Heinzel Pro follows a server to its new address

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 3.2.1 — 2026-10-18
+
+- **Heinzel Pro follows a server to its new address.**
+  `rules/rollback-timer.md` no longer asks to enter a
+  new address in the server's form before the disarm:
+  Pro's `follow_address` tool moves the server once the
+  new address shows the pinned host key.
+
 ## 3.2.0 — 2026-10-18
 
 - **Every change has a way back, decided first.**

VERSION

@@ -1 +1 @@
-3.2.0
+3.2.1

rules/rollback-timer.md

@@ -159,8 +159,10 @@ guard hook denies a redirect onto a computed target.
    `pkill -F /var/run/heinzel-rollback-<ts>.pid`.
    Heinzel Pro sends every command naming
    `heinzel-rollback-` over a new login of its own,
-   so there the disarm is its own confirmation; enter
-   a new address in the server's form first.
+   so there the disarm is its own confirmation. After
+   an address change call its `follow_address` tool
+   first; it moves the server once the new address
+   shows the pinned host key.
    Check the timer is gone, then persist the runtime
    change (firewalld: repeat the command with
    `--permanent`) and update server memory with the