Two channels, one changelog
Stable is what a deck ships on and what we recommend. Roughly one release every six weeks. Bench is the same build a week earlier, for people who would rather find our mistakes than wait for them. Both are signed; both install over the service bus; either can be rolled back to the previous two releases from the deck itself.
The changelog is published the day a release ships, lists the faults closed by reference number, and lists anything that regressed. A release that fixes one thing and slows another says so in the first line.
There is no automatic update. A deck does not change behaviour because we pushed something overnight; you install firmware when you decide to.