After the drill (the issue it waits for): set on production FORGE_REPO, FORGE_SELF_SWAP=1, FORGE_RELEASE_KEEPER=swap and SSH terminal off or handed over (ship-itself.md). Gitops must stop owning the forge container's image (release-keeper.md, #7947) or the 15-minute reconcile undoes a verified release.
Done when:
[ ] One release cut, swapped and verified in production with the owner watching; seconds dark on /releases.
[ ] The rollback is written and was tried once: unset the three variables, restart; the previous image serves.
[ ] The owner says go before the switch, in this issue.
After the drill (the issue it waits for): set on production
FORGE_REPO,FORGE_SELF_SWAP=1,FORGE_RELEASE_KEEPER=swapand SSH terminal off or handed over (ship-itself.md). Gitops must stop owning the forge container'simage(release-keeper.md, #7947) or the 15-minute reconcile undoes a verified release.Done when:
Files: docs/features/ship-itself.md, docs/features/release-keeper.md
Part of #7667 (inventory: docs/PLATFORM.md). Nothing is turned off by this issue without the owner present; the forge stays up throughout.