From 2379d0f52177cbd6ba316fa90736620ad70e0a36 Mon Sep 17 00:00:00 2001
From: orion <orion@op.hangman-lab.top>
Date: Wed, 25 Feb 2026 10:45:18 +0000
Subject: [PATCH] docs: add staged rollout and rollback checklist

---
 docs/ROLLOUT.md | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 docs/ROLLOUT.md

diff --git a/docs/ROLLOUT.md b/docs/ROLLOUT.md
new file mode 100644
index 0000000..533d71f
--- /dev/null
+++ b/docs/ROLLOUT.md
@@ -0,0 +1,33 @@
+# WhisperGate Rollout Checklist
+
+## Stage 0: Local sanity
+
+- Start API: `./scripts/dev-up.sh`
+- Smoke API: `./scripts/smoke-no-reply-api.sh`
+- Check plugin files: `cd plugin && npm run check`
+
+## Stage 1: Canary (single Discord session)
+
+- Enable plugin with:
+  - `discordOnly=true`
+  - narrow `bypassUserIds`
+  - strict `endSymbols`
+- Point no-reply provider/model to local API
+- Verify 4 rule paths in `docs/VERIFY.md`
+
+## Stage 2: Wider channel rollout
+
+- Expand `bypassUserIds` and symbol list based on canary outcomes
+- Monitor false-silent turns
+- Keep fallback model available
+
+## Stage 3: Production hardening
+
+- Set `AUTH_TOKEN` for no-reply API
+- Run behind private network / loopback
+- Add service supervisor (systemd or compose restart policy)
+
+## Rollback
+
+- Disable plugin entry `whispergate.enabled=false` OR remove plugin path
+- Keep API service running; it is inert when plugin disabled