docs: align Server559 publication and QA boundaries

COMPATIBILITY.md

@@ -1,18 +1,26 @@
 # Compatibility Contract
 
-## Server v1.6.559 source candidate
-
-Not yet published. README/install examples remain on verified published 558.
-The candidate uses Web Console 1.6.200/optional bridge 0.2.2, Engine 0.183.359,
-Catalog 0.20.17 and Compose 0.14.40 from qualified original CI/public bytes.
-See the [candidate note](docs/releases/server-1.6.559.md) for exact source,
-archive/binary/SBOM/lock identities and four independent opt-ins.
-The candidate prefers the official Ubuntu Brotli safety package; exact final
-rootfs/SBOM validation preserves the immutable earlier bundle proof and all other
-package checks. No new VEX exemption or weaker scan threshold is introduced.
-Core200, Catalog/Archive, affected roles/layouts/weak-model checks, three
-Hosts/Agents and an actual restart remain pending. Existing performance,
-origin, volume and rollback rules remain; this is not full frontend coverage.
+<a id="server-v16559-publication"></a>
+
+## Server v1.6.559 published
+
+Image: `ghcr.io/pasturestack/server:v1.6.559@sha256:7af50ece5adc880a56e82cf39d70859f1faaea8393c0335a47da49dc7f8bc7cf`.
+Runtime producer: `8d7c6033311c4152b6b0e8c888221372adef257f`.
+[Publisher 40977604932](https://github.com/PastureStack/server/actions/runs/40977604932)
+passed original source/build, startup/restart, protocol and security gates.
+All 35 public assets, native provenance and SBOM attestations were verified.
+Web Console 1.6.200/optional bridge 0.2.2, Engine 0.183.359, Catalog 0.20.17 and
+Compose 0.14.40 use qualified original artifacts. Official Ubuntu Brotli
+1.2.0-3ubuntu0.1 is checked against its signed index, deb and final rootfs/SBOM;
+no new VEX exemption or weaker scan threshold is introduced.
+
+Designated 8080 deployment and actual restart preserve performance/origin
+settings, mounts, AppArmor, restart policy and rollback. Three Hosts/Agents are
+active. New-version layout checks passed 16 profiles. The complete Core workflow
+remains failed: Stack creation succeeds, but subsequent scoped discovery returns
+403. The prior 558 failure is retained. Catalog/Archive, affected role/Key and
+weak-model runtime acceptance remain pending. This is not full frontend coverage.
+See the [release note](docs/releases/server-1.6.559.md) for component identities.
 
 
 <a id="server-v16558-managed-retirement-and-search"></a>

README.md

@@ -13,17 +13,18 @@ upstream history, authorship, licenses, and notices.
 
 ## Current release
 
-[Server `v1.6.558`](https://github.com/PastureStack/server/releases/tag/v1.6.558)
-packages Web Console `1.6.199` and Engine `v0.183.358`. It repairs scoped managed
-retirement and typed name-query pagination while retaining live account/Key
-limits and ordinary UI/API behavior.
-See the [release note](docs/releases/server-1.6.558.md) and
-[publication identities](COMPATIBILITY.md#server-v16558-managed-retirement-and-search).
-
-Publication checks include a real scoped-Key preview, human-cookie confirmation,
-empty Stack creation and receipt read on a disposable fresh Server. Deployment
-and browser acceptance are tracked separately; the opt-in expansion is not
-complete frontend coverage. Earlier PASS is retained only where unaffected.
+[Server `v1.6.559`](https://github.com/PastureStack/server/releases/tag/v1.6.559)
+packages Web Console `1.6.200`, Engine `v0.183.359`, Catalog `0.20.17` and
+Compose `0.14.40`. It adds opt-in Catalog launch and Archive/restore workflows,
+scoped lifecycle repairs, and the official Ubuntu Brotli safety package.
+See the [release note](docs/releases/server-1.6.559.md) and
+[publication identities](COMPATIBILITY.md#server-v16559-publication).
+
+Publication and designated QA startup/restart checks passed. Three Hosts/Agents
+remain active. The full typed resource workflow is not accepted: creating a Stack
+succeeds, but its subsequent scoped discovery returns 403. Catalog/Archive
+browser and role acceptance remain pending. This is not complete frontend
+coverage; unchanged PASS evidence retains only its original scope.
 
 Personal API Keys remain available without an accessible environment. See the [Host guide](docs/hosts/README.md) before enrolling a host.
 
@@ -53,10 +54,10 @@ The Web Console supports scoped resource discovery and basic Stack, Service and
 Container changes through twelve tools. Plans require normal human review and
 reuse live account and Key permissions. Global Services do not accept a manual
 instance count. Advanced forms and other resource workflows remain pending.
-Individual scoped-Key Service stop has an unresolved integration finding; review
+The complete scoped lifecycle workflow remains unaccepted; review
 the [current limitation](docs/ai-collaboration.md#workload-retirement-limitation)
 before enabling these optional changes.
-See the [release note](docs/releases/server-1.6.558.md) and
+See the [release note](docs/releases/server-1.6.559.md) and
 [AI collaboration guide](docs/ai-collaboration.md) for activation,
 supported operations, audit records and rollback.
 
