diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6012771..f532634 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,7 @@
 # Changelog
 ## Unreleased
+
+- **archify v3.0.1.** `vendor/archify` moves from v3.0.0 to v3.0.1, commit `2ab3cae`, by `bin/archify-sync.mjs`. Release notes: https://github.com/tt-a1i/archify/releases/tag/v3.0.1
 - **The archify workflow stops at the pushed branch.** The scheduled run on 2026-09-28 vendored archify v3.0.0, pushed `archify/v3.0.0` and then failed at `gh pr create`: GitHub Actions may not open pull requests in this repository. The workflow now pushes the branch, leaves a notice that links the compare page and exits 0. It repeats the notice each week until the branch is merged, and it no longer asks for the `pull-requests` permission. `docs/archify.md` says to open the PR by hand.
 - **Chart bars are square at both ends (#162).** The engine painted every `bar` row with `border-radius:6px 6px 0 0`, so a column was rounded on its value end and an `hbar` bar on its top corners, and each read as a tab. `template.html` now paints no radius on a bar: every chart form (`bar`, `hbar`, a `compare` series, the template bars) is square by default, and a row that sets `radius` rounds all four corners. SKILL.md's row table and `docs/charts.md` say so. Deck and library html rebuilt. Gates: test/chart.test.mjs asserts that the chart rows and every template's rows carry no one-sided radius, and renders the chart forms and the chart templates in Chromium to check that each bar is square and that no mark draws a one-sided radius.
 - **Undo and Delete buttons in the HUD.** Undo (⌘Z) and delete (⌫) were keys only, so a phone could neither take back an edit nor remove a row or a slide (#167). The edit group now carries an Undo button (Lucide `undo-2`) and a Delete button (Lucide `trash-2`) on every pointer, after duplicate. Each runs the code its key runs in the same place: the browser's text undo and delete while a row is being edited, `sheetKey()` in the contact sheet, `undo()` and the new `delSel()` (the canvas key's own body, moved into a function both share) on the canvas. Undo is disabled while the undo stack is empty; Delete is disabled with no selection on the canvas, and in the sheet with no selection or one slide left. Neither appears in the present-mode pill. The HUD manifest in `docs/editor.md` gains `undobtn` and `delbtn`. Guarded by `test/hud.test.mjs` and a tap-only test in `test/touch.test.mjs`.
diff --git a/docs/archify.md b/docs/archify.md
index 2e4d6d8..9519d6d 100644
--- a/docs/archify.md
+++ b/docs/archify.md
@@ -1,6 +1,6 @@
 # archify
 
-decklet ships [archify](https://github.com/tt-a1i/archify) (MIT, tt-a1i) at **v3.0.0** in `vendor/archify`. archify turns a typed JSON spec into one standalone, explorable HTML diagram: architecture, workflow, sequence, data flow and lifecycle, with its own validator and export to PNG, SVG and WebM.
+decklet ships [archify](https://github.com/tt-a1i/archify) (MIT, tt-a1i) at **v3.0.1** in `vendor/archify`. archify turns a typed JSON spec into one standalone, explorable HTML diagram: architecture, workflow, sequence, data flow and lifecycle, with its own validator and export to PNG, SVG and WebM.
 
 ## Figure or archify
 
@@ -32,7 +32,7 @@ To move the pin, run one command:
 
 ```bash
 node bin/archify-sync.mjs               # the latest release
-node bin/archify-sync.mjs --tag v3.0.0 # one tag, forward or back
+node bin/archify-sync.mjs --tag v3.0.1 # one tag, forward or back
 node bin/archify-sync.mjs --check       # exit 1 when a newer release is out
 ```
 
diff --git a/vendor/archify.lock.json b/vendor/archify.lock.json
index 0074829..0caa80d 100644
--- a/vendor/archify.lock.json
+++ b/vendor/archify.lock.json
@@ -1,7 +1,7 @@
 {
   "repo": "tt-a1i/archify",
-  "tag": "v3.0.0",
-  "commit": "9286c3b9c2cef359e98586b420d769d87bcb163f",
-  "zipSha256": "e30f65ddab8bbb0c467fa4be5bccf7e3853bd3ee86e8338f31e102037496be18",
-  "treeSha256": "05ecbd8434825106e8a5284ef3f1a61f0bd3f9f375554a9e31795c67e304ea7e"
+  "tag": "v3.0.1",
+  "commit": "2ab3cae7ac2c2a55d7386ca789d03c4fcd31816c",
+  "zipSha256": "b0b23bd28db314f04ca8ab9620fe20f8c1ac6474a3546bd8fe4679508aa1b7f5",
+  "treeSha256": "3026a902111b9a6540b26f1b413ebef599aaa580aa134d929fe01cdf8494edf1"
 }
diff --git a/vendor/archify/SKILL.md b/vendor/archify/SKILL.md
index e831e97..7efc61b 100644
--- a/vendor/archify/SKILL.md
+++ b/vendor/archify/SKILL.md
@@ -20,7 +20,7 @@ For a real codebase, read [Repository authoring](references/repository-authoring
 
 When the user supplies a frozen candidate, run `finalize` first as one CLI invocation. Its passing receipt completes the automated gates; follow any visual review recommendation under Delivery before claiming visual quality. For repair, follow step 5.
 
-The optional update check never delays `finalize`; see Update awareness.
+`finalize` includes a bounded update check in its delivery receipt; see Update awareness.
 
 ## Fast authoring path
 
@@ -43,10 +43,7 @@ Use this path for ordinary generation. Read branch references only when their st
 
 ## Update awareness
 
-After the first candidate exists, a harness with true parallel tool calls may run `scripts/check-update.mjs` once alongside `finalize`. Otherwise skip it without delaying delivery.
-
-- For `silent`, continue without mentioning the update check.
-- For `update_available`, read `references/update-awareness.md`, follow it, then continue the requested task.
+`finalize` and standalone `deliver` include `update` in their receipts. Do not run a separate check for the same delivery. If `update.noticeRequired` is true, read `references/update-awareness.md` and keep one update line in your final response to the user, even after a quality gate fails. For a task with several diagrams, mention the update once in the final response. Snooze or ignore a reminder only when the user explicitly asks; never install or update on your own initiative.
 
