Releases & updates

Jeden’s updater treats provenance, signature, release channel, and target artifact as one verified transaction.

Channels

Canaries are built from a CI-tested commit and carry version, run, attempt, and commit identity. Stable promotion is a separate operator action backed by immutable evidence.

Commands

/changelog
/update
/rebuild

/update enters the signed release flow. /rebuild rebuilds a local checkout and resumes the active session.

Safety

Missing trust roots, invalid signatures, incompatible targets, failed health checks, or incomplete update state fail closed. Never replace the binary manually while an update transaction is active.