Guarded deploy
- Reusable pattern
- Use one release path. After smoke tests, match the artifact at the production pointer to the approved artifact. Repeat the identity check after a stability watch.
- Failure it targets
- Silent stale or partial promotion: a passing test on one version while another version serves users.
- How to check yours
- Can you print the production artifact ID and match it to what you approved?
- When a lighter approach may suffice
- Single-user tools that never reach production.