docs: README release ensure row

2026-09-03 14:43:25 -05:00
parent db330c12c7
commit 2f649ed930
1 changed files with 5 additions and 0 deletions
@@ -92,10 +92,15 @@ scripts/release.sh package                    # build + tag the release image
 scripts/release.sh activate                   # health check (exact marker) -> atomic pointer swap
 scripts/release.sh activate --fault-injection # prove the refusal path (drills only)
 scripts/release.sh rollback                   # health-gated return to the previous release
+scripts/release.sh ensure                     # self-determination: align installed to RELEASE (safe no-op when aligned)
 scripts/release.sh status                     # release, tag, active pointer, recent log
 scripts/test-release.sh                       # release selftests
 ```

+`ensure` is invoked automatically by the human-facing launchers (`hello`,
+`verify`, `agent`): the system determines what is installed and aligns
+itself — the user never runs release commands manually.
+
 - `<dataRoot>/state/active.json` — the activation pointer (atomic tmp+rename replace)
 - `<dataRoot>/state/activation-log.jsonl` — append-only history: package / activate / refused / rollback