@@ -70,15 +71,15 @@ docker run -d --name pasturestack-server --restart unless-stopped -p 8080:8080 \
   -v pasturestack-cattle:/var/lib/cattle \
   -v pasturestack-mysql:/var/lib/mysql \
   -v pasturestack-mysqllog:/var/log/mysql \
-  ghcr.io/pasturestack/server:v1.6.558
+  ghcr.io/pasturestack/server:v1.6.559
 ```
 
 For HTTPS termination at a reverse proxy, set the exact public origin:
 
 ```yaml
 services:
   pasturestack-server:
-    image: ghcr.io/pasturestack/server:v1.6.558
+    image: ghcr.io/pasturestack/server:v1.6.559
     restart: unless-stopped
     ports:
       - "8080:8080"

docs/ai-collaboration.md

@@ -1,6 +1,6 @@
 # Optional AI collaboration
 
-Server v1.6.558 combines Web Console 1.6.199 and Engine 0.183.358. The twelve
+Server v1.6.559 combines Web Console 1.6.200 and Engine 0.183.359. The twelve
 supported tools are `list_capabilities`, `find_resources`, `get_resource`,
 `preview_resource_change`, `apply_resource_change`, `find_stacks`,
 `find_services`, `get_service`, `update_service_description`,
@@ -11,13 +11,12 @@ Other platform operations retain their ordinary UI/API paths.
 
 ## Workload retirement limitation
 
-The designated 558 installation fixed the previously observed scoped downscale
-failure. Service restart and Stack stop/start also passed. The complete typed
-workflow remains unaccepted: an individual Service stop can finish its Service
-transition while its container stop is authorization-denied and remains stopping.
-The cause is under source investigation. Do not broaden a Key or blindly replay
-an uncertain plan. Ordinary UI/API paths remain available; other completed
-operations and unchanged layout evidence retain their original scope.
+The prior 558 individual Service-stop failure remains recorded. Engine 359
+contains scoped lifecycle corrections, but the designated 559 complete workflow
+has not passed: Stack creation succeeds, then scoped Stack discovery returns
+403. Do not broaden a Key or replay an uncertain write to overcome this failure.
+Catalog launch and Archive/restore are included as opt-ins; their designated
+browser/role acceptance is still pending. Ordinary UI/API paths remain available.
 
 ## Activation
 
@@ -31,6 +30,8 @@ the same volumes, network, restart policy and security settings:
 
 The first property enables upgrade plans, the second permits dedicated bridge
 Keys, and the third enables typed resource-change plans. Each defaults to false.
+Catalog launch also requires `-Dapi.ai.catalog.launch.enabled=true`; it defaults
+to false and uses the same native owner and human-review boundaries.
 Disabling a bridge feature does not remove ordinary account/API Key permissions
 or alter an ordinary resource API.
 

docs/performance/README.md

@@ -8,7 +8,7 @@ The following example is appropriate as a starting point for a dedicated
 16-vCPU host with about 32 GiB of RAM. It is not a universal performance
 profile; measure the real workload before increasing it further.
 
-The example uses the published Server `v1.6.558` numeric tag.
+The example uses the published Server `v1.6.559` numeric tag.
 The image and its release assets have passed public identity and checksum readback.
 See the [release note](../releases/server-1.6.558.md) and the
 [current release](../../README.md#current-release) for component versions and
@@ -21,7 +21,7 @@ evidence is not a performance benchmark; measure the actual workload.
 ```yaml
 services:
   pasturestack-server:
-    image: ghcr.io/pasturestack/server:v1.6.558
+    image: ghcr.io/pasturestack/server:v1.6.559
     restart: unless-stopped
     ports:
       - "8080:8080"

docs/releases/server-1.6.559.md

@@ -1,6 +1,13 @@
-# Server v1.6.559 candidate
-
-Not yet published. README/install examples remain on verified published 558.
+# Server v1.6.559
+
+Published image: `ghcr.io/pasturestack/server:v1.6.559@sha256:7af50ece5adc880a56e82cf39d70859f1faaea8393c0335a47da49dc7f8bc7cf`.
+Producer `8d7c6033311c4152b6b0e8c888221372adef257f`; publisher 40977604932.
+All original source/build/security gates, 35 public assets and native attestations
+passed. Designated 8080 startup and actual restart passed with three active
+Hosts/Agents, original persistent volumes/settings and the previous rollback.
+Sixteen new-version layout profiles passed; the complete Core flow failed at
+scoped Stack discovery (403) after successful creation. No partial flow is
+promoted to full acceptance. Catalog/Archive and new domains remain pending.
 Qualified component inputs do not establish Server559 runtime acceptance.
 
 ## Verified component inputs