 Before the first candidate, use the authoring references and relevant repository source, not Archify implementation or tests. Inspect Archify implementation if diagnostics remain unactionable after focused repairs.
 
diff --git a/vendor/archify/assets/template.html b/vendor/archify/assets/template.html
index 4de631e..792c822 100644
--- a/vendor/archify/assets/template.html
+++ b/vendor/archify/assets/template.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>[PROJECT NAME] Architecture Diagram</title>
   <script>
diff --git a/vendor/archify/bin/archify.mjs b/vendor/archify/bin/archify.mjs
index e28ad31..fa2066d 100755
--- a/vendor/archify/bin/archify.mjs
+++ b/vendor/archify/bin/archify.mjs
@@ -4163,7 +4163,7 @@ function commandRender(args) {
   if (result.status !== 0) exitFrom(result);
 }
 
-function reportArtifactFailure({ command, json, stage, type, input, output, error, diagnostics = [], status = 1, checker, receiptId, provenance }) {
+function reportArtifactFailure({ command, json, stage, type, input, output, error, diagnostics = [], status = 1, checker, receiptId, provenance, update }) {
   const receipt = {
     schemaVersion: 1,
     ok: false,
@@ -4177,9 +4177,13 @@ function reportArtifactFailure({ command, json, stage, type, input, output, erro
     diagnostics,
     ...(provenance ? { provenance } : {}),
     ...(checker ? { checker } : {}),
+    ...(update ? { update } : {}),
   };
   if (json) console.log(JSON.stringify(receipt, null, 2));
-  else console.error(formatDiagnostics(error, diagnostics));
+  else {
+    console.error(formatDiagnostics(error, diagnostics));
+    if (update?.noticeRequired) console.log(update.noticeText);
+  }
   process.exitCode = status;
 }
 
@@ -4319,16 +4323,18 @@ async function commandDeliver(args) {
     releaseRegularFileBinding,
   };
   const receiptId = randomUUID();
+  let updateCheck;
   let deliveryOwnership;
   let recoveryRequired = false;
   let stagingDirectory;
   let stagingIdentity;
   let deliveryAliasOutput;
-  const reportDeliveryFailure = (options) => {
+  const reportDeliveryFailure = async (options) => {
     const ownership = deliveryOwnership;
     deliveryOwnership = undefined;
     const recorded = writeDeliveryFailureReceipt({
       ...options,
+      ...(updateCheck ? { update: await updateCheck } : {}),
       pathsAlias,
       receiptId,
       ownership,
@@ -4343,6 +4349,10 @@ async function commandDeliver(args) {
       recoveryRequired = true;
     }
   };
+  const reportPreparedArtifactFailure = async (options) => reportArtifactFailure({
+    ...options,
+    ...(updateCheck ? { update: await updateCheck } : {}),
+  });
   const inputPath = path.resolve(input);
   let specification;
   let diagram;
@@ -4351,7 +4361,7 @@ async function commandDeliver(args) {
     diagram = JSON.parse(specification.toString('utf8'));
   } catch (error) {
     const repair = inputDiagnostic(error, inputPath);
-    reportDeliveryFailure({
+    await reportDeliveryFailure({
       json,
       stage: 'input',
       type,
@@ -4402,9 +4412,9 @@ async function commandDeliver(args) {
       })],
     };
     if (outputPath) {
-      reportDeliveryFailure(failure);
+      await reportDeliveryFailure(failure);
     } else {
-      reportArtifactFailure({ ...failure, command: 'deliver', receiptId });
+      await reportPreparedArtifactFailure({ ...failure, command: 'deliver', receiptId });
     }
     return;
   }
@@ -4413,7 +4423,7 @@ async function commandDeliver(args) {
     fs.mkdirSync(outputDirectory, { recursive: true });
   } catch (error) {
     const message = `Could not create delivery directory "${outputDirectory}": ${error.message}`;
-    reportDeliveryFailure({
+    await reportDeliveryFailure({
       json,
       stage: 'prepare',
       type,
@@ -4466,9 +4476,9 @@ async function commandDeliver(args) {
       })],
     };
     if (error?.code === 'ARCHIFY_SIDECAR_NAMESPACE_INDETERMINATE') {
-      reportArtifactFailure({ ...failure, command: 'deliver', receiptId });
+      await reportPreparedArtifactFailure({ ...failure, command: 'deliver', receiptId });
     } else {
-      reportDeliveryFailure(failure);
+      await reportDeliveryFailure(failure);
     }
     return;
   }
@@ -4506,8 +4516,10 @@ async function commandDeliver(args) {
     outputPath = artifactCapture.commitPath;
     provenancePath = provenanceCapture.commitPath;
     outputDirectory = path.dirname(outputPath);
+    const { startDeliveryUpdateCheck } = await import('./delivery-update.mjs');
+    updateCheck = startDeliveryUpdateCheck();
   } catch (error) {
-    reportArtifactFailure({
+    await reportPreparedArtifactFailure({
       command: 'deliver', json, stage: 'prepare', type, input: inputPath, output: outputPath, receiptId,
       error: error.message,
       diagnostics: error.archifyDiagnostics || [diagnostic({
@@ -4532,7 +4544,7 @@ async function commandDeliver(args) {
     stagingIdentity = staging.identity;
   } catch (error) {
     const message = `Could not create a delivery candidate beside "${outputPath}": ${error.message}`;
-    reportDeliveryFailure({
+    await reportDeliveryFailure({
       json,
       stage: 'prepare',
       type,
@@ -4586,7 +4598,7 @@ async function commandDeliver(args) {
     } catch (error) {
       const message = `Could not start delivery for "${outputPath}": ${error.message}`;
       const recorded = error.deliveryFailureRecord;
-      reportArtifactFailure({
+      await reportPreparedArtifactFailure({
         command: 'deliver', json, stage: 'prepare', type, input: inputPath, output: outputPath, receiptId,
         error: message,
         ...(recorded ? { provenance: recorded.status } : {}),
@@ -4625,7 +4637,7 @@ async function commandDeliver(args) {
         releaseError = cause;
       }
       deliveryOwnership = undefined;
-      reportArtifactFailure({
+      await reportPreparedArtifactFailure({
         command: 'deliver', json, stage: 'prepare', type, input: inputPath, output: outputPath, receiptId,
         error: error.message,
         diagnostics: [
@@ -4653,7 +4665,7 @@ async function commandDeliver(args) {
         // The lock is the remaining fail-closed barrier. Do not write failure
         // provenance or release it after journal rollback itself became unsafe.
         deliveryOwnership = undefined;
-        reportArtifactFailure({
+        await reportPreparedArtifactFailure({
           command: 'deliver', json, stage: 'prepare', type, input: inputPath, output: outputPath, receiptId,
           error: `Could not persist the delivery attempt before rendering: ${error.message}`,
           diagnostics: [deliveryJournalRecoveryDiagnostic(outputPath, error)],
@@ -4668,14 +4680,14 @@ async function commandDeliver(args) {
           recoveryDirectory: stagingDirectory,
           recoverableBackups: [],
         };
-        reportArtifactFailure({
+        await reportPreparedArtifactFailure({
           command: 'deliver', json, stage: 'prepare', type, input: inputPath, output: outputPath, receiptId,
           error: `Could not persist the delivery attempt before rendering: ${error.message}`,
           diagnostics: [deliveryLockFailureDiagnostic(outputPath, error)],
         });
         return;
       }
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json, stage: 'prepare', type, input: inputPath, output: outputPath,
         error: 'Could not persist the delivery attempt before rendering.',
         diagnostics: [diagnostic({
@@ -4700,7 +4712,7 @@ async function commandDeliver(args) {
       );
     } catch (error) {
       const message = `Could not freeze the delivery specification: ${error.message}`;
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'prepare',
         type,
@@ -4724,7 +4736,7 @@ async function commandDeliver(args) {
     });
     if (render.status !== 0) {
       const failure = rendererFailure(render);
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'render',
         type,
@@ -4760,7 +4772,7 @@ async function commandDeliver(args) {
       } catch {
         checker = { ok: false, file: outputPath, diagnostic: check.stdout.trim() };
       }
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'check',
         type,
@@ -4779,7 +4791,7 @@ async function commandDeliver(args) {
       result = JSON.parse(check.stdout);
     } catch (error) {
       const message = `Could not parse the successful artifact-check receipt: ${error.message}`;
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'receipt',
         type,
@@ -4800,7 +4812,7 @@ async function commandDeliver(args) {
       artifact = fs.readFileSync(candidatePath);
     } catch (error) {
       const message = `Could not read the verified delivery candidate: ${error.message}`;
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'receipt',
         type,
@@ -4821,7 +4833,7 @@ async function commandDeliver(args) {
       sourceEvidence = sourceEvidenceFromArtifact(artifact);
     } catch (error) {
       const message = `Could not read the repository evidence receipt: ${error.message}`;
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'receipt',
         type,
@@ -4893,7 +4905,7 @@ async function commandDeliver(args) {
         // cleanup must not claim a candidate that could not be bound here.
       }
     } catch (error) {
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'commit',
         type,
@@ -4928,7 +4940,7 @@ async function commandDeliver(args) {
         otherOutputPaths: [currentOutputPath],
       });
     } catch (error) {
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'commit',
         type,
@@ -4974,7 +4986,7 @@ async function commandDeliver(args) {
         // barrier around retained backups and any claimant we did not create.
         // Do not write failure provenance or release ownership here.
         deliveryOwnership = undefined;
-        reportArtifactFailure({
+        await reportPreparedArtifactFailure({
           command: 'deliver', json, stage: 'commit', type, input: inputPath, output: outputPath, receiptId,
           error: message,
           diagnostics: [
@@ -4995,7 +5007,7 @@ async function commandDeliver(args) {
           releaseError = cause;
         }
         deliveryOwnership = undefined;
-        reportArtifactFailure({
+        await reportPreparedArtifactFailure({
           command: 'deliver', json, stage: 'commit', type, input: inputPath, output: outputPath, receiptId,
           error: message,
           diagnostics: [
@@ -5007,14 +5019,14 @@ async function commandDeliver(args) {
       }
       if (error.deliveryOwnershipCode === 'delivery/ownership-lost') {
         deliveryOwnership = undefined;
-        reportArtifactFailure({
+        await reportPreparedArtifactFailure({
           command: 'deliver', json, stage: 'commit', type, input: inputPath, output: outputPath, receiptId,
           error: message,
           diagnostics: [deliveryLockFailureDiagnostic(outputPath, error)],
         });
         return;
       }
-      reportDeliveryFailure({
+      await reportDeliveryFailure({
         json,
         stage: 'commit',
         type,
@@ -5050,7 +5062,7 @@ async function commandDeliver(args) {
         };
       }
       const message = `Delivery committed, but its lock could not be released for "${outputPath}": ${error.message}`;
-      reportArtifactFailure({
+      await reportPreparedArtifactFailure({
         command: 'deliver', json, stage: 'release', type, input: inputPath, output: outputPath, receiptId,
         error: message,
         diagnostics: [deliveryLockFailureDiagnostic(outputPath, error)],
@@ -5075,6 +5087,8 @@ async function commandDeliver(args) {
       }
     }
 
