Release gate · —
Loading release state…
Lifecycle · all 9 GitLab stages
Watch · production monitor and incidents
—Every four hours a scheduled pipeline re-runs the live probes and checks that Cloud Run serves exactly the approved digest with the declared settings. A failure triggers the Duo flow, which opens an incident with a diagnosis and waits for a person. It never changes production.
Newest scheduled check
Scheduled runs (oldest → newest)
Incidents opened by the Duo flow
Duo remediation
Duo flowEvery Duo fix starts as a plan a person approved on the merge request. Fix MRs live on guardian/fix-* branches and count as verified only when CI proves the new test fails on the old code and passes on the fix.
Build provenance
—Security gate
—Production · Cloud Run
—Each release deploys a no-traffic candidate, smoke-tests it, promotes it, re-checks production and rolls back automatically on failure.
Image smoke test (CI)
Recent pipelines
| Pipeline | Ref | Commit | Status | When |
|---|