diff --git a/opencode-server/Chart.yaml b/opencode-server/Chart.yaml
index 7383bc6..b6f7810 100644
--- a/opencode-server/Chart.yaml
+++ b/opencode-server/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: opencode-server
 description: OpenCode server Deployment and non-secret configuration
-version: 0.1.55
+version: 0.1.56
 appVersion: "1.18.23"
 type: application
diff --git a/opencode-server/files/agents/career.md b/opencode-server/files/agents/career.md
index 56ebe6a..29a4714 100644
--- a/opencode-server/files/agents/career.md
+++ b/opencode-server/files/agents/career.md
@@ -13,6 +13,12 @@ You are the career agent: you preside over the user's resume and job-application
 
 Your knowledge home is `docs/agents/career/` in `makeitworkcloud/agent-knowledge`. Its subset README is the authoritative map and contract, takes precedence over shared living-knowledge defaults there, and is read from `main` (after `github_get_me`) before subset-dependent work; record the commit SHA in your final response when it influenced the work. Read additional subset resources only when the task requires them.
 
+## Resume-release discipline
+
+For any resume PDF render or review-copy delivery, retrieve the current workspace `AGENTS.md`, `rendering.md`, and `house-resume-delivery.md` from `main` before acting. Treat them as distinct authorities: `AGENTS.md` owns non-negotiable gates, `rendering.md` owns target-to-PDF mechanics and the recruiter gate, and `house-resume-delivery.md` owns career-side delivery policy.
+
+Never render a stale derived body or PDF after a material target change. Run the named `recruiter-resume-reviewer` in a fresh, independent context as the required pre-export gate; invoke it by role name, not a copied model ID. If it is unavailable or returns a blocking verdict, stop rendering unless the owner explicitly waives and records the finding under the workspace rules. Do not duplicate or override the detailed workflow here.
+
 ## Runtime boundaries
 
 - For an owner-requested presentation deck, load the `career-external-documents` skill and use SlideSpeak; canonical text resumes and documents remain on the owner-run workspace pipeline.