+    receipt.update = await updateCheck;
+
     if (json) {
       console.log(JSON.stringify(receipt, null, 2));
     } else {
@@ -5084,6 +5098,7 @@ async function commandDeliver(args) {
         : '';
       console.log(`${receipt.validation.checksPassed}/${receipt.validation.checkCount} artifact checks; composition ${receipt.validation.compositionProfile}: ${receipt.validation.compositionStatus}${engineering}; sha256 ${receipt.artifact.sha256.slice(0, 12)}`);
       if (receipt.open?.status === 'opened') console.log(`opened ${outputPath}`);
+      if (receipt.update.noticeRequired) console.log(receipt.update.noticeText);
     }
   } finally {
     if (deliveryOwnership) {
@@ -5718,6 +5733,7 @@ async function commandFinalize(rawArgs) {
     console.log(`gates ${Object.entries(result.summary.gates).map(([stage, status]) => `${stage}:${status}`).join(' ')}`);
     console.log(`receipt ${result.summary.evidence.receipt}`);
     console.log(`perceptual visual review ${result.summary.visualReview}`);
+    if (result.summary.update?.noticeRequired) console.log(result.summary.update.noticeText);
   }
   process.exitCode = result.exitCode;
 }
diff --git a/vendor/archify/bin/delivery-update.mjs b/vendor/archify/bin/delivery-update.mjs
new file mode 100644
index 0000000..4f34dba
--- /dev/null
+++ b/vendor/archify/bin/delivery-update.mjs
@@ -0,0 +1,91 @@
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const childPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'scripts', 'delivery-update-child.mjs');
+const DEADLINE_MS = 1_000;
+const MAX_OUTPUT_BYTES = 16 * 1_024;
+
+function unavailable(reason) {
+  return { status: 'unavailable', installedVersion: null, availableVersion: null,
+    releaseNotes: null, checkedAt: null, source: null, noticeRequired: false,
+    noticeText: null, reason };
+}
+
+function normalize(result) {
+  if (result?.status === 'current') return {
+    status: 'current', installedVersion: result.installedVersion,
+    availableVersion: result.availableVersion, releaseNotes: null,
+    checkedAt: result.checkedAt, source: result.source,
+    noticeRequired: false, noticeText: null,
+  };
+  if (result?.status !== 'update_available') {
+    return unavailable(result?.reason || (result?.status === 'silent' ? 'no-update' : 'invalid-result'));
+  }
+  const noticeRequired = result.noticeRequired !== false;
+  const cached = result.source === 'cache';
+  const noticeText = noticeRequired
+    ? `Archify ${result.severity === 'security' ? 'security update' : 'update'}: ${result.installedVersion} → ${result.latestVersion}. ${cached
+      ? `A previous check at ${result.checkedAt} found a newer release.`
+      : 'A newer release is available.'} Release notes: ${result.releaseNotes}. The installed Skill has not changed; ask to snooze or ignore this reminder.`
+    : null;
+  return {
+    status: 'update_available',
+    installedVersion: result.installedVersion,
+    availableVersion: result.latestVersion,
+    releaseNotes: result.releaseNotes,
+    severity: result.severity,
+    checkedAt: result.checkedAt,
+    source: result.source,
+    noticeRequired,
+    noticeText,
+    ...(result.eventKey ? { eventKey: result.eventKey } : {}),
+    ...(result.reason ? { reason: result.reason } : {}),
+    ...(result.suppressedUntil ? { suppressedUntil: result.suppressedUntil } : {}),
+  };
+}
+
+export function startDeliveryUpdateCheck({
+  env = process.env, deadlineMs = DEADLINE_MS, checkerPath = childPath,
+} = {}) {
+  if (env.ARCHIFY_UPDATE_CHECK_DISABLED === '1') return Promise.resolve(unavailable('disabled'));
+  return new Promise((resolve) => {
+    let child;
+    try {
+      const deadlineNs = process.hrtime.bigint() + BigInt(Math.floor(deadlineMs * 1_000_000));
+      child = spawn(process.execPath, [checkerPath, String(deadlineNs)], {
+        env,
+        stdio: ['ignore', 'pipe', 'ignore'],
+        windowsHide: true,
+      });
+    } catch {
+      resolve(unavailable('runtime-unavailable'));
+      return;
+    }
+    let output = '';
+    let timedOut = false;
+    let overflow = false;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill('SIGKILL');
+    }, deadlineMs);
+    child.stdout.on('data', (chunk) => {
+      if (Buffer.byteLength(output) + chunk.length > MAX_OUTPUT_BYTES) {
+        overflow = true;
+        child.kill('SIGKILL');
+      } else output += chunk.toString('utf8');
+    });
+    child.on('error', () => {});
+    child.on('close', (code) => {
+      clearTimeout(timer);
+      if (overflow) return resolve(unavailable('invalid-result'));
+      // A synchronous renderer can delay both this callback and the parent's
+      // timer. A complete child result wins even if the timer fired meanwhile.
+      if (code === 0 && output.endsWith('\n')) {
+        try { return resolve(normalize(JSON.parse(output))); }
+        catch { return resolve(unavailable('invalid-result')); }
+      }
+      resolve(unavailable(timedOut || child.signalCode === 'SIGKILL' ? 'timeout' : 'check-failed'));
+    });
+  });
+}
diff --git a/vendor/archify/bin/finalize.mjs b/vendor/archify/bin/finalize.mjs
index f96f727..4407059 100644
--- a/vendor/archify/bin/finalize.mjs
+++ b/vendor/archify/bin/finalize.mjs
@@ -16,8 +16,10 @@ import {
   findChrome,
   VISUAL_CHECK_VIEWPORTS,
 } from './visual-check.mjs';
+import { startDeliveryUpdateCheck } from './delivery-update.mjs';
 
