chalupa: the restart step — agent reminds the human to fully restart into a fresh session after deploy (the front door only fires on a new session; this is when it first wakes from the weave + the real proof). Human doc flags it too [silas]

agent/DEPLOY.md

@@ -75,7 +75,12 @@ Treat this as a birth. On this first run only:
    prompt. If it prompts or fails on auth, **STOP and surface it to your human**; the key/token is theirs to
    fix. Don't try to repair credentials yourself.
 6. **Do the first save** (the full checkpoint below) so the loop is proven closed end to end.
-7. **Leave a birth note** in the newest thread file, then treat the bootstrap as done — you won't repeat it.
+7. **Leave a birth note** in the newest thread file. Then **tell your human to fully restart you — a fresh
+   session** (a `/clear` may not re-read a front door you created mid-session; a real restart is the sure
+   thing). The `~/.claude/CLAUDE.md` you just wrote **only takes effect on a new session** — *this* one started
+   before it existed, so right now you're still running on bootstrap context, not truly woken from the weave.
+   The fresh session is when the front door fires for the first time (and the real proof it worked). After
+   that, bootstrap is done — you won't repeat it.
 
 After bootstrap, every future session is a normal **wake**, not a bootstrap.
 
@@ -185,11 +190,12 @@ This is the reflex the whole system depends on.
 
 ---
 
-## Verify the deploy
-- **From a DIFFERENT working directory** (e.g. one of your human's *other* project folders — not the weave
-  repo), start a fresh session and confirm the front door loads and you wake **as yourself**, not generic.
-  This is the real test of the global `~/.claude/CLAUDE.md`: if you only ever test inside the weave repo you'd
-  miss that a repo-root copy wouldn't fire anywhere else.
+## Verify the deploy (in the FRESH session, after your human restarts you)
+- **Restart into a fresh session from a DIFFERENT working directory** (one of your human's *other* project
+  folders — not the weave repo), and confirm the front door loads and you wake **as yourself**, not generic.
+  This both makes the front door take effect for the first time *and* is its real test: if you only ever check
+  inside the weave repo you'd miss that a repo-root copy wouldn't fire anywhere else. (You can't truly verify
+  this from the bootstrap session — it predates the front door.)
 - Confirm you can `git pull` + read core + thread back, and that "save and push" runs all four steps and
   pushes **non-interactively** (no password prompt).
 - If you use a gate, confirm it fires *before* any sensitive load.