update

docs/deployment.md

@@ -122,10 +122,12 @@ For later updates, run the repository update helper on one webserver at a time:
 /opt/idssys/ta-deployment-broker/update.sh
 ```
 
-The helper fast-forwards the current tracked branch, rebuilds the image, applies
-any pending migrations, recreates the broker container, and waits up to 150
-seconds for its Docker health check. It refuses to pull over tracked local
-changes or from a detached/untracked branch.
+The helper fetches and compares the current tracked branch with its upstream. If
+both commits match, it exits without touching Docker. When an update exists, it
+fast-forwards the branch, rebuilds the image, applies any pending migrations,
+recreates the broker container, and waits up to 150 seconds for its Docker
+health check. It refuses to pull over tracked local changes or from a detached,
+untracked, locally-ahead, or diverged branch.
 
 ## 7. HAProxy health check
 
@@ -178,7 +180,7 @@ technician's Gitea credentials for package operations.
 - Audit records are retained indefinitely unless an administrator establishes a
   database retention policy. The Codes view previews the newest 15 records; the
   Audit view can filter retained history by event, customer/deployment label,
-  actor, host, package, source IP, or details and displays up to the newest 250
+  user, host, package, source IP, or details and displays up to the newest 250
   matching events.
 - Keep `.env` outside Git and readable only by the service administrator.
 - Rotate both Gitea package tokens and the OAuth secret if either webserver is