 export const FINALIZE_STAGES = Object.freeze(['validate', 'deliver', 'check', 'browser-check']);
+const FINALIZE_UPDATE_DEADLINE_MS = 4_000;
 
 function sha256(buffer) {
   return createHash('sha256').update(buffer).digest('hex');
@@ -550,6 +552,7 @@ export function compactFinalizeReceipt(receipt) {
       truncated: allDiagnostics.length > selectedDiagnostics.length,
     },
     evidence: receipt.evidence,
+    ...(receipt.update ? { update: receipt.update } : {}),
     visualReview: receipt.visualReview || 'not-requested',
     durationMs: receipt.durationMs,
   };
@@ -623,6 +626,7 @@ export async function runFinalize({
   env = process.env,
   runCommand = defaultRunner,
   runBrowserCheck,
+  startUpdateCheck = startDeliveryUpdateCheck,
   resolveChrome = findChrome,
   createBrowser = (chromePath, options) => new ChromeVisualBrowser(chromePath, options),
 } = {}) {
@@ -690,6 +694,9 @@ export async function runFinalize({
     summaryCapture = writeJsonAtomic(resolvedSummary, compactFinalizeReceipt(receipt), summaryCapture, assertReceiptPaths);
   };
   persistReceipts();
+  // The gates below usually take seconds, so a slower network can finish the
+  // update check in parallel instead of timing out on every delivery.
+  const updateCheck = startUpdateCheck({ env, deadlineMs: FINALIZE_UPDATE_DEADLINE_MS });
 
   // Only launch/attach the blank browser here. The normal browser gate still
   // verifies current delivery provenance before it consumes this one-shot factory.
@@ -739,7 +746,8 @@ export async function runFinalize({
         });
         result = { status: checked.exitCode, stdout: JSON.stringify(checked.receipt) };
       } else {
-        result = await runCommand({ stage, cliPath, args, cwd, env });
+        result = await runCommand({ stage, cliPath, args, cwd,
+          env: stage === 'deliver' ? { ...env, ARCHIFY_UPDATE_CHECK_DISABLED: '1' } : env });
       }
       const stageReceipt = parsedReceipt(result.stdout);
       const code = result.status ?? 1;
@@ -877,9 +885,11 @@ export async function runFinalize({
       : identity(resolvedOutput);
     receipt.finishedAt = new Date().toISOString();
     receipt.durationMs = durationMs(started);
+    receipt.update = await updateCheck;
     persistReceipts();
     return { exitCode, receipt, summary: compactFinalizeReceipt(receipt) };
   } finally {
     if (browser && !browserTransferred) await browser.close();
+    await updateCheck;
   }
 }
diff --git a/vendor/archify/examples/dataflow-product-analytics.html b/vendor/archify/examples/dataflow-product-analytics.html
index 53b788b..11babc7 100644
--- a/vendor/archify/examples/dataflow-product-analytics.html
+++ b/vendor/archify/examples/dataflow-product-analytics.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>Product Analytics Data Flow Diagram</title>
   <script>
diff --git a/vendor/archify/examples/lifecycle-agent-run.html b/vendor/archify/examples/lifecycle-agent-run.html
index d8fd004..6714960 100644
--- a/vendor/archify/examples/lifecycle-agent-run.html
+++ b/vendor/archify/examples/lifecycle-agent-run.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>Agent Run Lifecycle Diagram</title>
   <script>
diff --git a/vendor/archify/examples/sequence-cache-miss-request.html b/vendor/archify/examples/sequence-cache-miss-request.html
index bfe2741..84686bc 100644
--- a/vendor/archify/examples/sequence-cache-miss-request.html
+++ b/vendor/archify/examples/sequence-cache-miss-request.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>Cache Miss Request Sequence Diagram</title>
   <script>
diff --git a/vendor/archify/examples/web-app-rendered.html b/vendor/archify/examples/web-app-rendered.html
index 5931dea..e424176 100644
--- a/vendor/archify/examples/web-app-rendered.html
+++ b/vendor/archify/examples/web-app-rendered.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>Sample Web App Diagram</title>
   <script>
diff --git a/vendor/archify/examples/workflow-agent-tool-call-rendered.html b/vendor/archify/examples/workflow-agent-tool-call-rendered.html
index 2fa90c2..a702481 100644
--- a/vendor/archify/examples/workflow-agent-tool-call-rendered.html
+++ b/vendor/archify/examples/workflow-agent-tool-call-rendered.html
@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="generator" content="archify 3.0.0">
+  <meta name="generator" content="archify 3.0.1">
   <meta name="archify-reader-contract" content="declared-wide-v1">
   <title>Agent Tool Call Workflow Diagram</title>
   <script>
diff --git a/vendor/archify/package.json b/vendor/archify/package.json
index 8b46369..97ba45b 100644
--- a/vendor/archify/package.json
+++ b/vendor/archify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "archify",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "private": true,
   "type": "module",
   "description": "JSON-IR diagram renderers (architecture / workflow / sequence / dataflow / lifecycle).",
diff --git a/vendor/archify/references/update-awareness.md b/vendor/archify/references/update-awareness.md
index 45d8458..4f11feb 100644
--- a/vendor/archify/references/update-awareness.md
+++ b/vendor/archify/references/update-awareness.md
@@ -1,9 +1,12 @@
 # Update awareness
 
