Page 8 of 8~112 min topic

Canary deploy lab

Run acceptance tests and make the ship call

A second person can reproduce 5% canary healthy 20m → promote to 25%; guardrail breach → weight 0 in < 2m from a clean checkout and name the owner for CANARY-PROMOTE-BLIND-6.

~14 min this pageProduction ship gate

1Try it yourself

Decision drill

Canary deploy desk

Split traffic, watch metrics, rollback or promote — never big-bang without a safety net.

Release safety72%

1/3You routed 10% of traffic to v2. Smoke looks fine so far.

2Learn the idea

Read

Clean-room demo

From a fresh clone/directory, run the commands that prove 5% canary healthy 20m → promote to 25%; guardrail breach → weight 0 in < 2m. A second person plays release commander watching revision-sliced error rate and follows your script without coaching. The demo includes limitations: what containerized answer API releasing image v2 at 5%→25%→100% weights still will not do.

Read

Evidence pack

Bundle: contract snippet, passing tests, metric snapshot for canary_weight, error_rate_by_revision, grounded_rate_by_revision, security negative probe, rollback note, owner name. Reference CANARY-PROMOTE-BLIND-6 as the drill you rehearsed. If any item is missing, the ship gate fails even if the happy path dazzles.

Read

Implementation artifact

./scripts/canary_drill.sh --breach-groundedness --expect-weight 0 --sla-seconds 120

Read

Ownership and next review

For Canary deploy lab, name the human who gets paged, the review date for thresholds, and the condition that triggers reevaluation. Endpoint POST /answer remains the production surface you operate for containerized answer API releasing image v2 at 5%→25%→100% weights — not a slide. Keep CANARY-PROMOTE-BLIND-6 in the handoff template so the next owner inherits the drill.

Read

Stage depth

After the peer demo, schedule the next threshold review date. File a short changelog that mentions CANARY-PROMOTE-BLIND-6 and the control that addresses it. Archive the evidence pack where your team already stores launch records. Resist rewriting everything “for real production” in one weekend — operate this slice until the metrics bore you, then widen. Final self-check: if telemetry vanished, would you still know to hold? If yes, you learned the operating posture this lane teaches.

Read

Field notes for `canary-deploy-lab` / `mastery-ship`

Trim the demo script until every command is necessary. Record a peer signature line: name, date UTC, pass/fail. File known limitations as bullets, not apologies. Link the evidence pack from the README. Schedule the next game day on a calendar, even if it is solo. Archive the branch tag or release digest you actually shipped. In this chapter the product is containerized answer API releasing image v2 at 5%→25%→100% weights, the human stakeholder is release commander watching revision-sliced error rate, and the incident id you design against is CANARY-PROMOTE-BLIND-6. Re-state the oracle in your notes — 5% canary healthy 20m → promote to 25%; guardrail breach → weight 0 in < 2m — and keep the invariant visible: promote only if canary error_rate ≤ baseline+0.5pp and groundedness ≥ baseline−1pp for two 10m windows. Track canary_weight, error_rate_by_revision, grounded_rate_by_revision as the scoreboard. Surface under change control: POST /answer. If you only have forty minutes, finish the fixture for automation promotes while scrape_up{revision=v2}==0 before polishing UI. Promotion language stays ternary: promote, hold, or roll back based on evidence, not hope.

Go deeper

Before you start

Why this matters

Draft a two-minute demo script that proves 5% canary healthy 20m → promote to 25%; guardrail breach → weight 0 in < 2m from a clean directory. Include the failure rehearsal for automation promotes while scrape_up{revision=v2}==0 and the rollback/owner line. If the script needs tribal knowledge, the lab is not shipped.

In the wild

See how this idea shows up as a product and a company — then come back to the lesson. Skills transfer across vendors.

Check your understanding

Page assessment

Answer from memory. Completion is saved from this evidence, not from opening the next page.

1. Can a peer reproduce without coaching?
2. Does the pack include canary_weight, error_rate_by_revision, grounded_rate_by_revision and rollback?
3. Is ownership for CANARY-PROMOTE-BLIND-6-class events explicit?

All responses are required.