diff --git a/Cargo.lock b/Cargo.lock
index bd7381a..2bb8fe1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -29,7 +29,7 @@ dependencies = [
 
 [[package]]
 name = "agent_api"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "hex",
  "hsm_api",
@@ -43,7 +43,7 @@ dependencies = [
 
 [[package]]
 name = "agent_core"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "anyhow",
@@ -225,7 +225,7 @@ dependencies = [
 
 [[package]]
 name = "async_util"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "pin-project",
  "tokio",
@@ -317,7 +317,7 @@ checksum = "8c3c1a368f70d6cf7302d78f8f7093da241fb8e8807c05cc9e51a125895a6d5b"
 
 [[package]]
 name = "bigtable"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "gcp_auth",
  "google",
@@ -372,7 +372,7 @@ checksum = "327762f6e5a765692301e5bb513e0d9fef63be86bbc14528052b1cd3e6f03e07"
 
 [[package]]
 name = "bitvec"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "juicebox_marshalling",
  "serde",
@@ -407,7 +407,7 @@ dependencies = [
 
 [[package]]
 name = "build_info"
-version = "0.2.3"
+version = "0.3.0"
 
 [[package]]
 name = "bumpalo"
@@ -496,7 +496,7 @@ dependencies = [
 
 [[package]]
 name = "chaos_puppy"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "anyhow",
@@ -616,7 +616,7 @@ checksum = "702fc72eb24e5a1e48ce58027a675bc24edd52096d5397d4aea7c6dd9eca0bd1"
 
 [[package]]
 name = "cluster_api"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "hsm_api",
  "juicebox_networking",
@@ -627,7 +627,7 @@ dependencies = [
 
 [[package]]
 name = "cluster_bench"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "async_util",
@@ -652,7 +652,7 @@ dependencies = [
 
 [[package]]
 name = "cluster_cli"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "anyhow",
@@ -688,7 +688,7 @@ dependencies = [
 
 [[package]]
 name = "cluster_core"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "cluster_api",
@@ -709,7 +709,7 @@ dependencies = [
 
 [[package]]
 name = "cluster_manager"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "anyhow",
@@ -756,7 +756,7 @@ dependencies = [
 
 [[package]]
 name = "codegen"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "tonic-build",
 ]
@@ -1028,7 +1028,7 @@ checksum = "a26ae43d7bcc3b814de94796a5e736d4029efb0ee900c12e2d54c993ad1a1e07"
 
 [[package]]
 name = "election"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "hsm_api",
 ]
@@ -1065,7 +1065,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_agent"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_core",
  "async-channel",
@@ -1084,7 +1084,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_api"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "juicebox_marshalling",
  "serde",
@@ -1092,7 +1092,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_hsm"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "bindgen",
  "entrust_api",
@@ -1107,7 +1107,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_init"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "build_info",
@@ -1119,7 +1119,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_nfast"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "bindgen",
  "hex",
@@ -1130,7 +1130,7 @@ dependencies = [
 
 [[package]]
 name = "entrust_ops"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "build_info",
  "clap",
@@ -1384,7 +1384,7 @@ checksum = "d2fabcfbdc87f4758337ca535fb41a6d701b65693ce38287d856d1674551ec9b"
 
 [[package]]
 name = "google"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "futures",
  "gcp_auth",
@@ -1402,7 +1402,7 @@ dependencies = [
 
 [[package]]
 name = "google_pubsub"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "async-trait",
  "gcp_auth",
@@ -1570,7 +1570,7 @@ dependencies = [
 
 [[package]]
 name = "hsm_api"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "bitvec",
  "blake2",
@@ -1585,7 +1585,7 @@ dependencies = [
 
 [[package]]
 name = "hsm_core"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "bitvec",
  "blake2",
@@ -1882,7 +1882,7 @@ checksum = "b1a46d1a171d865aa5f83f92695765caa047a9b4cbae2cbf37dbd613a793fd4c"
 
 [[package]]
 name = "jburl"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "url",
 ]
@@ -2117,7 +2117,7 @@ checksum = "c4cd1a83af159aa67994778be9070f0ae1bd732942279cabb14f86f986a21456"
 
 [[package]]
 name = "load_balancer"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "anyhow",
@@ -2167,7 +2167,7 @@ checksum = "b5e6163cb8c49088c2c36f57875e58ccd8c87c7427f7fbd50ea6710b2f3f2e8f"
 
 [[package]]
 name = "lru-cache"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "hashbrown 0.14.3",
 ]
@@ -2186,7 +2186,7 @@ checksum = "523dc4f511e55ab87b694dc30d0f820d60906ef06413f93d4d7a1385599cc149"
 
 [[package]]
 name = "merkle_tree_docgen"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "bitvec",
  "build_info",
@@ -2368,7 +2368,7 @@ dependencies = [
 
 [[package]]
 name = "observability"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "build_info",
  "dogstatsd",
@@ -2762,7 +2762,7 @@ dependencies = [
 
 [[package]]
 name = "pubsub_api"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "async-trait",
  "juicebox_realm_api",
@@ -2917,7 +2917,7 @@ dependencies = [
 
 [[package]]
 name = "retry_loop"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "expect-test",
  "observability",
@@ -3129,7 +3129,7 @@ dependencies = [
 
 [[package]]
 name = "secret_manager"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -3208,7 +3208,7 @@ dependencies = [
 
 [[package]]
 name = "service_checker"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -3234,7 +3234,7 @@ dependencies = [
 
 [[package]]
 name = "service_core"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "async-trait",
  "bytes",
@@ -3333,7 +3333,7 @@ dependencies = [
 
 [[package]]
 name = "software_agent"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_core",
  "build_info",
@@ -3350,7 +3350,7 @@ dependencies = [
 
 [[package]]
 name = "software_hsm"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "blake2",
@@ -3376,7 +3376,7 @@ dependencies = [
 
 [[package]]
 name = "software_hsm_client"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_core",
  "http 0.2.11",
@@ -3424,7 +3424,7 @@ dependencies = [
 
 [[package]]
 name = "store"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "agent_core",
@@ -3536,7 +3536,7 @@ dependencies = [
 
 [[package]]
 name = "table"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "expect-test",
 ]
@@ -3556,7 +3556,7 @@ dependencies = [
 
 [[package]]
 name = "testing"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "agent_api",
  "agent_core",
diff --git a/Cargo.toml b/Cargo.toml
index 7f88344..993618d 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -86,7 +86,7 @@ resolver = "2"
 
 [workspace.package]
 rust-version = "1.75"
-version = "0.2.3"
+version = "0.3.0"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 [workspace.dependencies]
@@ -235,7 +235,7 @@ x509-cert = { version = "0.2.5", default-features = false }
 # like cargo-upgrade (from the cargo-edit project) to report when the forked
 # versions fall behind the crates.io versions.
 #
-# Using Git submodules instead of poining Cargo to the Git repositories works
+# Using Git submodules instead of pointing Cargo to the Git repositories works
 # better for offline reproducible builds (for key ceremonies). If we tell Cargo
 # about the Git repos, the Git information ends up in Cargo.lock, and we don't
 # want to need the full Git repo for offline builds. This also simplifies the