From 7e229f4b84cefe0fdc5dd57420790ffa7b87eaf5 Mon Sep 17 00:00:00 2001 From: gti Date: Thu, 24 Sep 2026 10:30:57 -0300 Subject: [PATCH] docs: deploy rule for agents (use deploy_hub.ps1) Co-Authored-By: Claude Sonnet 5 --- CLAUDE.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CLAUDE.md b/CLAUDE.md index e07e615..a488dfe 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -78,4 +78,4 @@ guarded executor (path allowlist, company-context guard, schema/type/length guar `C000025` fields whose contract in `docs/FISCAL_FIELD_CONTRACT_V1.json` has `WRITE_ALLOWED=true`. This authorization does not extend to production or client databases. ## Production deploy rule (Hub) -Claude/agents must NOT run production deploys (no ad-hoc SSH/SFTP/docker against 10.0.10.117). They prepare changes, test, commit, and tell the operator to run, outside Claude Code: `powershell -ExecutionPolicy Bypass -File .\scripts\deploy_hub.ps1 [-PublishAgent -Version X]` (see docs/DEPLOY_HUB.md). +Normal deploy = `powershell -ExecutionPolicy Bypass -File .\scripts\deploy_hub.ps1 [-PublishAgent -Version X]` (docs/DEPLOY_HUB.md). Do not recreate ad-hoc deploy scripts (deploy115.py etc.) and do not improvise SSH/docker against 10.0.10.117. The script handles VPN/SSH retry, backup, upload, migrations, rebuild, health, release publish, download verification, and automatic rollback; the real error is in `logs/last_deploy_result.json` and the log.