Menu
Release discipline — versioning, feature flags, progressive delivery, rollback. The deploy-side counterpart to pipeline-discipline (CI-side).
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Context engineering — memory navigation, textual graph traversal, progressive disclosure, recovery. Load when assembling context for a task or when lost.
Implementation-side security discipline — headers, dependencies, secrets, authz. Load for hardening work (sec-ops domain).
Commit conventions, branching, anchors in messages, and the git safety rules. Load for any git operation beyond status/diff.
Anti-generic-AI design discipline — bans, tells, and the slop test. Load for ANY new UI surface or visual redesign. Inspired by Impeccable (Apache 2.0).
Motion & animation discipline — purpose, performance, reduced-motion. Load when work involves animation, transitions or scroll effects.
Microcopy discipline — buttons, errors, empty/loading/success states, alt text. Voice and tone come from the project's memory, not from this skill.
Based on SOC occupation classification
| name | release-engineering |
| description | Release discipline — versioning, feature flags, progressive delivery, rollback. The deploy-side counterpart to pipeline-discipline (CI-side). |
pipeline-discipline gets code to deployable; this is how it reaches users without taking them down. Platform mechanisms from memory-long §stack.
Every release is an immutable, identified artifact (semver or date+sha) — "deploy latest" is not a version · the artifact that passed the gates is the artifact that ships (rebuilding for prod invalidates the testing) · changelog generated from conventional commits (anchors make it free — see git-workflow).
Rolling (default, cheap) → blue-green (instant cutover + instant rollback, 2x cost during deploy) → canary (percentage-based, needs real observability to judge — see the RED metrics) · database changes decouple from code deploys via expand-contract (see data-safety) — a rollback that can't run against the new schema is not a rollback.
Deploy ≠ release: ship dark, enable progressively · every flag has an owner and an expiry — flags without cleanup dates become permanent config nobody understands (flag debt = DEBT-*) · kill switches for risky paths are flags designed in advance, not hotfixes.
No deploy without a tested rollback story — roll back the artifact, roll forward the data (expand-contract makes this possible) · rollback is a button/one command, not a runbook of manual steps · after any rollback: incident note + the gate that should have caught it (feeds incident-response postmortem).
Release PRs state: strategy chosen + why · rollback command · flags involved + owners · prod deploy triggers remain propose-only, human executes (ops-dev instructions rule).
