docs: correct Pi operator recovery guidance

2026-08-14 18:41:34 +02:00
parent a8623a2b18
commit dc83a55555
3 changed files with 28 additions and 15 deletions
@@ -169,12 +169,16 @@ the settings volume. It does not require the failed candidate, a host Node runti
 socket inside a container. The restored core is then recreated, verified, and rescanned before the
 gate can open.

-For an interrupted transaction, first run:
+For a failed update with `update-state.json`, first run:

 ```text
 thothctl --installation /absolute/path/thothii-installation.yaml pi rollback --yes
 ```

+Rollback operates on update state only. A failed restart with `restart-state.json` retains its
+current image and has no candidate image to roll back; first inspect status and logs, repair the
+reported problem, then use maintenance recovery.
+
 Inspect and clean a stale durable gate with:

 ```text