service/donate.md

@@ -370,8 +370,12 @@ Most upgrades are performed automatically through Debian packages.
 On the staging servers (currently `donate-review-01`), `gitlab-runner`
 is excluded from unattended-upgrades and must be upgraded manually.
 
-The review apps are not upgraded unless new commits appear in their branch to
-trigger a rebuild.
+The review apps are upgraded when new commits appear in their branch,
+triggering a rebuild and deployment. Similarly, commits to `main` are
+automatically built and deployed to the staging instance.
+
+The production instance is only ever upgraded when a `deploy-prod` job in the
+project's pipeline is manually triggered.
 
 ## SLA