Release integrity

Every deployment has an identity and a return path.

A release is accepted only when its source commit, build manifest, checksums, migrations and rollback command agree.

01

What a verified release records

The public site and the operational platform are deployed independently, but refer to the same canonical source revision.

  1. 01

    Commit SHA

    The exact source revision used by the build.

  2. 02

    Artifact checksums

    Integrity values for deployed packages and configuration.

  3. 03

    Migration state

    The database version expected by the release.

  4. 04

    Rollback

    A tested command and the previous compatible artifact.