-Read this file only when `scripts/check-update.mjs` returns `update_available`.
+Read this file when a `finalize` or standalone `deliver` receipt has `update.noticeRequired: true`.
 
-Show one compact notice in the user's conversation language with the installed version, latest version, the checker's fixed local summary, and official release-notes link. When `severity` is `security`, label it as a security update with restrained emphasis; this changes emphasis only, never user autonomy. Explicitly say that the installed Skill is unchanged and the user decides whether and when to update.
+Keep one compact line in the final response, in the user's language, with `installedVersion`, `availableVersion`, and the official `releaseNotes` link. Say that the installed Skill has not changed and that the user can ask to snooze or ignore the reminder. If `source` is `cache`, say that a previous check at `checkedAt` found the update. A process message or tool output does not replace this final line.
+For `severity: "security"`, label it as a security update without making installation automatic or urgent by default.
 
-You may translate the fixed local sentence. Never quote, summarize, or translate the remote manifest's summary. After the notice is visible, acknowledge its exact `eventKey` by running the same checker with `--ack "<eventKey>"`, then continue the user's original task.
+You may translate the fixed local `noticeText`. Never quote, summarize, or translate the remote manifest's summary.
+
+When the user explicitly asks to pause or stop this reminder, run `node scripts/check-update.mjs --snooze "<eventKey>"` (seven days) or `--ignore "<eventKey>"` (this exact release only) from the Skill directory with the receipt's `update.eventKey`, then report the returned status. Never run them on your own initiative; `--ack` is a no-op. These commands do not install an update, and a newer release notifies again.
 
 The notice is information, not permission. Keep the installed version unchanged. This workflow never downloads, installs, or executes an update, and silence is never consent.
diff --git a/vendor/archify/scripts/check-update.mjs b/vendor/archify/scripts/check-update.mjs
index 30d529a..369eeac 100644
--- a/vendor/archify/scripts/check-update.mjs
+++ b/vendor/archify/scripts/check-update.mjs
@@ -26,7 +26,7 @@ const OPERATION_OWNER_FILE = 'owner.json';
 const ACTIVE_CLAIM_DIRECTORY = 'active-claim';
 const OPERATION_NAME = /^(reserved|pending|committed|fenced|cancelled)-(\d{1,20})$/;
 const MAX_OPERATION_GENERATION = (10n ** 20n) - 1n;
-const CHECK_TTL_MS = 72 * 60 * 60 * 1_000;
+const CHECK_TTL_MS = 24 * 60 * 60 * 1_000;
 const MAX_CACHE_HORIZON_MS = Math.ceil(CHECK_TTL_MS * 1.2);
 const FIRST_FAILURE_DELAY_MS = 6 * 60 * 60 * 1_000;
 const LATER_FAILURE_DELAY_MS = 24 * 60 * 60 * 1_000;
@@ -37,18 +37,23 @@ const MAX_CACHE_STATE_BYTES = 64 * 1_024;
 const MAX_CLAIM_OWNER_BYTES = 1_024;
 const LONGEST_ISO_TIMESTAMP = '+275760-09-13T00:00:00.000Z';
 const LOCK_STALE_MS = 30_000;
-const ACK_LOCK_WAIT_MS = 1_200;
+const PREFERENCE_LOCK_WAIT_MS = 1_200;
 const LOCK_RETRY_DELAY_MS = 20;
 const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
 const scriptDirectory = path.dirname(fileURLToPath(import.meta.url));
 const defaultReleasePath = path.resolve(scriptDirectory, '..', 'skill-release.json');
 
 class FileIdentityChangedError extends Error {}
+class ManifestWithdrawnError extends Error {}
 
 function silent(reason) {
   return { status: 'silent', reason };
 }
 
+function updatesDisabled() {
+  return process.env.ARCHIFY_UPDATE_CHECK_DISABLED === '1';
+}
+
 function isPlainObject(value) {
   return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
@@ -70,13 +75,14 @@ function validateManifest(value) {
 function validateCachedCandidate(value) {
   if (!isPlainObject(value)
     || !hasOnlyKeys(value, new Set([
-      'version', 'targetDigest', 'severity', 'releaseNotes',
+      'version', 'targetDigest', 'severity', 'releaseNotes', 'checkedAt',
     ]))) return null;
   try {
     if (!isStableCoreVersion(value.version)) return null;
     if (!DIGEST_PATTERN.test(value.targetDigest)
       || !['normal', 'security'].includes(value.severity)) return null;
     validateReleaseNotesUrl(value.releaseNotes, value.version);
+    if (typeof value.checkedAt !== 'string' || !Number.isFinite(Date.parse(value.checkedAt))) return null;
     return { ...value };
   } catch {
     return null;
@@ -85,39 +91,32 @@ function validateCachedCandidate(value) {
 
 function emptyState(installedVersion = null) {
   return {
-    schemaVersion: 1,
+    schemaVersion: 2,
     skillId: SKILL_ID,
     installedVersion,
     check: {
       nextCheckAt: null,
       consecutiveFailures: 0,
     },
-    notification: {
-      offeredDigests: [],
-      acknowledgedDigests: [],
-    },
+    preferences: [],
   };
 }
 
+function validPreference(value) {
+  return isPlainObject(value)
+    && hasOnlyKeys(value, new Set(['targetDigest', 'version', 'mode', 'until']))
+    && DIGEST_PATTERN.test(value.targetDigest)
+    && isStableCoreVersion(value.version)
+    && ['ignore', 'snooze'].includes(value.mode)
+    && (value.mode === 'ignore' ? value.until === null
+      : typeof value.until === 'string' && Number.isFinite(Date.parse(value.until)));
+}
+
 function encodeBoundedState(state) {
   const encoded = Buffer.from(`${JSON.stringify(state)}\n`, 'utf8');
   return encoded.length <= MAX_CACHE_STATE_BYTES ? encoded : null;
 }
 
