From 4a47b9c346c1a0c3306f39014e44af4b20a11cbc Mon Sep 17 00:00:00 2001
From: Ty <tybala@outlook.com>
Date: Mon, 27 Jul 2026 16:09:12 +0000
Subject: [PATCH] structure: sync docs/UPGRADE.md

---
 docs/UPGRADE.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 docs/UPGRADE.md

diff --git a/docs/UPGRADE.md b/docs/UPGRADE.md
new file mode 100644
index 0000000..78625fd
--- /dev/null
+++ b/docs/UPGRADE.md
@@ -0,0 +1,22 @@
+# Upgrade and rollback
+
+**Status:** Outline. Full POR: [design/updates-lifecycle.md](../design/updates-lifecycle.md).
+
+## Defaults
+
+- Automatic updates: **ON by default** (host timer calling `upgrade.sh`).  
+- Owner: **no** participation or chat noise.  
+- Manual: `./scripts/upgrade.sh` · dry-run · rollback.
+
+## Operator quick path (when implemented)
+
+```bash
+./scripts/upgrade.sh --dry-run
+./scripts/upgrade.sh
+./scripts/doctor.sh
+./scripts/upgrade.sh --rollback   # if needed
+```
+
+## Non-interactive Hermes
+
+Product upgrade must **not** invoke interactive `hermes update` / config wizards. Pins and sealed `nemohermes` config/inference commands only.