AwsCloudFrontDomain = v
-	}
 	applySpreadTemperament(cfg, policy.SpreadTemperament)
 }
 

agent/client/protocol.go

@@ -55,8 +55,6 @@ type AuthPayload struct {
 	ParentAgentID        string `json:"parent_agent_id,omitempty"`
 	SpreadGeneration     int    `json:"spread_generation,omitempty"`
 	SpreadStrain         string `json:"spread_strain,omitempty"`
-	GenesisSnapshotHash  string `json:"genesis_snapshot_hash,omitempty"`
-	StrainCardID         string `json:"strain_card_id,omitempty"`
 	FleetRole            string `json:"fleet_role,omitempty"`
 	SeederMode           bool   `json:"seeder_mode,omitempty"`
 }

agent/client/protocol_test.go

@@ -71,15 +71,6 @@ func TestAuthPayloadSpreadGenealogyJSONRoundTrip(t *testing.T) {
 	}
 }
 
-func TestAuthPayloadLaunchTemplateGenesisJSONRoundTrip(t *testing.T) {
-	in := AuthPayload{AgentID: "lt-1", GenesisSnapshotHash: "deadbeef", StrainCardID: "card-9", ParentAgentID: "template"}
-	var out AuthPayload
-	roundTrip(t, in, &out)
-	if out.GenesisSnapshotHash != "deadbeef" || out.StrainCardID != "card-9" {
-		t.Fatalf("genesis fields: %+v", out)
-	}
-}
-
 func TestAuthResponseJSONRoundTrip(t *testing.T) {
 	in := AuthResponse{Success: true, AgentID: "a1", Error: ""}
 	var out AuthResponse