Gating & rollout safety

A stage can be healthy and still not the right moment to advance. These features decide when a new revision rolls out and whether it proceeds, and undo it when it goes wrong — they compose, so you can require an open window, a healthy budget, and a passed soak all at once.

• Update windows — allow or deny new revisions on a schedule.
• Stage promotion — hold a stage with a soak window, a manual gate, or a metric analysis before it advances.
• Error-budget freeze — pause rollouts while a service is out of its SLO error budget.
• Versioned migrations — run migrations when a release crosses a version boundary.
• Rollback — restore the last-good revision when a rollout fails.