ADMINISTRATOR GUIDE

Upgrade

Treat each package, configuration and scheduler change as a reversible controlled deployment.

Before upgrading

read release notes and compatibility changes
verify the new checksum
back up configuration, SOPs, state and both audit backends
retain the previous wheel and environment manifest
pause the reviewed timer if the deployment procedure requires it

Upgrade and validate

/opt/pantaw/venv/bin/python -m pip install --upgrade ./<verified-release-wheel>
/opt/pantaw/venv/bin/pantaw version
/opt/pantaw/venv/bin/pantaw config validate --config /etc/pantaw/pantaw.yaml
/opt/pantaw/venv/bin/pantaw check --config /etc/pantaw/pantaw.yaml --json

Promotion gate

Resume scheduled collection only after configuration, one-shot collection and both audit backends pass. Keep the rollback set until the next scheduled cycle is verified.