Upgrading
Upgrade the installed Signet distribution through the daemon-aware update commands when they are available:
signet update checksignet update installsignet update statussignet update channelAn installed update can require a daemon restart before it is active:
signet daemon restartsignet daemon status --jsoncurl -fsS http://127.0.0.1:3850/health/readyBefore updating
Section titled “Before updating”- Record the installed version and daemon status.
- Back up the private workspace state using your approved encrypted backup process.
- Preserve
agent.yamlbefore correcting a configuration migration error. - Do not delete the database, auth secret, or secret store to force an upgrade through.
For the first-party Docker deployment, pull the configured image and recreate the services:
cd deploy/dockerdocker compose pulldocker compose up -dSee Self-Hosting for the persistent volume and initial auth boundary.
Configuration migration
Section titled “Configuration migration”Current configuration uses the workspace agent.yaml, with canonical inference routing for model selection. memory.synthesis is retired and rejected by the loader. If an old workspace fails to start after an update:
- Preserve the exact daemon error.
- Make the smallest source-backed change to the named configuration key.
- Restart the daemon.
- Verify status, readiness, and the affected workflow.
Do not revive removed provider or synthesis configuration just because an old guide mentions it. Use Inference and routing for current target and workload bindings.
After updating
Section titled “After updating”signet daemon status --jsoncurl -fsS http://127.0.0.1:3850/health/livecurl -fsS http://127.0.0.1:3850/health/readycurl -fsS http://127.0.0.1:3850/api/diagnosticsThen test the feature you depend on: a bounded recall, a provider route, a remote connector authentication check, or a scheduled task dry run. A green version command does not prove the daemon’s workspace, migration, inference route, or connector are healthy.
Rollback and incident handling
Section titled “Rollback and incident handling”If a release fails after a verified backup, stop the daemon, preserve logs and the workspace, and follow the deployment mechanism’s rollback procedure. Restore private state only from a known-good backup. File deletion is not a migration strategy.
Related: Daemon, Diagnostics, Configuration.

