Context
Deploys (helm/k8s referenced) need a safe rollout: canary a fraction of traffic, watch SLOs, and
auto-rollback on regression — for both backend and contract upgrades.
Scope
- Blue-green or canary rollout for the backend with automated health/SLO gating.
- For contracts: staged upgrade (timelock + canary verification) tied to the upgrade allowlist.
- One-command rollback runbook; rollback tested.
Acceptance criteria
- A bad deploy is auto-detected and rolled back without manual intervention.
Verification
- Canary with an injected error-rate regression triggers automatic rollback.
Context
Deploys (helm/k8s referenced) need a safe rollout: canary a fraction of traffic, watch SLOs, and
auto-rollback on regression — for both backend and contract upgrades.
Scope
Acceptance criteria
Verification