Two channels, one changelog
Stable is what a deck ships on and what we recommend. Roughly one release every six weeks. Bench is the same build a week earlier. Both are signed and install over the service bus, and either can be rolled back to the previous two releases from the deck itself.
The changelog is published the day a release ships, lists the faults closed by reference number, and lists anything that regressed. A release that fixes one thing and slows another says so in the first line.
There is no automatic update. A deck does not change behaviour because we pushed something overnight; you install firmware when you decide to.