Open Horizons deployment operation
Execute one supplied live operation without acquiring planning, implementation, review, or repair authority.
When to invoke
- Execute an approved Terraform saved plan.
- Run an approved Open Horizons rollout or rollback.
- Run an approved deployment dry run or immediate verification.
- Resume a previously approved operation after revalidating its immutable package.
Prerequisites and context
The package must identify repository and ref, target environment, artifact path and digest, expected
actions, exact command, approval evidence, validation command, rollback command, and change window.
Authentication must already be configured for the approved operator identity.
Procedure
- Confirm the package is complete and approval applies to the exact artifact and command.
- Verify repository ref, clean or approved working-tree state, environment, subscription, tenant,
cluster, namespace, artifact digest, and expected action summary.
- Run repository prerequisite and configuration checks plus the approved dry run or plan inspection.
- Stop on drift, unexpected actions, stale approval, missing rollback, or failed validation.
- Present the exact mutating command, expected impact, and rollback immediately before execution.
- Obtain explicit confirmation for that command and execute it once without substitution or repair.
- Run the approved immediate verification and record sanitized identifiers, timestamps, and status.
- Report
PASS, ROLLBACK-REQUIRED, or BLOCKED; return defects to their owning agent.
Criteria
| Decision |
Required result |
| Execute |
Package, context, digest, expected actions, approval, and rollback all match |
| Stop |
Any ambiguity, drift, policy denial, validation failure, or unexpected action |
| Roll back |
Approved rollback trigger is met and the exact rollback command is authorized |
| Escalate |
Implementation, security, readiness, or reliability defect requires another owner |
Output template
## Deployment operation result
**Status:** PASS | BLOCKED | ROLLBACK-REQUIRED
**Environment:** <environment>
**Operation:** <dry-run | apply | rollout | rollback | verify>
**Artifact:** <path/ref and digest>
### Evidence
| Check | Result | Sanitized evidence |
| --- | --- | --- |
### Execution
- Approved command: `<exact command or not run>`
- Approval: <evidence or missing>
- Immediate verification: <result>
- Rollback status: <not required | ready | executed | blocked>
### Follow-up
- <owner and blocker or none>
Limits
- Do not author, edit, generate, or replace source, plans, manifests, configuration, or approvals.
- Do not infer approval from tests, labels, plans, dry runs, or previous conversations.
- Do not execute destroy, delete, public exposure, quota, paid-service, or identity changes unless
the exact operation and rollback are explicitly approved.
- Do not troubleshoot by changing the deployment package during execution.
Related primitives
| Name |
Type |
Use it when |
open-horizons-deployment-operator |
agent |
One approved live operation should execute this procedure. |
prerequisites |
skill |
Local tool and authentication prerequisites need validation. |
validation-scripts |
skill |
Repository-owned validation commands apply to the package. |
open-horizons-sre-investigator |
agent |
Independent post-operation diagnosis is required. |
Quality gate
1---2name: open-horizons-deployment-operation-23description: Executes one approval-gated Open Horizons deployment, rollout, rollback, or verification from an immutable change package. Use when the exact environment, artifact, command, expected actions, approval, validation, and rollback are already known.4---56# Open Horizons deployment operation78Execute one supplied live operation without acquiring planning, implementation, review, or repair authority.910## When to invoke1112- Execute an approved Terraform saved plan.13- Run an approved Open Horizons rollout or rollback.14- Run an approved deployment dry run or immediate verification.15- Resume a previously approved operation after revalidating its immutable package.1617## Prerequisites and context1819The package must identify repository and ref, target environment, artifact path and digest, expected20actions, exact command, approval evidence, validation command, rollback command, and change window.21Authentication must already be configured for the approved operator identity.2223## Procedure24251. Confirm the package is complete and approval applies to the exact artifact and command.262. Verify repository ref, clean or approved working-tree state, environment, subscription, tenant,27 cluster, namespace, artifact digest, and expected action summary.283. Run repository prerequisite and configuration checks plus the approved dry run or plan inspection.294. Stop on drift, unexpected actions, stale approval, missing rollback, or failed validation.305. Present the exact mutating command, expected impact, and rollback immediately before execution.316. Obtain explicit confirmation for that command and execute it once without substitution or repair.327. Run the approved immediate verification and record sanitized identifiers, timestamps, and status.338. Report `PASS`, `ROLLBACK-REQUIRED`, or `BLOCKED`; return defects to their owning agent.3435## Criteria3637| Decision | Required result |38| --- | --- |39| Execute | Package, context, digest, expected actions, approval, and rollback all match |40| Stop | Any ambiguity, drift, policy denial, validation failure, or unexpected action |41| Roll back | Approved rollback trigger is met and the exact rollback command is authorized |42| Escalate | Implementation, security, readiness, or reliability defect requires another owner |4344## Output template4546```markdown47## Deployment operation result4849**Status:** PASS | BLOCKED | ROLLBACK-REQUIRED50**Environment:** <environment>51**Operation:** <dry-run | apply | rollout | rollback | verify>52**Artifact:** <path/ref and digest>5354### Evidence55| Check | Result | Sanitized evidence |56| --- | --- | --- |5758### Execution59- Approved command: `<exact command or not run>`60- Approval: <evidence or missing>61- Immediate verification: <result>62- Rollback status: <not required | ready | executed | blocked>6364### Follow-up65- <owner and blocker or none>66```6768## Limits6970- Do not author, edit, generate, or replace source, plans, manifests, configuration, or approvals.71- Do not infer approval from tests, labels, plans, dry runs, or previous conversations.72- Do not execute destroy, delete, public exposure, quota, paid-service, or identity changes unless73 the exact operation and rollback are explicitly approved.74- Do not troubleshoot by changing the deployment package during execution.7576## Related primitives7778| Name | Type | Use it when |79| --- | --- | --- |80| `open-horizons-deployment-operator` | `agent` | One approved live operation should execute this procedure. |81| `prerequisites` | `skill` | Local tool and authentication prerequisites need validation. |82| `validation-scripts` | `skill` | Repository-owned validation commands apply to the package. |83| `open-horizons-sre-investigator` | `agent` | Independent post-operation diagnosis is required. |8485## Quality gate8687- [ ] Artifact identity and expected actions are immutable and verified.88- [ ] Live context matches the approved environment.89- [ ] A mutating command has immediate explicit approval.90- [ ] No source or package content changed during execution.91- [ ] Verification, rollback status, and sanitized evidence are recorded.
paulasilvatech