diff --git a/docs/guides/startos-packaging.md b/docs/guides/startos-packaging.md
index a233d2e..6ea9bfb 100644
--- a/docs/guides/startos-packaging.md
+++ b/docs/guides/startos-packaging.md
@@ -39,9 +39,14 @@ silently no-ops an install whose version equals what's already installed. Run
 
 ```
 ~/.keysat/publish.sh                       # version-gate → make universal → FileBrowser upload → registry register → GitHub mirror → make install (deploy to live host, best-effort)
-~/.keysat/deploy-sites.sh landing docs     # push static sites; accepts: landing | docs | registry-landing
+~/.keysat/deploy-sites.sh                   # DEFAULT: deploy ALL public sites (landing + docs + registry-landing). Re-uploads every site so the live HTML always matches its repo, even unmodified ones — preferred over a single-site deploy so nothing drifts.
+~/.keysat/deploy-sites.sh docs              # or name one/more explicitly: landing | docs | registry-landing
 ```
 
+Prefer the no-arg form (all sites) whenever pushing any site change, so every
+public page is at its repo's latest. The site repos are independent of the s9pk
+release, so deploying them is separate from `publish.sh`.
+
 Credentials: `~/.keysat/filebrowser.env` (`chmod 600`); env `KEYSAT_FB_USER`,
 `KEYSAT_FB_PASS`. Daemon runtime env: `KEYSAT_ADMIN_API_KEY`, `KEYSAT_LICENSE`,
 `KEYSAT_OPERATOR_NAME`, `KEYSAT_PUBLIC_URL`, `BTCPAY_URL`, `BTCPAY_BROWSER_URL`,