fix(brain): align Ubuntu-only descriptions with action fences

CHANGELOG.md

@@ -12,6 +12,12 @@ Releases before `0.2.5` predate the public launch; their notes live in the
 
 ## [Unreleased]
 
+### Fixed
+
+- Align planner action descriptions with the Ubuntu execution fence, including
+  Ufw and the other tool families moved to shared or Debian-family support.
+  Guard both directions of the description/fence relationship (#416).
+
 ## [0.15.0] — 2026-09-10
 
 ### Changed

README.md

@@ -314,7 +314,7 @@ milestone.
 | **Every Ubuntu LTS validated** — 22.04, 24.04 and 26.04 all at 79/79, each with a replay twin that reproduces it | ✅ |
 | Telegram approval interface | 📋 roadmap |
 
-**1,852 Rust tests and 72 frontend tests** form the current deterministic
+**1,853 Rust tests and 72 frontend tests** form the current deterministic
 release baseline.
 
 ## Configure your LLM

docs/distro-support.md

@@ -91,7 +91,7 @@ family and the atomic story family are implemented and covered by the workspace
 suite. What is missing is a way to put the helpers somewhere the daemon's own
 grants already point.
 
-The deterministic workspace baseline is 1,852 Rust tests plus 72 frontend
+The deterministic workspace baseline is 1,853 Rust tests plus 72 frontend
 tests. Those tests verify action construction, policy, approval, storage, and
 UI behavior, but they do not replace a real distribution VM run.
 

docs/introduction.md

@@ -141,7 +141,7 @@ flow.
 
 ## Status
 
-190 typed actions · 1,852 Rust tests + 72 frontend tests · MIT
+190 typed actions · 1,853 Rust tests + 72 frontend tests · MIT
 
 SysKnife is the reference implementation of the
 [LACS specification](https://github.com/lacs-project/specification) — a

tests/evidence/workspace-tests.json

@@ -4,6 +4,6 @@
     "tests": "cargo nextest run --workspace --locked"
   },
   "frontend_tests": 72,
-  "tests": 1852,
+  "tests": 1853,
   "version": 2
 }