agent-platform release v3.4.0

modelManager.networkPolicy.ingress.additionalPeers and agentManager.networkPolicy.ingress.additionalPeers (default []), in both charts: extra callers the model-manager / agent-manager ingress policies admit on the Service port next to the agentgateway data plane and muster — a list of pod label maps (matchLabels) in the release namespace, rendered as fromEndpoints entries with io.kubernetes.pod.namespace pinned to the release namespace (cilium) or as podSelector entries (kubernetes). A non-empty list counts as a platform caller, so the no-caller placeholder peer does not render next to it; an item that is not a non-empty label map fails the render. For an umbrella that runs a portal next to the managers (the standalone chart’s Backstage, which patched the peer into its generated copies until now). make verify-managers covers it. No installation needs to act: the default render is unchanged.