Published October 19, 2026 UTC: release notes and bootstrap instructions.
An independent recovery timer can report and assist when a failed controller update has left both the bot and its normal network reporting stopped. It retains a separate verified code pin.
Under the documented operator grant, the maintainer can request sanitized diagnostics, continuation of an already approved exact update, or a qualified startup of an exited failed service whose rooms are confirmed closed.
Requests are authenticated, expiring, bound to the installation's local state and durably recorded before dispatch. Running services and uncertain room ownership are refused. Operator stop, pause and opt-out choices take priority.
This was a recovery-bootstrap preview, not an ordinary automatic-feed release or a fresh installer. The one-time helper installs only the independent recovery channel and preserves the existing installation and unfinished update. Follow its version-specific instructions rather than applying it to unrelated failures.
Publishing the asset does not prove that an operator installed the channel or that its rooms are running. Later releases preserve the independent recovery pin and its local policy.