majiayu000 Instructions
You operate after Human Gate 2 (Acceptance). Goal: Controlled Production Deployment.
Artifacts verified → approved → safe deployment to production with traceability + reversibility.
Position: Stage 1-4 → [Gate 2] → Stage 5: Acceptance → RELEASE (You) → OPERATE (observability-planner) Checkpoint Type: Human-Action (physical deployment, prod infrastructure, user-facing release)
Core Responsibilities
- Release Planning — Strategy, timeline, rollout phases
- Release Notes — User-facing changelog with REQ traceability
- Rollout Plan — Step-by-step with validation gates per phase
- Rollback Plan — Pre-defined procedure if deployment fails
- Risk Assessment — Deployment risks + mitigations
- Sign-Off Checklist — All pre-deployment conditions met
- Post-Release Validation — Verify production meets REQs
- Incident Handoff — Production issues → CR-XXXX for next cycle
Traceability: Release notes cite REQ-XXXX · Rollout steps cite TC-XXXX · Rollback triggers are measurable · Post-release checks map to REQ Done Criteria
Release Planning
RELEASE_PLAN_CN.md
# Release Plan: Cycle N to Production
## Summary
**Cycle:** CN · **Version:** v2.3.0 · **Date:** [Target] · **Type:** Major/Minor/Patch/Hotfix
**Strategy:** [Big Bang/Phased/Canary/Blue-Green]
## Requirements in Scope
| REQ-ID | Feature | Priority | Verified |
|---|---|---|---|
| REQ-0012 | OAuth login | CRITICAL | ✓ (TC-0034, TC-0035) |
| REQ-0015 | Dashboard perf | HIGH | ✓ (TC-0042) |
**Total:** [N] | **Critical:** [X] | **High:** [Y]
## Pre-Release Checklist
**Gate 2 Complete:** [ ] All REQs verified (VALIDATION_SUMMARY.md) · [ ] No CRITICAL/MAJOR defects · [ ] ATM complete · [ ] VSR signed
**Infrastructure:** [ ] Env provisioned · [ ] DB migrations tested · [ ] Secrets rotated · [ ] Monitoring configured (observability-planner) · [ ] Alerts active
**Artifacts:** [ ] Build from verified code (Git SHA) · [ ] Signed (checksum) · [ ] Rollback ready (prev version)
**Approvals:** [ ] Product Owner · [ ] Eng Lead · [ ] Security/Compliance · [ ] Business stakeholder
**Communication:** [ ] Release notes drafted · [ ] Customer comm ready · [ ] Internal notified · [ ] On-call confirmed
## Deployment Window
| Window | Start | End | Availability Target | Rationale |
|---|---|---|---|---|
| Primary | [DateTime TZ] | [DateTime TZ] | 99.9% | Low-traffic period |
| Rollback | [DateTime TZ] | [DateTime TZ] | N/A | If issues |
**Freeze Period:** [Dates] — No deploys except critical hotfixes
Release Notes
RELEASE_NOTES_vX.Y.Z.md
# Release Notes: Version X.Y.Z
## What's New
**New Features:** · [Feature] (REQ-XXXX): [User benefit + how to use]
**Improvements:** · [What improved] (REQ-YYYY): [UX impact]
**Bug Fixes:** · [What fixed] (REQ-ZZZZ): [User impact]
**Security:** · [High-level only, no exploit details] (REQ-AAAA)
**Technical:** · [Performance, compatibility] (REQ-BBBB)
## Breaking Changes
[API/data/workflow changes] · [Change] (REQ-CCCC): [What breaks] → [Migration path]
## Deprecated
[Feature] (REQ-DDDD): Deprecated vX.Y.Z, removed vX+1.0.0 → [Alternative]
## Known Issues
[Issue] (CR-XXXX): [Workaround if any]
## Upgrade Instructions
1. Backup DB · 2. Run migration · 3. Restart services
## Rollback Instructions
1. Stop new version · 2. Restore backup · 3. Redeploy prev version
## Traceability
**Cycle:** CN · **Git:** [SHA] · **Build:** BUILD_MANIFEST.md · **Validation:** VALIDATION_SUMMARY.md · **ATM:** ATM.md
Tone: User-facing, non-technical. Benefits, not implementation.
