The image job built as root and uploaded as the deploy user, so publish-image.sh could not write SHA256SUMS (v0.3.0's image job failed). The job hands the directory over after the build, and publish-image.sh checks the SHA256SUMS build-image.sh wrote instead of rewriting it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>