-function stateAfterAcknowledgement(state, targetDigest) {
-  const alreadyAcknowledged = state.notification.acknowledgedDigests.includes(targetDigest);
-  return {
-    ...state,
-    notification: {
-      offeredDigests: state.notification.offeredDigests
-        .filter((digest) => digest !== targetDigest),
-      acknowledgedDigests: alreadyAcknowledged
-        ? [...state.notification.acknowledgedDigests]
-        : [...state.notification.acknowledgedDigests, targetDigest],
-    },
-  };
-}
-
 function stateWithFailureCheck(state, nextCheckAt, consecutiveFailures, withdrawCandidate = false) {
   const failedState = {
     ...state,
@@ -127,20 +126,10 @@ function stateWithFailureCheck(state, nextCheckAt, consecutiveFailures, withdraw
   return failedState;
 }
 
+// A committed state must leave room for its own failure backoff.
 function encodeRecoverableState(state) {
   const encoded = encodeBoundedState(state);
-  if (!encoded) return null;
-  if (!encodeBoundedState(stateWithFailureCheck(state, LONGEST_ISO_TIMESTAMP, 2))) return null;
-  let acknowledgementState = state;
-  for (const targetDigest of state.notification.offeredDigests) {
-    acknowledgementState = stateAfterAcknowledgement(acknowledgementState, targetDigest);
-    if (!encodeBoundedState(acknowledgementState)
-      || !encodeBoundedState(stateWithFailureCheck(
-        acknowledgementState,
-        LONGEST_ISO_TIMESTAMP,
-        2,
-      ))) return null;
-  }
+  if (!encoded || !encodeBoundedState(stateWithFailureCheck(state, LONGEST_ISO_TIMESTAMP, 2))) return null;
   return encoded;
 }
 
@@ -151,14 +140,15 @@ function versionCacheDirectory(cacheDirectory, installedVersion) {
 
 function normalizeState(value, installedVersion) {
   const effectiveInstalledVersion = installedVersion ?? value?.installedVersion ?? null;
-  if (!isPlainObject(value) || value.schemaVersion !== 1 || value.skillId !== SKILL_ID
+  if (!isPlainObject(value) || value.schemaVersion !== 2 || value.skillId !== SKILL_ID
     || (installedVersion !== null && value.installedVersion !== installedVersion)
     || (value.installedVersion !== null && typeof value.installedVersion !== 'string')
     || !isPlainObject(value.check)
     || !(value.check.nextCheckAt === null || typeof value.check.nextCheckAt === 'string')
     || !Number.isSafeInteger(value.check.consecutiveFailures)
     || value.check.consecutiveFailures < 0
-    || !isPlainObject(value.notification)) return null;
+    || !Array.isArray(value.preferences) || value.preferences.length > 32
+    || value.preferences.some((preference) => !validPreference(preference))) return null;
   if (effectiveInstalledVersion !== null) {
     try {
       parseSemver(effectiveInstalledVersion);
@@ -170,28 +160,11 @@ function normalizeState(value, installedVersion) {
   const state = emptyState(effectiveInstalledVersion);
   state.check.nextCheckAt = value.check.nextCheckAt;
   state.check.consecutiveFailures = value.check.consecutiveFailures;
-  const { offeredDigests, acknowledgedDigests } = value.notification;
-  if (!Array.isArray(offeredDigests)
-    || offeredDigests.some((digest) => typeof digest !== 'string' || !DIGEST_PATTERN.test(digest))) {
-    return null;
-  }
-  state.notification.offeredDigests = [...new Set(offeredDigests)];
-
-  if (!Array.isArray(acknowledgedDigests)
-    || acknowledgedDigests.some((digest) => typeof digest !== 'string' || !DIGEST_PATTERN.test(digest))) {
-    return null;
-  }
-  state.notification.acknowledgedDigests = [...new Set(acknowledgedDigests)];
+  state.preferences = value.preferences.map((preference) => ({ ...preference }));
   const hasCandidate = Object.hasOwn(value, 'candidate');
   const candidate = validateCachedCandidate(value.candidate);
   if (hasCandidate && !candidate) return null;
-  if (candidate) {
-    if (effectiveInstalledVersion !== null
-      && compareSemver(candidate.version, effectiveInstalledVersion) > 0
-      && !state.notification.offeredDigests.includes(candidate.targetDigest)
-      && !state.notification.acknowledgedDigests.includes(candidate.targetDigest)) return null;
-    state.candidate = candidate;
-  }
+  if (candidate) state.candidate = candidate;
   return encodeRecoverableState(state) ? state : null;
 }
 
@@ -792,6 +765,19 @@ async function operationIsActive(
             { bigint: true },
           );
           if (!ownerMetadata.isFile() || ownerMetadata.isSymbolicLink()) return false;
+          try {
+            const owner = await readJsonFile(
+              path.join(operation.directory, OPERATION_OWNER_FILE),
+              MAX_CLAIM_OWNER_BYTES,
+              ownerMetadata,
+            );
+            if (Number.isSafeInteger(owner?.pid) && owner.pid > 0 && processIsGone(owner.pid)) {
+              return false;
+            }
+          } catch (error) {
+            if (error instanceof FileIdentityChangedError) throw error;
+            // A malformed owner still gets the hard lease before recovery.
+          }
           return metadataIsWithinLease(ownerMetadata);
         } catch (error) {
           if (error?.code !== 'ENOENT') throw error;
@@ -805,6 +791,15 @@ async function operationIsActive(
   }
 }
 
+function processIsGone(pid) {
+  try {
+    process.kill(pid, 0);
+    return false;
+  } catch (error) {
+    return error?.code === 'ESRCH';
+  }
+}
+
 function validateClaimOwner(value) {
   if (!isPlainObject(value)
     || !hasOnlyKeys(value, new Set(['pid', 'token', 'generation']))
@@ -1299,7 +1294,7 @@ function digestForEventKey(eventKey) {
   return DIGEST_PATTERN.test(digest) ? digest : null;
 }
 
-function notification(localRelease, candidate) {
+function notification(localRelease, candidate, source) {
   return {
     status: 'update_available',
     eventKey: eventKeyForDigest(candidate.targetDigest),
@@ -1309,17 +1304,30 @@ function notification(localRelease, candidate) {
     severity: candidate.severity,
     summary: `Archify ${candidate.version} is available; see the official release notes for details.`,
     releaseNotes: candidate.releaseNotes,
+    source,
+    checkedAt: candidate.checkedAt,
+    noticeRequired: true,
   };
 }
 
