How-to guides
Check and install updates
Understand the signed direct-update boundary.
0.x builds expose pangram update --check, pangram update, and
pangram update --yes, but all three return update_unavailable before any
network or state access. Direct installs at 1.0.0 or later will verify an Ed25519-signed
manifest, archive size, SHA-256, layout, receipt ownership, and target version.
Package-manager installs remain owned by their manager.