Build from a pinned commit, scan the SBOM, deploy to staging, smoke test, canary, monitor, and approve. Keep the artifact digest, change record, and tested rollback command.
Objective
publish a reviewed artifact.
Context
release candidate, migrations, monitoring, rollback, owner.
Decompose
build from pinned commit, scan SBOM, deploy to staging, smoke test, canary, monitor, approve.
Criteria
health checks, error budget, rollback command and backup are verified.
Security
no agent-held production secret beyond the minimum operation; log all actions.
Output
artifact digest, test evidence, change record, post-deploy watch window.
Handoff checklist
- Artifact and dependency scan
- Staging and smoke evidence
- Canary and watch window
- Rollback is tested
Editorial recipe adapted from the project’s September 2026 research brief. Commands, authority and acceptance tests must be matched to your repository. No production execution is implied.