release candidates: every push to main runs the full CI, the acceptance matrix and the Linux / Windows installer builds in parallel (ci.yml) and records the green result per commit as the draft rc-<sha> (green.json last); a version-only bump commit (proven file by file with the version writers) reuses its parent's CI and matrix and rebuilds only the installers; a v* tag only promotes the candidate (release.yml), fails fast on a red or missing commit; acceptance runs carry a CLI key; tools/release.ts does the whole release on the Mac (bump, CHANGELOG cut, fast gate, push, tag, Mac build + notarize in parallel with Forgejo, cached macOS acceptance, add, verify, publish with one upload of the Mac files, /Applications update, npm commands) and --rehearsal; DMG notarization runs while the app and updater bundle are checked; rehearsal channel on the VDS; docs

CHANGELOG.md

@@ -2,11 +2,23 @@
 
 ## Unreleased
 
+Releases take one command and minutes: every push to main is a release candidate (full CI, the acceptance matrix and
+the Linux / Windows installers stored per commit), a version tag only promotes it, and `bun tools/release.ts` does
+the rest on the Mac.
+
 - **A Chrome storebound starts never outlives its run.** The console window's Chrome is ended on exit, closed
   gracefully on Ctrl+C / SIGTERM / SIGHUP, and ended by a watchdog when the run dies in any way (SIGKILL included).
   Every start first ends headless storebound Chromes earlier runs left behind (an orphan kept the owner's own Chrome
   from opening from the macOS Dock) and names orphaned windows. Headless runs on macOS prefer Chromium / Chrome for
   Testing over Google Chrome.app. `console fill` closes the window on an error too. Pitfall 68.
+- **Every push to main is a release candidate.** ci.yml runs the full CI, the acceptance matrix (Linux + Windows x
+  Node 20 / 22 / Bun) and the installer builds in parallel and stores the green result as the draft `rc-<sha>`.
+  A version-only bump commit (proven file by file) reuses its parent's CI and matrix and rebuilds only the
+  installers. A `v*` tag promotes the candidate (no rebuild, no retest) and fails at once on a red commit.
+- **`bun tools/release.ts <version> --yes`:** bump and CHANGELOG cut, fast gate, commit, push, tag; the Mac build and
+  notarization in parallel with Forgejo; macOS acceptance cached per CLI key; add, verify, publish (each Mac file
+  crosses the owner's uplink once); /Applications/storebound.app updated; the npm commands printed. `--rehearsal`
+  runs it all as a throwaway prerelease and deletes it afterwards.
 
 ## 0.8.4 · 2026-10-14