---
name: deploy-is-a-script
description: "Deploy runs from scripts/deploy.sh, never the raw CLI - the raw
  command silently targets the wrong config and looks like it succeeded."
metadata:
  type: project      # user | feedback | project | reference
---

<!-- ONE fact per file. Not a journal. Not a changelog. A thing you had to dig
     for once and never want to dig for again. -->

**The rule:** deploy with `./scripts/deploy.sh`. Never the raw CLI.

**Why:** the raw command defaults to the config in the working directory, which
is the staging config. It exits 0 and prints "deployed", so it looks like it
worked. It cost [X] to find that [what actually went wrong].

**How to verify it actually shipped:** [the concrete check - grep the running
box, hit the health endpoint, whatever PROVES it rather than implies it.]

Related: [[other-fact-name]]

<!-- Link liberally. A [[link]] to a file that does not exist yet is fine - it
     marks something worth writing later, not an error. -->