Deploy checklist
Mark an item UNVERIFIED when its evidence is unavailable (no CI status, no dashboard access). Never infer it as passed.
Pre-deploy
- Detect the package manager from the lockfile and run the repository's actual test, lint, typecheck, and build commands. Require green CI and the intended release branch.
- For migrations, verify local/staging execution, backward compatibility, backup, expected lock/runtime, and tested rollback.
- Verify feature-flag defaults and rollout percentages for risky behavior.
- Confirm dashboards, error tracking, alerts, and explicit abort thresholds.
- Draft deployment/client/status communication when needed, but do not send without explicit authorization.
- Write the exact rollback command, estimated recovery steps, and trigger metrics.
- Confirm an appropriate deployment window and an owner available for at least one hour of monitoring.
- Return
GOorNO-GO. Any failed or UNVERIFIED item from steps 1–7 meansNO-GO; list what would turn it intoGO.
Post-deploy
- Monitor error rate and latency against the abort thresholds.
- Inspect new exceptions.
- Run a critical-flow smoke test.
- Record the result (stable, or rolled back with the trigger) in the closing status block; when
docs/runbooks/has a deploy runbook, offer the line for it.
Never invent provider-specific commands. Derive them from repository configuration or ask for the missing deployment target.
End by offering the brain-capture skill when the deployment taught a lasting lesson.
Stop point
Stop at the GO/NO-GO verdict before the deployment; after it, stop at the result recorded in the closing status block. The user runs the deployment.
Never
- Deploy, run a production migration, or change a feature flag.
- Send deployment, client, or status communication without explicit authorization.
- Mark an item passed without evidence.
- Invent provider-specific commands.