update

README.md

@@ -177,12 +177,18 @@ a default company URL.
 
 V2 creates a random installation UUID and 256-bit credential in
 `/var/lib/ta-proxmenu/identity.env`. The directory is mode `0700` and the file
-is mode `0600`. On each interactive launch, TA-ProxMenu makes best-effort HTTPS
-calls to the configured broker to record the hostname, installation/upgrade
-state, start and completion status, duration, TA-ProxMenu and Git versions,
-PVE/OS/kernel versions, architecture, and whether the host is clustered. No
-background service is installed, and broker availability never prevents the
-menu from running.
+is mode `0600`. The first successful launch enrolls the host with the broker.
+Later launches make one best-effort HTTPS call on completion or failure to
+record the hostname, duration, result, TA-ProxMenu and Git versions,
+PVE/OS/kernel versions, architecture, and whether the host is clustered. A
+failed event schedules re-enrollment on the next invocation instead of adding
+another retry to the current run. No background service is installed, and
+broker availability never prevents the menu from running.
+
+Automatic Git update checks and the stable VirtIO release lookup are cached for
+24 hours. Their explicit **Check again** and **Refresh** actions bypass the
+cache. Installer, package-repository, and vendor download traffic occurs only
+after a technician selects the corresponding action.
 
 The hostname is treated as a limited operational identifier. The registry does
 not send machine IDs, MAC addresses, usernames, VM/container inventory,