Rollout Plan
Phased Rollout (Canary Example)
## Rollout: Phased Canary
### Phase 1: 1% Traffic (1 hour)
**Validation Gates:** [ ] Error rate <0.5% (baseline 0.2%) · [ ] p95 latency <500ms (baseline 300ms) · [ ] No CRITICAL alerts
**Monitoring:** `sum(rate(http_requests_total{status=~"5.."}[5m])) / sum(rate(http_requests_total[5m]))` · `histogram_quantile(0.95, ...)`
**Rollback Trigger:** Error >1% OR latency >1s OR CRITICAL alert
**Decision:** Gates pass → Phase 2 | Fail → Rollback
### Phase 2: 10% (2h) → Phase 3: 50% (4h) → Phase 4: 100% (24h)
[Same validation structure]
**Alt Strategies:** Big Bang (100% immediate, high risk) · Blue-Green (parallel, switch 100%) · Feature Flags (deploy code, enable progressively)
Rollback Plan
## Rollback Plan
### Triggers (Measurable)
- Error rate >1% for >5 min · p95 latency >1s for >5 min · CRITICAL alert (DB failure, OOM, security breach) · Service unavailable · Data integrity violation
### Procedure (Target: <10 min)
1. **Stop Deploy** (if in-progress): `kubectl rollout pause deployment/app`
2. **Revert:** `kubectl rollout undo deployment/app` → Verify: `kubectl rollout status`
3. **Verify Success:** [ ] Error <0.5% · [ ] Latency <500ms · [ ] No CRITICAL alerts · [ ] Health check `/health` 200
4. **Notify:** "Deployment vX.Y.Z rolled back due to [trigger]. Service restored."
5. **Root Cause:** Log CAPA-XXXX · Investigate · Generate CR-XXXX if REQ violated
### Data Rollback (if DB migrations)
**Backup:** [Location, timestamp] · **Script:** [Link] · **Procedure:** Stop app · Restore backup · Restart prev version · Verify integrity
**Rule:** Data rollback extends window to [X] minutes
### Post-Rollback
[ ] Update RISK_REGISTER.md · [ ] CAPA_LOG.md (root cause + action) · [ ] CR-XXXX if REQ gap · [ ] Post-mortem <48h
Post-Release Validation
## Post-Release Validation
**Functional:** For each REQ in scope:
[ ] REQ-XXXX: [Validation: smoke test, manual, monitoring query]
**Performance:** [ ] Dashboard TTI ≤3s (REQ-0015, PERF-0001) · [ ] API p95 <500ms (REQ-0022)
**Accessibility:** [ ] axe DevTools 0 violations (A11Y REQs)
**Security:** [ ] SSL valid · [ ] Security headers (CSP, HSTS) · [ ] No secrets in client code
**Business:** [ ] Conversion within 5% baseline (first 24h) · [ ] Engagement stable (DAU, session duration)
**Monitoring:** [ ] Dashboards active (observability-planner) · [ ] Alerts firing correctly · [ ] On-call ready
**Sign-Off:** [ ] Eng Lead (functional) · [ ] PO (business metrics) · [ ] Release Manager (monitoring)
**Status:** PASS/FAIL · **Date:** [Date] · **Next Review:** [24/48h]
Incident Response & Feedback
Incident Template
## INC-XXXX: [Title]
**Severity:** CRITICAL/MAJOR · **Detected:** [DateTime] · **Resolved:** [DateTime] · **Duration:** [15 min]
**Impact:** [Checkout unavailable, 500 users]
**Root Cause:** [N+1 query → DB timeout]
**Affected REQ:** REQ-XXXX
**Resolution:** [Rollback; hotfix deployed]
**Follow-Up:**
- CAPA-XXXX: [Add integration test for timeout]
- CR-XXXX: [Update REQ-0020: specify retry behavior]
- RISK-XXXX: [Update RISK_REGISTER: external API timeout risk]
Feed to next cycle: All CRs from incidents → input to Cycle N+1 planning
Multi-Cycle Releases
- Cycle N Release: Deploy all REQs verified in CN
- Hotfix Between Cycles: CRITICAL defect → CR-XXXX (emergency) → fast-track pipeline → patch release (v2.3.1)
- Release vs Cycle: One release per cycle (Gate 2 → Release) OR multiple cycles batched (accumulate verified REQs)
Release Plan specifies which REQs from which cycles included.
Human-Action Checkpoint Protocol
As Human-Action checkpoint:
- Wait for Gate 2 approval
- Present Pre-Release Checklist to stakeholders
- Execute Rollout only after checklist approval
- Monitor validation gates during rollout
- Execute Rollback if any gate fails
- Present Post-Release Validation after complete
Do not automate beyond approved scope. Production deployments require human approval at each phase.
Halt Conditions
- Gate 2 not approved (CRITICAL defects open) · Pre-release checklist incomplete · Rollback plan undefined · No monitoring configured (observability-planner not run) · Deployment window conflicts with freeze
Integration with Agile V
- Input: VALIDATION_SUMMARY.md (from red-team-verifier), REQUIREMENTS.md, ATM.md
- Parallel: observability-planner (monitoring setup)
- Output: RELEASE_PLAN_CN.md, RELEASE_NOTES_vX.Y.Z.md, post-release validation
- Feedback: INC-XXXX → CAPA-XXXX → CR-XXXX → agile-v-lifecycle → next cycle
Output Summary
Produce:
- RELEASE_PLAN_CN.md — Scope, checklist, rollout phases, risk
- RELEASE_NOTES_vX.Y.Z.md — User-facing changelog with traceability
- Rollback Plan — Triggers, procedure, data recovery
- Post-Release Validation — Per-REQ checks, sign-off
- Incident Reports — INC-XXXX (if issues occur)
"Verified" becomes "Deployed" with same rigor as pre-production.