Third episode of RealmJoin Unlocked. Moritz Pohl and Jonas Heckmann walk through the new stable agent and portal release: the native runtime that replaces the Chocolatey engine with in-place migration and no reinstalls, channel-aware enrollment so a beta or canary channel is applied right in the ESP, App Catalog shortcuts for desktop and start menu with custom naming, queued installs with one-click log export, self-healing emergency accounts in RealmJoin Labs, the new tenant default config, FileVault and BitLocker recovery key rotation from the device page, scheduled and hybrid runbooks, the migration to Data Collection Rules for Log Analytics and to a multi-tenant app for runbooks, plus two new exports: Shadow IT and usage.