Operations runbooks

How a binary release is cut. CHANGELOG promotion, tag push, cross-compiled binaries, SHA256SUMS, and an automated GitHub release with auto-extracted notes. Includes the manual fallback path when CI is unavailable.

Pushing a tagged release into a region. Stage → backup → atomic install → restart → health probe → automatic rollback on failure. Operator-triggered, never automatic on tag.

Incident response procedure. Severity classification (SEV-1 / SEV-2 / SEV-3), responder roles, customer-comms cadence, postmortem requirement.