From 0b3aa42a09c2b817c4dfc3d1e89fd4c6d55891b9 Mon Sep 17 00:00:00 2001
From: Jannis Braun <151788261+TheZwiss@users.noreply.github.com>
Date: Mon, 13 Jul 2026 01:13:19 +0200
Subject: [PATCH] docs(docker): add maintainer release-gate pull-test note (per
 review)

---
 docs/systems/deployment.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/systems/deployment.md b/docs/systems/deployment.md
index bea4b10d..8abce703 100644
--- a/docs/systems/deployment.md
+++ b/docs/systems/deployment.md
@@ -99,6 +99,13 @@ different user, adjust host-side access accordingly. `./restore.sh` continues to
 work — it swaps files inside a throwaway root container, and root can rewrite the
 now uid-1000-owned files.
 
+**Release-gate (maintainer):** before the first `v*` tag that ships this image,
+do a real `docker compose pull && docker compose up -d` on both an amd64 host and
+the arm64 Pi to confirm the attestation-bearing image pulls cleanly on the actual
+deployment Docker versions, and that the container boots non-root with a writable
+`./data` on real Linux (the macOS Docker Desktop bind-mount ownership display is
+not representative of Linux behaviour).
+
 ### Run: `docker compose up -d --build`
 
 `docker-compose.yml` defines: