Was only building + pushing; swarm kept running the previous image until someone ran service update --force. Mirror the frontend workflow: ssh in and `docker stack deploy --resolve-image always` so every main push rolls out. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>