Harden security

INSTALL.md

@@ -6,7 +6,7 @@ Use this first. Then read `README.md` for feature and operation-mode details.
 
 ## 1) Prerequisites
 
-- Linux host with either Podman + podman-compose wrapper or Docker Compose compatibility.
+- Linux host with Podman.
 - Git.
 - Network access for service images and Python dependencies.
 
@@ -99,7 +99,7 @@ make log
 Basic stack status:
 
 ```bash
-docker-compose --env-file=stack.env ps
+make status
 ```
 
 ## 7) Restart conventions
@@ -115,7 +115,7 @@ Use the explicit `make stop && make run` command sequence when a full recycle is
 ### Single service restart
 
 ```bash
-docker-compose --env-file=stack.env restart <service>
+podman restart <container-name>
 ```
 
 If single-service restart fails due to dependency/pod state, use full recycle above.
@@ -127,7 +127,7 @@ After changing UR/runtime code (`core/clients/*`, transport, relay paths), resta
 Minimum target:
 
 ```bash
-docker-compose --env-file=stack.env restart ur
+podman restart ur_gia
 ```
 
 If blocked, use full recycle.