-function resultForCandidate(localRelease, state) {
-  if (!state.candidate) return silent('cache-valid');
-  const comparison = compareSemver(state.candidate.version, localRelease.version);
-  if (comparison <= 0) return silent('current');
-  if (state.notification.acknowledgedDigests.includes(state.candidate.targetDigest)) {
-    return silent('already-notified');
+function resultForCandidate(localRelease, state, { source = 'cache', nowMs = Date.now() } = {}) {
+  const { candidate } = state;
+  if (!candidate) return silent('cache-valid');
+  if (compareSemver(candidate.version, localRelease.version) <= 0) {
+    return {
+      status: 'current', installedVersion: localRelease.version,
+      availableVersion: candidate.version, checkedAt: candidate.checkedAt,
+      source, noticeRequired: false,
+    };
+  }
+  const result = notification(localRelease, candidate, source);
+  const preference = state.preferences?.find((entry) => entry.targetDigest === candidate.targetDigest
+    && entry.version === candidate.version);
+  if (preference?.mode === 'ignore') return { ...result, noticeRequired: false, reason: 'ignored' };
+  if (preference?.mode === 'snooze' && Date.parse(preference.until) > nowMs) {
+    return { ...result, noticeRequired: false, reason: 'snoozed', suppressedUntil: preference.until };
   }
-  return notification(localRelease, state.candidate);
+  return result;
 }
 
 async function readBoundedBody(response) {
@@ -1391,6 +1399,9 @@ async function fetchCandidate({ fetchImpl, manifestUrl, timeoutMs }) {
     });
     if (response.status !== 200) {
       await cancelResponseBody(response);
+      if (response.status === 404 || response.status === 410) {
+        throw new ManifestWithdrawnError('manifest was withdrawn');
+      }
       throw new Error(`manifest returned HTTP ${response.status}`);
     }
     const mediaType = response.headers.get('content-type')?.split(';', 1)[0].trim().toLowerCase();
@@ -1429,19 +1440,15 @@ function freshStateResult(localRelease, state, nowMs) {
   const nextCheckAt = Date.parse(state.check.nextCheckAt || '');
   if (Number.isFinite(nextCheckAt) && nextCheckAt > nowMs
     && nextCheckAt <= nowMs + MAX_CACHE_HORIZON_MS) {
-    return resultForCandidate(localRelease, state);
+    return resultForCandidate(localRelease, state, { nowMs });
   }
   return null;
 }
 
-async function resultAfterLosingOperation(cacheDirectory, operation, localRelease) {
+async function resultAfterLosingOperation(cacheDirectory, operation, localRelease, nowMs) {
   await cancelOperation(cacheDirectory, operation);
   const cached = await readState(cacheDirectory, localRelease.version);
-  if (cached.candidate
-    && cached.notification.offeredDigests.includes(cached.candidate.targetDigest)) {
-    return resultForCandidate(localRelease, cached);
-  }
-  return silent('check-in-progress');
+  return cached.candidate ? resultForCandidate(localRelease, cached, { nowMs }) : silent('check-in-progress');
 }
 
 async function waitUntilRetry(deadline, monotonicNow) {
@@ -1467,6 +1474,7 @@ export async function checkForUpdate({
   random = Math.random,
   timeoutMs = DEFAULT_TIMEOUT_MS,
 } = {}) {
+  if (updatesDisabled()) return silent('disabled');
   if (typeof fetchImpl !== 'function') return silent('runtime-unavailable');
   let localRelease;
   try {
@@ -1497,14 +1505,10 @@ export async function checkForUpdate({
   if (!operation) {
     try {
       const cached = await readState(stateDirectory, localRelease.version);
-      if (cached.candidate
-        && cached.notification.offeredDigests.includes(cached.candidate.targetDigest)) {
-        return resultForCandidate(localRelease, cached);
-      }
+      return cached.candidate ? resultForCandidate(localRelease, cached, { nowMs }) : silent('check-in-progress');
     } catch {
       return silent('cache-unavailable');
     }
-    return silent('check-in-progress');
   }
 
   try {
@@ -1516,12 +1520,12 @@ export async function checkForUpdate({
     }
 
     if (!await operationOwnsActiveClaim(stateDirectory, operation)) {
-      return await resultAfterLosingOperation(stateDirectory, operation, localRelease);
+      return await resultAfterLosingOperation(stateDirectory, operation, localRelease, nowMs);
     }
 
     await verifyCacheToken(cacheTokenFor(stateDirectory));
     if (!await operationOwnsActiveClaim(stateDirectory, operation)) {
-      return await resultAfterLosingOperation(stateDirectory, operation, localRelease);
+      return await resultAfterLosingOperation(stateDirectory, operation, localRelease, nowMs);
     }
     let fetched;
     try {
@@ -1531,24 +1535,33 @@ export async function checkForUpdate({
         timeoutMs,
       });
     } catch (error) {
-      const reason = error instanceof UpdateContractError ? 'invalid-manifest' : 'check-failed';
+      const withdrawn = error instanceof ManifestWithdrawnError;
+      const reason = withdrawn ? 'withdrawn'
+        : error instanceof UpdateContractError ? 'invalid-manifest' : 'check-failed';
+      // Offline or invalid checks keep repeating the last validated candidate.
+      const failedResult = (known) => (!withdrawn && known.candidate
+        ? resultForCandidate(localRelease, known, { nowMs }) : silent(reason));
       try {
         const committed = await commitOperation(
           stateDirectory,
           operation,
           localRelease.version,
           (current) => ({
-            state: stateAfterFailedCheck(current, nowMs),
-            result: silent(reason),
+            state: stateAfterFailedCheck(current, nowMs, withdrawn),
+            result: failedResult(current),
           }),
         );
+        if (committed.fenced) {
+          return await resultAfterLosingOperation(stateDirectory, operation, localRelease, nowMs);
+        }
         return committed.result;
       } catch {
         await cancelOperation(stateDirectory, operation).catch(() => {});
-        return silent('cache-unavailable');
+        return failedResult(state);
       }
     }
 
+    const candidate = { ...fetched.candidate, checkedAt: new Date(nowMs).toISOString() };
     try {
       const committed = await commitOperation(
         stateDirectory,
@@ -1557,36 +1570,27 @@ export async function checkForUpdate({
         (current) => {
           const next = {
             ...current,
-            candidate: fetched.candidate,
+            candidate,
             check: {
               nextCheckAt: nextSuccessfulCheck(nowMs, random),
               consecutiveFailures: 0,
             },
-            notification: {
-              offeredDigests: [...current.notification.offeredDigests],
-              acknowledgedDigests: [...current.notification.acknowledgedDigests],
-            },
           };
-          const result = resultForCandidate(localRelease, next);
-          if (result.status === 'update_available') {
-            if (!next.notification.offeredDigests.includes(next.candidate.targetDigest)) {
-              next.notification.offeredDigests.push(next.candidate.targetDigest);
-            }
-          }
+          const result = resultForCandidate(localRelease, next, { source: 'network', nowMs });
           return {
             state: next,
             result,
-            capacityFallback: {
-              state: stateAfterFailedCheck(current, nowMs, true),
-              result: silent('cache-unavailable'),
-            },
+            capacityFallback: { state: stateAfterFailedCheck(current, nowMs, true), result },
           };
         },
       );
+      if (committed.fenced) {
+        return await resultAfterLosingOperation(stateDirectory, operation, localRelease, nowMs);
+      }
       return committed.result;
     } catch {
       await cancelOperation(stateDirectory, operation).catch(() => {});
-      return silent('cache-unavailable');
+      return resultForCandidate(localRelease, { ...state, candidate }, { source: 'network', nowMs });
     }
   } catch {
     await cancelOperation(stateDirectory, operation).catch(() => {});
@@ -1594,15 +1598,19 @@ export async function checkForUpdate({
   }
 }
 
