diff --git a/.env.release.example b/.env.release.example
index a7751882..c5ac104a 100644
--- a/.env.release.example
+++ b/.env.release.example
@@ -12,6 +12,11 @@ REDIS_IMAGE=redis:7-alpine
 # Default to localhost so `runtime.sh up` works as a zero-config quickstart.
 SKILLHUB_PUBLIC_BASE_URL=http://localhost
 
+# Suite Bundle rollout controls. Confirmation is opt-in; review writes remain enabled
+# for the single-server release Compose topology.
+SKILLHUB_SUITE_BUNDLE_CONFIRMATION_ENABLED=false
+SKILLHUB_SUITE_REVIEW_WRITES_ENABLED=true
+
 # Frontend usually keeps this empty and proxies to the backend through nginx.
 SKILLHUB_WEB_API_BASE_URL=
 SKILLHUB_API_UPSTREAM=http://server:8080
diff --git a/compose.release.yml b/compose.release.yml
index 7b84eb56..c707db08 100644
--- a/compose.release.yml
+++ b/compose.release.yml
@@ -72,6 +72,7 @@ services:
       SPRING_DATA_REDIS_CLIENT_NAME:
       SKILLHUB_REDIS_SENTINEL_CHECK_SENTINELS_LIST:
       # Compose replaces its single Server without an old/new mixed-version window.
+      SKILLHUB_SUITE_BUNDLE_CONFIRMATION_ENABLED: ${SKILLHUB_SUITE_BUNDLE_CONFIRMATION_ENABLED:-false}
       SKILLHUB_SUITE_REVIEW_WRITES_ENABLED: ${SKILLHUB_SUITE_REVIEW_WRITES_ENABLED:-true}
       SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-false}
       SKILLHUB_PUBLIC_BASE_URL: ${SKILLHUB_PUBLIC_BASE_URL:-}