POST /api/installs/update-request, signed like the heartbeat: opens an update_requested alert and emails the alert address once; the next heartbeat on a newer version resolves it. Shares the signature check with the heartbeat and syncs docs/hub-protocol.md with the install's copy. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>