[EHotwagner]

Refs FS-GG/FS.GG.SDD#1155
Refs #5222

Documents, on the consumer versioning page, how fsgg-sdd upgrade keeps CLI-carried skills current once FS-GG/FS.GG.SDD#1158 and the hardening in FS-GG/FS.GG.SDD#1161 ship:

• a skill is replaced as one unit and only when untouched, judged against the digests the provenance currently records (written at scaffold time and updated by every later upgrade), a file already at the new pack's bytes counting as untouched;
• the never-downgrade rule: a skill with no recorded version needs a pack not below the channel's recorded floor and a CLI newer than the last complete upgrade (the same CLI only when that upgrade names it, since two builds can share a version string); an unreadable version entry holds the skill;
• a replacement is safe to interrupt (a partial run records nothing for the skill and the next run completes it);
• containment: every write into a skill root, including installing a skill that is not there yet, is refused under a directory link out of the workspace or when the file is itself a link (even with an inside target); it names the path and fails on every run until the link is replaced;
• the .gitattributes -text rules name only the skills SDD delivers plus docs/atlas/**;
• name collisions: the six always-installed driver names FS.GG.Drivers 0.114.3 added (agent-handoff, atlas, continue-from-handoff, routine-decisions, stop-with-handoff, work-programme), and what upgrade does when a workspace skill already has one (listed as not installed, not as changed upstream);
• doctor states held skills as an informational advisory (doctor.ownerSkillsNotRefreshable);
• the five-version staleness bound for the CLI's skills-package pins, enforced at release preparation (SDD: pin FS.GG.Drivers 0.114.3 so workspaces receive the atlas skill FS.GG.SDD#1157).

The page describes behavior of an unreleased CLI as "from the CLI release that carries FS.GG.SDD#1155 onward". Documentation only; docs/consumer/versioning-and-updates.md is the only file changed. The SDD-side reference (docs/reference/doctor-upgrade.md) is in FS-GG/FS.GG.SDD#1161.

Hosted CI: 25 checks pass, 3 skip, 0 fail.

🤖 Generated with Claude Code

[EHotwagner]

Root/fdev: the independent review APPROVED 1212a1cf. The consumer doc matches the final upgrade behaviour (FS.GG.SDD #1158 and #1161, both merged): the recorded digests, the channel floor plus writer bound, interrupt-safety, containment including backfill and file links, scoped -text rules, the six driver names, collisions, the advisory and staleness. The one wording nit ("every skill-file write") is tracked in FS-GG/FS.GG.SDD#1162. closingIssuesReferences is []. Merging. Refs FS-GG/FS.GG.SDD#1155