diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6a90e23b..607c2917 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,18 @@ The latest `## [X.Y.Z]` header must match the `version` field in `punkproject.to
 Entries are newest-first; one bullet per notable change. See the root `AGENTS.md`
 "Project Versioning" section for the bump policy.
 
+## [0.65.2] - 2026-08-08
+
+- `make.tcl` launch-site steering: the bootsupport-staleness fix block now
+  ends with a red-highlighted reminder to return to the project root for
+  the remaining steps (vfscommonupdate/bake are canonically root-launched
+  on the refreshed bootsupport snapshot, which also re-arms the staleness
+  check), and the src/-launch banner gains the same red canonical-mode
+  steer plus a "fine for bootsupport repair and source-tooling testing"
+  line. Early-site colour via ::punkboot::sgr - NO_COLOR/force/tty
+  precedence honoured, piped output stays ESC-free.
+- `make.tcl` dirty-src proceed countdown extended to 4 seconds (was 3).
+
 ## [0.65.1] - 2026-08-08
 
 - `make.tcl` bootsupport-staleness warning rewritten to explain the
diff --git a/punkproject.toml b/punkproject.toml
index 90915fa0..190c8bc6 100644
--- a/punkproject.toml
+++ b/punkproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "punkshell"
-version = "0.65.1"
+version = "0.65.2"
 license = "BSD-2-Clause"
 url = "https://www.gitea1.intx.com.au/jn/punkshell"
 #packager: declared identity for published artifacts (declarative, not proof -
diff --git a/src/make.tcl b/src/make.tcl
index cd6f8a9f..1dcef5c5 100644
--- a/src/make.tcl
+++ b/src/make.tcl
@@ -672,6 +672,9 @@ proc ::punkboot::lib::bootsupport_stale_warning {stale_modules invoked_cmd scrip
     puts stderr "  Recommended fix - the SAME commands launched from src/, so the updated"
     puts stderr "  source modules drive the update:"
     puts stderr "    cd $scriptfolder && tclsh make.tcl modules && tclsh make.tcl bootsupport"
+    puts stderr "  [::punkboot::sgr 31]Afterwards return to the project root for the remaining steps (vfscommonupdate,[::punkboot::sgr]"
+    puts stderr "  [::punkboot::sgr 31]bake ...) - routine runs are canonically root-launched on the bootsupport[::punkboot::sgr]"
+    puts stderr "  [::punkboot::sgr 31]snapshot you just refreshed, which also re-arms this staleness check.[::punkboot::sgr]"
     puts stderr "=============================================================================="
 }
 
@@ -1701,6 +1704,8 @@ if {[file tail $startdir] eq "src"} {
         puts stderr "------------------------------------------------------------------"
         puts stderr "Launched from within a folder ending in 'src'"
         puts stderr " - modules in $startdir/modules $startdir/lib (etc) may override bootsupport modules"
+        puts stderr " - fine for bootsupport repair and source-tooling testing"
+        puts stderr " - [::punkboot::sgr 31]routine producing runs (vfscommonupdate, bake ...) are canonically launched from the project root[::punkboot::sgr]"
         puts stderr "------------------------------------------------------------------"
     }
 }
@@ -4878,7 +4883,7 @@ if {$::punkboot::command in {bakehouse packages modules libs bake vfslibs bin bo
             if {![catch {chan configure stdin -inputmode}]} {
                 puts -nonewline stderr "  proceeding despite dirty src - ctrl-c now to abort "
                 flush stderr
-                foreach tick {3 2 1} {
+                foreach tick {4 3 2 1} {
                     puts -nonewline stderr "..$tick"
                     flush stderr
                     after 1000