From 761e710f29fba3ea2408c889261a55bfcbd06777 Mon Sep 17 00:00:00 2001
From: Lewis <lewis@tangled.org>
Date: Wed, 17 Jun 2026 18:31:01 +0300
Subject: [PATCH] appview/db,docs: prepare 115 for GA

Lewis: May this revision serve well! <lewis@tangled.org>
---
 appview/db/db.go |  7 +++++++
 docs/DOCS.md     | 19 +++++++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/appview/db/db.go b/appview/db/db.go
index 7a218e20..ab4060b5 100644
--- a/appview/db/db.go
+++ b/appview/db/db.go
@@ -2240,6 +2240,13 @@ func Make(ctx context.Context, dbPath string) (*DB, error) {
 		return err
 	})
 
+	orm.RunMigration(conn, logger, "migrate-knots-to-knot-owned-acl", func(tx *sql.Tx) error {
+		_, err := tx.Exec(`
+			update registrations set needs_upgrade = 1;
+		`)
+		return err
+	})
+
 	return &DB{
 		db,
 		logger,
diff --git a/docs/DOCS.md b/docs/DOCS.md
index 53ad5323..4b497837 100644
--- a/docs/DOCS.md
+++ b/docs/DOCS.md
@@ -1620,6 +1620,25 @@ This document is laid out in reverse-chronological order.
 Newer migration guides are listed first, and older guides
 are further down the page.
 
+## Upgrading to v1.15.0-alpha
+
+With v1.15.0-alpha, a knot itself owns its members and
+per-repo collaborators directly. Previously this data was sourced from
+PDS records (`sh.tangled.knot.member` and `sh.tangled.repo.collaborator`)
+that the appview and the knot both read off the firehose.
+The knot is now the source of truth and serves them over XRPC instead:
+
+- `sh.tangled.knot.addMember`, `sh.tangled.knot.removeMember`, `sh.tangled.knot.listMembers`
+- `sh.tangled.repo.addCollaborator`, `sh.tangled.repo.removeCollaborator`, `sh.tangled.repo.listCollaborators`
+
+Until your knot is upgraded, the appview keeps reading its
+members and collaborators from the old firehose-sourced records.
+Upgrade to move your knot onto knot-owned access control.
+
+- Upgrade to the latest tag (v1.15.0 or above)
+- Head to the [knot dashboard](https://tangled.org/settings/knots) and
+  hit the "retry" button to verify your knot
+
 ## Upgrading to v1.14.0-alpha
 
 Starting with v1.14.0-alpha, the fully knot uses the repoDID as its
-- 
2.51.2