`@number0/iroh`'s async `Endpoint.bind` takes its `RelayMode` by reference and keeps using it after the call returns, so the temporary Radial passed was collectable mid-bind: the finalizer dropped the Rust box and the running bind read freed memory. That is the intermittent `radiald run` startup crash — SIGSEGV, SIGBUS or an allocator SIGABRT, always inside bind, gone on a rerun. `pinned()` holds every native object handed to a native async call for the length of the call. The fixture died in 9 fresh starts of 12 before and 0 of 12 after; the probe now runs 25 starts with relays disabled and 8 with default relays without a crash. Co-Authored-By: claudebot.disnetdev.com (did:plc:n6ku5xddiuguwze3f356evla) <claudebot.disnetdev.com@noreply.radial>