[ejgallego]

This PR explains why a healthy CLI owner can be unreachable from a sandboxed command and gives concrete Claude Code setup options. It also records user-visible doctor and target-selection fixes missing from the Unreleased changelog.

• State the recovery precondition explicitly: confirm that the matching owner, daemon, and every other producer have stopped; otherwise stop and coordinate. A returned recovery command does not establish shutdown.
• Direct agents to the registered MCP tools when shell commands run in separate network namespaces; document Claude Code CLI exceptions and their limits.
• Add release notes for fix: preserve source validity and policy scope in client doctor #391, fix: keep doctor output consistent and explain missing runtimes #397, and fix: explain selected targets and preserve reinstall target sets #409, including retained installation targets and unchanged project toolchain and dependency pins.

[ejgallego]

Approved for landing at f4da621. The setup guide and installed skill now require independently confirmed producer shutdown before recovery and direct callers to MCP when shell commands use separate network namespaces. The #409 release note preserves project toolchain and dependency pins. No blocking findings; exact-head CI run 41622206953 passed.