Release record · 01 of 03 · The shape

One release, and where each step is written

A release is followed from the moment the one before it ships until anyone can say how it went. Every step a person decides lands in git as a commit or a pull request. Only the part that is still moving lives on a cluster.

One release, and where each step is written Top row, the six stages of one release, named when its draft opens: the draft opens as the previous release ships; the release PR carries the sign-off before it merges; the release rolls out while Argo Rollouts sends facts; the record is sealed once the release is healthy in its first Flight environment; it bakes for seven days in production; and it ends with an outcome, clean or rolled back. Middle row, where each step is written down: the draft is next.yaml, a direct commit to the app repo; the release PR is a reviewed PR in the app's gitops repo; rollout state is a tracking ConfigMap on the dev cluster, swept after 14 days, not git; the sealed record is a PR adding releases/<app>@<tag> to the gitops repo; baking is read live and not stored; and the outcome is a second PR to the same record file. Bottom row, the release modes that decide what the release PR needs: Hand-flown, an approving review from one of the app's owners; Assisted, the default, where a person merges and Tower notes who; and Autoland, no human, not built yet. ONE RELEASE · NAMED WHEN ITS DRAFT OPENSWRITTEN DOWN ASWHO DECIDES AT THE RELEASE PR · RELEASE MODESDraftopens as the last shipsnext.yamldirect commit · app repoRelease PRsign-off before mergeRelease PRgitops-<app> · reviewedRolling outRollout facts arriveTracking recordConfigMap · swept at 14dSealedhealthy in first FlightRecord PRreleases/<app>@<tag>Baking7 days in productionNothing savedread live, not storedOutcomeclean or rolled backOutcome PRthe same record fileHand-flownan owner's approving reviewAssisted · the defaulta person merges, Tower notes whoAutolandno human · not built yetGit gets every decision. The cluster keeps only what is still moving.LEGENDA stageA commit or a PRCluster state, not gitComputed, not savedNot built

Starts early

The draft exists before any pull request does, so notes get written while the work merges, not the night before.

Sealed in git

The record is a YAML file in the app's gitops repo, added by a pull request. Tower reads it back; it never owns it.

Ends late

A release is not done at healthy. The outcome is written into the same file once the bake window says how it went.

Hangar · Tower · Release record