-export async function acknowledgeUpdate({
+export async function setUpdatePreference({
   releasePath = defaultReleasePath,
   cacheDirectory = defaultCacheDirectory(),
   eventKey,
+  mode,
+  days = 7,
+  now = Date.now,
   monotonicNow = () => performance.now(),
 } = {}) {
   const targetDigest = digestForEventKey(eventKey);
-  if (!targetDigest || typeof monotonicNow !== 'function') {
-    return silent('invalid-acknowledgement');
+  if (!targetDigest || !['snooze', 'ignore'].includes(mode)
+    || (mode === 'snooze' && (!Number.isInteger(days) || days < 1 || days > 365))) {
+    return silent('invalid-preference');
   }
   let localRelease;
   try {
@@ -1616,14 +1624,10 @@ export async function acknowledgeUpdate({
   } catch {
     return silent('cache-unavailable');
   }
-  let deadline;
-  try {
-    deadline = Number(monotonicNow()) + ACK_LOCK_WAIT_MS;
-  } catch {
-    return silent('invalid-acknowledgement');
-  }
-  if (!Number.isFinite(deadline)) return silent('invalid-acknowledgement');
-  while (true) {
+  const nowMs = Number(now());
+  if (!Number.isFinite(nowMs)) return silent('invalid-clock');
+  const deadline = Number(monotonicNow()) + PREFERENCE_LOCK_WAIT_MS;
+  while (Number(monotonicNow()) < deadline) {
     let operation;
     try {
       operation = await acquireOperation(stateDirectory);
@@ -1631,41 +1635,54 @@ export async function acknowledgeUpdate({
       return silent('cache-unavailable');
     }
     if (!operation) {
-      if (!await waitUntilRetry(deadline, monotonicNow)) return silent('check-in-progress');
+      if (!await waitUntilRetry(deadline, monotonicNow)) break;
       continue;
     }
     try {
       const committed = await commitOperation(
-        stateDirectory,
-        operation,
-        localRelease.version,
-        (state) => {
-          const wasOffered = state.notification.offeredDigests.includes(targetDigest);
-          const wasAcknowledged = state.notification.acknowledgedDigests.includes(targetDigest);
-          if (!wasOffered && !wasAcknowledged) {
-            return { state: null, result: silent('invalid-acknowledgement') };
+        stateDirectory, operation, localRelease.version, (state) => {
+          if (!state.candidate || state.candidate.targetDigest !== targetDigest
+            || compareSemver(state.candidate.version, localRelease.version) <= 0) {
+            return { state: null, result: silent('invalid-preference') };
           }
+          const preference = {
+            targetDigest,
+            version: state.candidate.version,
+            mode,
+            until: mode === 'snooze' ? new Date(nowMs + days * 24 * 60 * 60 * 1_000).toISOString() : null,
+          };
+          const preferences = (state.preferences || [])
+            .filter((entry) => entry.targetDigest !== targetDigest)
+            .slice(-30);
+          preferences.push(preference);
           return {
-            state: stateAfterAcknowledgement(state, targetDigest),
-            result: { status: 'acknowledged', eventKey },
+            state: { ...state, preferences },
+            result: { status: mode === 'snooze' ? 'snoozed' : 'ignored', eventKey,
+              ...(preference.until ? { suppressedUntil: preference.until } : {}) },
           };
         },
       );
       if (!committed.fenced) return committed.result;
-      if (!await waitUntilRetry(deadline, monotonicNow)) return silent('check-in-progress');
     } catch {
       await cancelOperation(stateDirectory, operation).catch(() => {});
       return silent('cache-unavailable');
     }
   }
+  return silent('check-in-progress');
 }
 
 async function runCli() {
-  if (process.env.ARCHIFY_UPDATE_CHECK_DISABLED === '1') return silent('disabled');
+  if (updatesDisabled()) return silent('disabled');
   const argumentsList = process.argv.slice(2);
   if (argumentsList.length === 0) return checkForUpdate();
   if (argumentsList.length === 2 && argumentsList[0] === '--ack') {
-    return acknowledgeUpdate({ eventKey: argumentsList[1] });
+    return silent('legacy-ack-no-op');
+  }
+  if (argumentsList.length === 2 && argumentsList[0] === '--snooze') {
+    return setUpdatePreference({ eventKey: argumentsList[1], mode: 'snooze' });
+  }
+  if (argumentsList.length === 2 && argumentsList[0] === '--ignore') {
+    return setUpdatePreference({ eventKey: argumentsList[1], mode: 'ignore' });
   }
   return silent('invalid-arguments');
 }
diff --git a/vendor/archify/scripts/delivery-update-child.mjs b/vendor/archify/scripts/delivery-update-child.mjs
new file mode 100644
index 0000000..dfe6ad8
--- /dev/null
+++ b/vendor/archify/scripts/delivery-update-child.mjs
@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+
+import { checkForUpdate } from './check-update.mjs';
+
+// The parent can be busy in synchronous renderer work. Enforce its original
+// deadline here, in a separate event loop, so cache work cannot continue late.
+if (!/^\d{1,30}$/.test(process.argv[2] || '')) process.exit(1);
+const deadlineAt = BigInt(process.argv[2]);
+const remainingMs = Number(deadlineAt - process.hrtime.bigint()) / 1_000_000;
+if (remainingMs <= 0) process.exit(1);
+const deadlineTimer = setTimeout(() => process.kill(process.pid, 'SIGKILL'), remainingMs);
+deadlineTimer.unref();
+
+const result = await checkForUpdate({
+  ...(process.env.ARCHIFY_UPDATE_RELEASE_PATH
+    ? { releasePath: process.env.ARCHIFY_UPDATE_RELEASE_PATH } : {}),
+  ...(process.env.ARCHIFY_UPDATE_CACHE_DIRECTORY
+    ? { cacheDirectory: process.env.ARCHIFY_UPDATE_CACHE_DIRECTORY } : {}),
+  // Leave time to record a failed fetch, so a slow network backs off instead
+  // of being killed before its result reaches the cache.
+  timeoutMs: Math.max(1, Math.floor(remainingMs - 150)),
+});
+process.stdout.write(`${JSON.stringify(result)}\n`);
diff --git a/vendor/archify/skill-release.json b/vendor/archify/skill-release.json
index a6bf3e0..49739ec 100644
--- a/vendor/archify/skill-release.json
+++ b/vendor/archify/skill-release.json
@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "skillId": "archify",
   "channel": "stable",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "source": {
     "repository": "https://github.com/tt-a1i/archify"
   },