2026-10-01 — deploy leapfrog incident: docker-compose.yml bind-mounts the compose project directory at /app on unlikely-api / worker / scheduler, so whatever directory the last docker compose --project-directory pointed at IS production. Between 08:49 and 08:58 ET four parallel sessions re-pointed /app to four directories (a worktree at 554355c, then 4cf7c2d, then 08f040f, then the main tree), each pinned at its own commit, so each deploy dropped the others’ commits and MAN-9238 v3 was drafted on code without the cert fix. Rule: a clean-worktree deploy is only for a DIRTY main tree and must check out the MASTER TIP, never a session’s own sha; with a clean tree use the normal main-tree rebuild; docker inspect unlikely-api the /app mount source before deleting any deploy worktree and before drafting anything in-container. Production returned to /app ← /opt/unlikely-api at 8a65c7b (09:01 ET).