Automatic Swarm Zone failover
- Three-host Swarm Zones can now require two LAN witnesses before automatically restoring a protected Swarm Server from a recent verified peer replica.
- Automatic, manual, and retried failovers now keep returned source containers fenced until the owner reviews the replacement and returns the host to service.
- The selected failure grace now becomes eligible at its displayed time boundary, with recovery beginning on the next worker scan.