Thanks for this release DFINITY. I gather that enabling deterministic time slicing on system subnets has been motivated by the NNS subnet incident last week. Are @DRE-Team able to share which system subnets DFINITY plan to deploy this replica version to first (if only there was a canary system subnet on mainnet)? Can I ask why DTS was previously disabled for system subnets (is it due to memory overhead)?
On a separate note, I found this commit interesting (and lacking an accessible explanation). It reduces firewall_max_connections test coverage, such that it no longer covers system subnets. Are you able to share more info about the motivations behind this commit?