quarterly-upgrade-cadencelisted

# Walter-OS upgrade cadence Predictable schedule replaces ad-hoc upgrades. Aligns with Renovate auto-PR + Walter-VM service inventory + restic backup safety net. ## Schedule ``` Weekly (Monday 08:00 BA) → Renovate dashboard review (5 min) → Mergeable patch updates → merge to main → Major bumps → review release notes, defer or schedule Monthly (1st of month, 30 min) → walter audit (supply chain scan) → walter status (service health snapshot) → Read /var/log/walter-watchdog.log for any silent issues → Check Hetzner spend trend (cron summary in Telegram) Quarterly (1st Mon of Jan/Apr/Jul/Oct, half-day) → Full upgrade wave: minor + safe-major versions → Pre-snapshot Hetzner safety net → Tier-by-tier rollout w/ smoke tests → Post-quarter doc + changelog Yearly (Jan) → Stack architecture review → Drop services that haven't been used 6+ months → Re-evaluate trust scores on all MCPs / skills (deferred backlog) → Rotate root credentials (all bot tokens, machine identities) → DR drill: restore Walter-VM from restic backup to a test VM ``` ## Quarterly update — the actual flow ### Day 0 (Sunday before — prep) ```bash # 1. Read changelogs for major bumps queued in Renovate gh pr list --repo "${WALTER_OS_UPDATE_REPO:-<your-fork>/walter-os}" --label "major-review-needed" # 2. Audit current versions walter-os upgrade --dry-run # preview local + config refresh commands walter doctor # should be al